REALMKART

Privacy Policy

Last updated: 29 October 2026

This policy explains how Realmkart handles personal information when you use realmkart.com, the Realmkart shopping app, or contact our team. Realmkart operates from SFS C-157, Indira Nagar, Church Road, Atal Colony, Lucknow-226016, Uttar Pradesh, India. Contact us at support@realmkart.com for privacy questions and requests.

Information we use

• Account information: your name, email address, phone number when provided, account preferences, and authentication records. Passwords are stored as hashes. Email verification and password-reset codes are used to verify account access.
• Google sign-in: if you choose Continue with Google, we receive your Google account identifier, verified email address, and profile name to create or connect your Realmkart account. We do not receive your Google password or access to your Gmail messages, contacts, or Google Drive files.
• Shopping and orders: the products and quantities you select, wishlists, saved collections, delivery and billing addresses, order history, coupon use, payment status and transaction references, shipping details, and invoices. Payment credentials are handled by the payment provider on its payment screen; the Realmkart app does not store full card numbers, CVV values, or UPI PINs.
• Support: messages, order references, and information you choose to provide when requesting help, a return, or a refund. Please do not send passwords, payment PINs, or verification codes to support.
• Notifications: your notification choices and, when registered for app delivery, a Firebase installation/notification token. This identifies an app installation so we can deliver notifications. It is not your phone number.
• Technical information: network addresses, request times, browser or app information, and security logs needed to deliver the service, diagnose failures, prevent abuse, and protect accounts.

Why we use this information

We use this information to manage accounts, process purchases, calculate delivery and tax, fulfil orders, issue GST invoices, handle support and returns, provide requested product alerts, protect the store, and meet applicable record-keeping requirements. Optional promotional messages are controlled separately from messages needed for your account or orders.

PIN lookup and delivery estimates

When you enter a PIN code or city search in the app, the PIN or city search is sent to the postal lookup service at api.postalpincode.in to suggest the city and state. This lookup does not send your Realmkart login token, name, email, street address, or phone number. You can correct the suggested address.

For delivery estimates, our server sends the destination PIN, pickup PIN, recorded parcel weight, order value, and cash-on-delivery selection to Shiprocket. Estimates include our dispatch allowance and are not guaranteed delivery dates. When an order is fulfilled, the shipping provider receives the recipient and delivery details needed for that shipment.

App notifications and your choices

Android controls whether Realmkart can display device notifications. In the app, go to Account → Notification preferences to choose offers and campaigns, requested product alerts, and optional cart reminders. Promotional notifications are off by default. You can change these choices or disable notifications in Android settings at any time.

Offers may include deals, coupon announcements, sales, and new products. Optional cart reminders help you return to items left in your cart; they do not reserve stock or guarantee a price. Cart reminders are scheduled on your device and stop when you empty that cart or sign out. Order and account messages are separate from promotional choices. Disabling device notifications does not stop necessary order or security emails.

iPhone app and Apple sign-in

If you choose Sign in with Apple in the iPhone app, Apple provides an account identifier and, when you share them, your name and email address. You can use Apple’s private email relay address instead of sharing your personal email. We verify the sign-in using a short-lived challenge and Apple’s signed response. Apple authorization tokens needed to disconnect sign-in are encrypted on our server. We do not receive your Apple Account password, iCloud files or photos. Connecting Apple to an existing Realmkart account requires signing in to that account first.

When you enable iPhone device notifications, Firebase Cloud Messaging and Apple’s Push Notification service deliver updates to your app installation. You can change permission in iPhone Settings and manage message categories in the app. Promotional notifications remain optional. Realmkart uses a generic notification on the iPhone lock screen; sign in to the app to view the relevant details. Signing out unregisters the device from that account.

The iPhone app can index public product titles and collections for on-device Spotlight and Siri search, and use Handoff for public product links. Private order, address, support and warranty information is not added to that product index.

Storage on your device

Optional app PIN and biometric unlock

You can protect your saved signed-in session on this iPhone with a four-digit app PIN and Face ID or Touch ID. The app stores a salted, stretched PIN verifier and retry-limit state in the iOS Keychain, restricted to this device. It does not store the raw PIN or your account password. Your iPhone performs biometric verification; Realmkart does not receive your face or fingerprint data. Your account email is retained with the protected session. Five unsuccessful PIN attempts trigger a five-minute delay. You can use email and password instead, remove device unlock in the app, or sign out. Expired sessions require account sign-in again. Apple Passwords AutoFill is managed separately by your iPhone settings.

The app stores a cart, recently viewed products, recent searches, cached catalogue information, and display preferences on your device. A signed-in session token is protected using Android’s keystore-backed encryption or the iOS Keychain, depending on your device. Clearing app data or uninstalling removes local app storage, but does not delete your Realmkart account or server-side order records. Use the deletion request process below for those records.

