Privacy at MODRA
Privacy
Policy
A clear, readable home for MODRA’s privacy disclosures and user rights.
Overview
MODRA Tech Inc. (“MODRA,” “we,” “us,” or “our”) provides a local retail marketplace and delivery service. This Privacy Policy explains the information we collect through the MODRA app, website, support channels, and related services, how we use it, and the choices available to you.
Information We Collect
Account and profile information
We collect information used to create and secure your account, such as your email address, Firebase user identifier, authentication-provider information, profile details you choose to provide, saved addresses, and favorite stores.
Location and delivery information
With your permission, MODRA may access your device location to show nearby stores and delivery options. We may also collect delivery addresses, address labels, map coordinates, place identifiers, selected delivery locations, and delivery instructions that you provide.
Shopping, order, and payment information
We collect cart contents, product and store selections, item attributes, promotions, prices, fees, taxes, order status, delivery status, and transaction records. Payments are processed by Stripe. MODRA receives payment status and processor identifiers, but does not store your full payment-card number.
Technical, verification, and support information
We may collect device and app preferences, authentication tokens, verification-code records, request and security logs, IP-based rate-limit records, and information you send when contacting support.
How Information Is Used
We use information to:
- create, authenticate, secure, and support MODRA accounts;
- show nearby retailers and provide location-based delivery options;
- process carts, orders, payments, promotions, deliveries, returns, and refunds;
- communicate about orders, service updates, support, privacy requests, and account changes;
- prevent fraud, abuse, unauthorized access, and payment disputes;
- maintain, troubleshoot, and improve the service; and
- meet accounting, tax, legal, and regulatory obligations.
Information Sharing and Disclosure
We share information only as needed to operate MODRA, including with participating retailers and delivery providers involved in fulfilling an order. We also use service providers such as Google Firebase and Google Cloud for authentication, databases, storage, and hosting; Stripe for payment processing; Google Maps and geocoding services for maps and location features; and email and support providers for communications.
We may disclose information when required by law, to protect users or the service, investigate fraud or security incidents, enforce our terms, or in connection with a merger, financing, acquisition, or sale of business assets. MODRA does not sell personal information for money.
Data Retention
We retain account and service information while your account is active and as reasonably necessary to provide MODRA. Verification codes become invalid after 10 minutes; associated verification and security records may remain longer where needed to protect the service.
When an eligible account is deleted, MODRA deletes the Firebase Authentication account, profile, saved addresses, favorites, cart, notifications, verification records associated with the account email, and files stored under the user’s private storage path. MODRA removes account and delivery identifiers from retained order and payment records. Non-identifying transaction facts may remain for accounting, tax, fraud prevention, dispute handling, and legal compliance.
MODRA deletes the Stripe customer record and removes MODRA account identifiers from associated Stripe PaymentIntent and Charge metadata. Stripe may retain transaction records as required by its own legal, financial, fraud-prevention, and compliance obligations.
Deleted Firestore data may remain in point-in-time recovery and daily backups for up to 7 days. Default operational logs are retained for 30 days, and required Google Cloud audit logs are retained for 400 days. These backup and audit copies are restricted and expire under their configured schedules.
Your Privacy Choices and Rights
You can manage location permission through your device settings and can use a manually entered address where available. You may update saved addresses and other account information in the app.
To delete an account in the MODRA app, open Account, scroll to Delete My Account, and follow the confirmation steps. You may also request deletion through the Delete Account page. Depending on where you live, you may have rights to request access, correction, deletion, restriction, or a copy of personal information. We may verify your identity before completing a request.
Children’s Privacy
MODRA is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to MODRA, contact us so we can review and remove it.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access controls, encrypted network connections, managed cloud infrastructure, restricted database rules, and payment processing through Stripe. No system can guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy as MODRA evolves or legal requirements change. We will post the updated policy here and revise the effective date. When appropriate, we may also provide notice in the app or by email.
Contact MODRA
For privacy questions or requests, contact MODRA at hello@modraapp.com.
Optional Savvy AI and Photo Search
Savvy chat and photo search use OpenAI, a third-party AI provider, to respond to shopping requests and identify relevant products. When you choose to use these features, MODRA sends your request and relevant context to OpenAI. This can include your messages, recent conversation, confirmed shopping preferences, relevant product and store information, and relevant cart, order, return or shared-wishlist context. A shared wishlist may include its owner’s display name. Photo search sends the image you choose to submit. Messages and images may contain personal information you include; avoid submitting sensitive information that is not needed for your shopping request.
The updated Customer app asks for your permission before Savvy chat or photo-search data is sent to OpenAI. You can choose Not now and continue ordinary shopping, ordering and support. Your choice is associated with the signed-in account on that device; it is not a universal setting across all devices. You can turn off Allow Savvy to use OpenAI in Account settings. Turning it off stops future requests from that app, but does not erase information already processed by MODRA or OpenAI. Earlier Customer versions do not include this permission prompt.
MODRA also stores Savvy conversations and shopping preferences to provide conversation history and relevant assistance. Optional feedback includes the message and assistant reply you rate. When an eligible account is deleted, MODRA removes its Savvy conversation, preference and feedback records through the account deletion process. This does not erase information already processed or retained by OpenAI. Contact support@modraapp.com with privacy or deletion requests. The retention and legal exceptions described elsewhere in this policy still apply.
OpenAI processes submitted data to provide AI responses and may retain it under its applicable terms and controls. Its published API documentation describes no model training by default, standard abuse-log retention up to 30 days, and Responses API state retention of at least 30 days by default, with exceptions. These describe OpenAI’s documented defaults, not a verified organization-specific MODRA configuration. MODRA does not claim zero-data-retention controls. See OpenAI API data documentation and OpenAI security and privacy information.