Privacy Policy

Applies to the Shop Shahar customer app for Android (com.aryalakash.shopshahar) and to shopshahar.com. Last updated: 4 October 2026.

Shop Shahar is an online marketplace operated by Techcraft I.T. Solution, Nepal (“we”, “us”), which is responsible for the personal information described here. Sellers list products, customers order them, and delivery riders bring them to the door. This policy explains what personal information we collect when you use the app or the website, why we collect it, who it is disclosed to, and how you can have it deleted.

The short version. We collect the details needed to run your account and deliver your orders — your name, phone number, delivery address, an optional email address, and your order history. We do not sell your data, we do not use it for advertising, and the app contains no analytics or advertising trackers.

1. Information we collect

We only collect information you give us, plus one identifier the app generates for itself. We do not collect anything in the background.

What	When	Why
Name	When you register, and when you save a delivery address	To identify your account, and so the rider knows who to hand the parcel to
Phone number	When you register with a phone number, and on every delivery address you save (if you signed in with Google or Facebook, at your first order)	Account identification and sign-in, and so you or the rider can be contacted about a delivery
Email address (optional)	If you choose to add one at registration or in your profile, or when you sign in with Google or Facebook (see below)	An alternative sign-in and a route for password resets. You can use the app without one
Delivery address	When you save an address — area, city and an optional landmark and label	To quote a delivery charge and deliver your orders
Password	At registration and when you change it	To secure your account. It is stored only as a one-way hash and is never readable by us
Google or Facebook account details (only if you choose “Continue with Google” or “Continue with Facebook”)	When you sign in or register with Google or Facebook	To create your Shop Shahar account or sign you in to it. We receive your name, your email address (if you have shared one with that service) and an account ID that Google or Facebook issues for Shop Shahar. See “Signing in with Google or Facebook” below
Account identifier	Created by us when you register	To link your orders, addresses and cart to your account
Order and purchase history	Each time you place an order	To fulfil the order, show it in your order history, pay the seller, and meet accounting and tax obligations
App instance identifier	Generated by the app on first launch — a random identifier tied to the app, not to your device hardware	So a basket you fill before signing in is still there after you sign in
Search terms	When you search the catalogue	Sent to our server only to return matching products, and not stored against you. Your recent searches are saved on your own device and never leave it

Signing in with Google or Facebook

Signing in with Google or Facebook is optional; you can always register with a phone number and password instead. If you use it:

We receive only your name, your email address and an account ID from Google or Facebook. We use them only to create your Shop Shahar account or sign you in, and to recognise you the next time you sign in that way.
If an account with the same verified email address already exists — for example your seller account — we sign you in to that account rather than creating a second one.
We never receive your Google or Facebook password, and we do not access your contacts, friends list, photos or posts. We never post anything to your Google or Facebook account, and we do not use this data for advertising.
We do not keep the access token Google or Facebook issues after the sign-in has completed.
To stop it, remove Shop Shahar in your Facebook settings (Settings & privacy → Settings → Apps and websites) or your Google Account (Security → Your connections to third-party apps & services). To delete the data we hold, delete your Shop Shahar account — this also removes the link to Google or Facebook (see section 5 and our data deletion page).

What we do not collect

No location data. The app does not request location permission and does not collect GPS or approximate location. Your delivery address is typed by you.
No photos, camera, files or contacts. The app requests no such permission.
No analytics or advertising. The app contains no analytics SDK, no crash-reporting SDK, no advertising SDK and no advertising identifier. We do not build advertising profiles and we run no ads.
No payment card details. Orders are cash on delivery. We never see or store a card, bank or wallet number.

2. Who your information is disclosed to

We do not sell your personal information, and we do not share it with third parties for their own marketing. When you place an order, some details are passed to the people who have to fulfil it — this is the point of ordering, and only the minimum is passed:

The seller you bought from receives your name and your delivery area. Sellers are not given your phone number or your full address.
The delivery rider assigned to your order receives your name, phone number and full delivery address, because they have to find your door and call you if they cannot.
Our hosting provider, Hostinger, stores the data and sends our emails on our behalf as a service provider, under contract, and does not use it for its own purposes. Our servers are located in India.
Authorities, where we are legally required to disclose information.

3. How your information is protected

All traffic between the app and our servers is encrypted in transit with HTTPS. The app refuses unencrypted connections.
Your sign-in token is held in encrypted storage on your device.
Passwords are stored only as salted one-way hashes.
Access to customer data by our staff is limited to what is needed to run the service and support you.

4. How long we keep it

Your account information is kept while your account is open. When you delete your account (see below) we destroy your addresses, basket, saved items, notification tokens and support messages, and we remove your name, phone number and email address from your account record.

Records of orders you have already placed are kept after deletion. We are required to retain transaction records for accounting and tax purposes, and a seller's payment history cannot be unpicked because a buyer closed their account. These records include the delivery details captured at the time of the order, and they are no longer connected to a usable account. Any product reviews you wrote stay on the product with the author shown as a deleted user.

5. Your choices and rights

See and correct your details — Account → Edit profile in the app.
Delete your account and data — Account → Delete account in the app. You will be asked for your password to confirm. This takes effect immediately.
Request deletion without the app — see our data deletion page.
Withdraw an optional detail — you can clear your email address at any time from Edit profile. Your name, phone number and a delivery address are needed to place an order, so removing them means closing the account.

6. Children

Shop Shahar is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.

7. Changes to this policy

If we change what we collect or who it is disclosed to, we will update this page and the date at the top, and update our Google Play Data safety declaration to match.

8. Contact us

Questions about this policy, or about your data:

Email: support@shopshahar.com
Techcraft I.T. Solution (operator of Shop Shahar), Nepal