Service providers and sharing

Authorised Realmkart staff use the store dashboard and the Realmkart admin app to fulfil orders and respond to requests. Our service providers process information required for their functions: Hostinger for hosting and email delivery; WordPress and WooCommerce for store operation; Google for Google sign-in and Firebase Cloud Messaging; Apple for Apple sign-in, its private email relay and Apple Push Notification service; postal lookup and Shiprocket for address assistance and delivery; and the payment provider identified at checkout for payments. When you subscribe to a website newsletter, the mailing service connected to that form processes your subscription details.

We do not sell customer personal information. We may disclose relevant records when legally required, to protect against fraud or misuse, or to resolve disputes. Providers may process information in countries outside India according to their service arrangements and privacy policies.

Website cookies and embedded services

The website uses cookies and similar storage for sign-in, cart contents, checkout, and preferences. It also uses website analytics and may contain third-party media or marketing integrations. Where a cookie preference control is shown, use it to manage optional categories; you can also use your browser’s cookie controls. Blocking essential cookies may prevent sign-in or checkout from working. Following external links or using embedded third-party content may share your browser and network information with that provider.

The native Android app does not include the Firebase Analytics SDK or an advertising SDK. Google sign-in and Firebase Messaging are used for their stated sign-in and notification purposes.

Razorpay payments in the app

If you choose online payment, the Razorpay checkout service processes payment information and the contact or order details supplied for that payment. Its Android payment SDK can collect payment-screen interactions, diagnostics and crash information, and device identifiers for payment operation, performance analysis and fraud prevention. It checks for compatible installed UPI apps to offer UPI payment options; this does not give Realmkart access to the contents of those apps.

The payment SDK may access an advertising identifier where the Android version and your device privacy settings make it available. This Realmkart release does not request the Android 13 advertising-ID permission, so Android 13 or later returns a zeroed advertising identifier. Realmkart does not display third-party advertising in the app. You can browse without opening online checkout, and Cash on Delivery does not open Razorpay checkout.

Payment information may be processed by Razorpay and relevant payment networks, banks and other parties needed to complete payments, comply with requirements and prevent fraud. See Razorpay’s privacy policy for its handling of payment data. Realmkart does not store your full card number, CVV or UPI PIN.

Retention and security

We retain account information while needed to provide your account and services. Order, invoice, payment-reference, and dispute records may need to be retained after account closure for tax, accounting, fraud prevention, or legal obligations. Support and security records are retained for their relevant operational and legal purposes. We assess deletion requests against those requirements and explain when particular records must be retained. Backup copies may remain until replaced through the backup cycle.

We use HTTPS, password hashing, restricted staff access, and protected credentials to reduce unauthorised access. No online service or device can guarantee absolute security. Keep your device and sign-in details secure and contact us if you suspect misuse of your account.

Access, correction, deletion, and complaints

You can update your profile and saved addresses in your account. To request a copy of your information, correction, account deletion, or deletion of specific data, email support@realmkart.com from your registered email address. State the request and whether you want to close your account. You can also use Account → Notification preferences → Request account or data deletion in the app.

We may verify account ownership before acting. You do not need to provide a password or payment PIN. We will explain any information that must be retained and why. Uninstalling the app does not itself submit a deletion request. If you have a privacy concern or are dissatisfied with our response, contact the Realmkart privacy support team at the same address with the subject “Privacy complaint”. Your rights under applicable law are unaffected by this policy.

Children and changes to this policy

Realmkart’s catalogue and shopping app are intended for teenage and adult collectors aged 13 and above. Users under 18 should use the service with a parent or legal guardian, and an adult must authorise purchases and payments. The service is not designed for unsupervised account registration by children under 13. If you believe a child has provided personal information without appropriate authorisation, contact us so we can review and address it.

We update this page when our services or data practices change. The date above identifies the latest revision. We will provide additional notice or seek a choice where a material change requires it.

Native payment SDK information

If you choose prepaid payment, the Razorpay Android checkout SDK and its payment partners may process payment details, contact information supplied for checkout, transaction events, device and app identifiers, compatible payment-app information, and diagnostic or crash information to provide payments, prevent fraud and maintain payment reliability. These SDK records are distinct from the payment references retained by the store. The payment SDK can access an advertising identifier where the device permits it; our Android apps do not request the Android 13 advertising-ID permission, so that identifier is zeroed on those devices. This does not add advertising to the app. Choosing cash on delivery avoids opening prepaid checkout.

Staff administration app

The admin app is available only to authorised staff. It uses staff names, email addresses, account and session identifiers, security and audit activity to authenticate access and manage the store. Customer information, orders, support messages, campaign emails, product content, images and files entered through the workspace are used only for the selected store operations. Staff information and session or activity records are required for secured administration; media uploads and individual operational submissions are made when those features are used. Contact the support address on this page to request access, correction or deletion; business and security records may be retained where required.

Teenage customers and supervised purchases

The customer app is intended for teenage and adult shoppers aged 13 and above. Customers under 18 should involve a parent or guardian, and purchases or payments must be authorised by an adult. The app is not designed for unsupervised accounts or purchases by children under 13.

After we verify account ownership, account and associated personal data deletion requests are processed within 7 days. We confirm completion by email and explain any order, invoice or other records that must be retained by law.