Privacy Policy

Last updated: 21 October 2026

This policy explains, in plain language, what InfiCart collects when you use the customer app and the website at nowastemart.com, why we collect it, who sees it, and what you can ask us to change or delete.

Who operates InfiCart

InfiCart is operated by two individuals, not a company: Sathwik Vijayendra Karthik Nagaraju and Rupak Molabanti (“we”, “us”). Participating grocery stores sell the products. When you place an order, that store receives the details it needs to pack, collect, or deliver it.

Postal address: 21 Luckie Street, Nunawading VIC 3131, Australia.
Support: support@nowastemart.com

Who this covers

• People who browse, create an account, or order in the InfiCart app or at nowastemart.com/app/.
• People who email support@nowastemart.com about a shopper account.

Store owners use a separate manager site. This policy describes shopper information. A store still receives your order details, as explained below.

Account

When you register, sign in, or edit your profile, we store:

• Full name.
• Email address.
• Phone number, if you add one.
• A hashed password. We do not store your password in a form we can read.
• Whether the account is active, and the role (shopper).

You can also sign in with Google. Google handles that sign-in. We receive the identity details Google shares for the sign-in, such as your email and name, and a token that proves the sign-in succeeded. Google’s own privacy policy applies to what Google collects.

If you use “Forgot password”, we email a reset link to the address on the account and store a short-lived reset token until it is used or expires.

We keep a sign-in session on your device (including a refresh token) so you stay signed in. Signing out or deleting the account revokes that session.

Saved addresses

If you save a delivery address, we store:

• The label you give it, if any.
• Street lines, suburb or city, and postcode.
• A contact phone number for that address.
• A map pin (latitude and longitude) when you use “where I am now” or locate the address, so we can check the store’s delivery radius.
• Whether you marked it as the default address.

Orders and the cart

Your cart is stored against your account and one store at a time. An order record includes:

• The store, the products, quantities, unit prices, discounts, and whether an item is marked imperfect or short-dated.
• Pickup or delivery, the pickup time you chose, or the delivery time we calculated.
• Delivery address, phone, and map pin for delivery orders.
• Your delivery instructions and whether you allowed another brand if the ordered brand is unavailable.
• Any note you typed for the store.
• Goods total, store delivery fee, the InfiCart service fee, any store credit applied, the amount left to pay, and the payment method and status.
• Status changes (for example accepted, preparing, ready, on the way, arrived, delivered, cancelled, or returned) and the time of those changes.

Switching the cart to another store replaces the current cart. Unpaid card checkouts can be put back in the cart if you leave payment unfinished.

Store credit

Store credit is a balance for one store, not a bank account. We store the amount, which store it belongs to, and the reason it was added or used (for example a cancellation or a later order). It can only be spent at that same store.

Location

Location is optional and only used when you ask for a feature that needs it:

• Finding stores near you.
• Filling or checking a delivery address and confirming you are inside that store’s delivery distance.

You can refuse location permission. Pickup and search still work. Delivery needs an address we can place on the map. You can turn location off later in the phone settings.

Camera and barcode scanning

The camera is used only while the barcode scanner is open. We read the barcode number to find a product. We do not keep the camera picture and we do not use it for advertising.

Return photos

A return after delivery asks for a photo of the items and a short reason. We store that photo and reason and show them to the store so it can accept or decline the return.

Messages to a store

If you ask a store about a product, we store the message, the product, the store, and your account details so the store can reply.

Stock alerts

“Notify me” on an out-of-stock product saves that you want an alert for that product. You can turn the watch off in the app.

Notifications

If you allow notifications, we store a push token for that device and send alerts when:

• A card order is placed after payment succeeds.
• The store accepts or starts preparing the order.
• A pickup order is ready.
• A delivery order is on the way or has arrived.
• The order is delivered, cancelled, credited, or a return is updated.

The app also checks for unread order notices while it is open. You can deny notification permission. Order status is still visible in the app. If a token is no longer valid, we delete it.

Searches on your device

Recent product searches are saved on your phone or browser, not as a server profile. Barcode numbers are not saved in that list. Clearing recent searches removes them from the device.

Payments

Card payments, including Apple Pay and Google Pay when your device shows them, are handled by Stripe. We do not store your full card number or card security code. Stripe receives the payment details, the amount, and fraud-prevention signals under Stripe’s privacy policy.

We do store:

• Whether the payment is unpaid, paid, failed, or marked refunded.
• The amount, the service fee, and any store credit used.
• A Stripe payment reference so we can confirm the payment.
• The store’s connected Stripe account, so the store’s share can be paid out.

Cash on delivery, where the store allows it, does not send card details. The store is told the order is to be paid in cash.

How we use information

• Create and protect your account.
• Show products, categories, deals, and imperfect items.
• Run your cart, checkout, pickup, and delivery.
• Charge the amount shown, including the store’s delivery fee and the InfiCart service fee.
• Send the order to the store and send you status alerts.
• Apply, hold, or add store credit for that store.
• Handle cancellation, “not available”, and return requests.
• Answer support email.
• Prevent fraud, abuse, and unpaid duplicate checkouts.
• Keep records we need for accounting, disputes, and the law.

We do not sell your personal information.

Who else receives it

• The store you order from — your name, phone, email, items, notes, substitution choice, pickup time or delivery address, and whether the order is paid by card, store credit, or cash. The store needs this to pack and hand over the order. The store’s own staff can see it in the owner tools.
• Stripe — card and wallet-sheet payments.
• Google — only if you choose Google sign-in.
• Expo — the push service that delivers notification alerts to the phone.
• Our host — the shop runs on Microsoft Azure in Australia East. The database that holds accounts and orders is there.
• Email — we email the store owner from manager@nowastemart.com when an order is placed, and we email you for password resets and support replies.
• Authorities — when the law requires it.

How long we keep it

• Account details stay while the account is active.
• Orders, payments, store-credit entries, and return photos stay for accounting, store disputes, and legal duties even after you stop using the app.
• Push tokens stay until you turn notifications off, delete the account session, or the token stops working.
• Password-reset links are short-lived.
• Recent searches stay on the device until you clear them or remove the app’s stored data.

Deleting your account

You can delete the shopper account in the app under Account → Delete account, or ask by email using the steps on the delete-account page.

When deletion runs, we:

• Sign you out and disable the password.
• Replace your name with “Deleted User”, remove your phone number, and replace your email with an address that cannot receive mail.
• Delete the cart and wishlist for that account.

Orders, delivery addresses already used on orders, return photos, store-credit history, and messages to stores can remain so the store can finish or audit an order and so we can meet accounting and legal duties. They are no longer attached to your real name and email on the sign-in profile. We cannot delete a store-owner login from the shopper app.

Access and correction

You can edit your name, phone, and saved addresses in the app. For anything else, email support@nowastemart.com from the address on the account. We may need to confirm it is you before we change or release records.

Children

InfiCart is for adults who can pay for an order. We do not knowingly collect information from children under 13. If you believe a child has created an account, email us and we will close it.

Security

The app and API use encrypted connections. Passwords are hashed. Card numbers stay with Stripe. No online service is perfectly secure, and you should keep your phone and password to yourself.

Where data is processed

Our shop database is in Australia. Stripe, Google, Expo, and email delivery can process data in other countries. Those providers are used only to run the features described above.

Complaints

Contact us first at support@nowastemart.com. If you are in Australia and we cannot resolve a privacy complaint, you can contact the Office of the Australian Information Commissioner (OAIC).

Changes

If we change this policy, we post the new version on this page and change the date at the top. The app links to this page.

Contact

Privacy questions: support@nowastemart.com