Privacy Policy — CompareMyKart
Last updated: 6 May 2026
Effective date: 6 May 2026
This Privacy Policy describes how CompareMyKart ("we", "our", "the App") collects, uses, stores, and shares your personal information when you use our Android mobile application and related backend services (collectively, the "Service"). The Service is operated by the publisher listed at the end of this document.
By installing or using CompareMyKart, you confirm that you have read and agreed to this Privacy Policy. If you do not agree, please do not install or use the App.
1. Who we are and how to contact us
App publisher: CompareMyKart
Contact email: support@comparemykart.com
Website: https://www.comparemykart.com
Country of operation: India (Ghaziabad, Uttar Pradesh)
For any privacy concerns, data access requests, deletion requests, or grievances, write to the email above. We respond within 30 days as required under the Digital Personal Data Protection Act, 2023.
2. What CompareMyKart does
CompareMyKart is a price-comparison utility for food-delivery platforms in India. When you have an open cart on a supported food-delivery app (such as Zomato), and you tap the floating CompareMyKart button on top of that cart screen, the App reads the items currently displayed and matches the same items on other delivery platforms (Swiggy, Magicpin, EatClub, etc.) to show you which platform offers the lowest total price.
The App does not place orders. The user always completes their purchase on the original delivery platform. CompareMyKart only displays comparative price information.
3. Information we collect
We collect only what is necessary to deliver price comparisons. Specifically:
3.1 Information you provide directly
- Phone number — when you sign in to CompareMyKart using OTP (one-time password). Used to identify your account.
- Delivery address & coordinates — when you save a delivery address using the in-app map picker. Stored as latitude, longitude, locality, pincode, and a free-text label (e.g. "Home", "Office"). Required so we can request restaurant lists relevant to your delivery location on each delivery platform.
- OTP-based authentication for supported delivery platforms — when you choose to compare prices on a platform you already have an account on, the App helps you authenticate using that platform's standard OTP flow. CompareMyKart never sees or stores your delivery-platform password. Authentication is performed against the platform's own login system; the App only uses the minimum short-lived authorisation needed to fetch price information for the comparison you have requested.
3.2 Information collected via the App's Accessibility Service
With your explicit, in-app consent (a prominent disclosure modal must be accepted before we even direct you to the OS Accessibility Settings), the App's Android Accessibility Service reads the currently visible cart screen of the Zomato app only when you tap the CompareMyKart floating bubble. From that screen we extract:
- Restaurant name
- Item names, quantities, prices
- Subtotal, taxes, delivery charges, applied coupons
The Accessibility Service is scoped at the OS level to the Zomato package only (android:packageNames="com.application.zomato" in our service config). The Android operating system itself enforces this — events from any other app are never delivered to our service. The service does not run in the background, does not capture screens you have not explicitly chosen to compare, and does not read any app other than Zomato. See the section "Use of Accessibility Service" below for full details.
3.3 Information collected automatically
- Device information — Android version, device model, app version, time zone — used to send the right-formatted requests to delivery platforms and to debug crashes.
- Approximate location (when permitted) — only when you grant the Location permission. Used as a fallback for the map address picker.
- Usage analytics & crash logs — anonymised information about which screens you visited, which actions failed, and stack traces of crashes. Used only to improve reliability.
3.4 What we do NOT collect
- We do not collect, view, or store your bank account, debit card, credit card, UPI handle, or any payment instrument.
- We do not collect your social-media accounts, contacts, photos, SMS messages, or call logs.
- We do not scrape any app screen other than the cart screen of supported delivery apps, and only when you explicitly trigger it.
4. How we use your information
We use the data described above only for these purposes:
- To compare prices — match the items in your cart against the menus of other delivery platforms.
- To facilitate OTP-based authentication with your existing delivery-platform accounts, with your consent, so we can retrieve menu prices and applicable coupons during the comparison flow you initiate. We do not store login tokens or credentials on our servers — authentication is short-lived and re-requested each time you tap Compare.
- To save your delivery preferences so you don't re-enter your address every time.
- To improve the App — diagnose bugs, identify which delivery platforms are unreliable, measure success rate of price matches.
- To comply with law — respond to lawful requests from Indian authorities under applicable statutes.
We do not use your data for advertising-network targeting, profiling for credit scoring, sale to third parties, or any purpose unrelated to the Service.
5. How we store and secure your information
- Data is stored on self-hosted MongoDB instances running on virtual servers located in India.
- All data in transit between the App and our servers is encrypted with HTTPS/TLS 1.2+.
- Access to the production database is restricted to our authorised engineering personnel and is logged.
No system is perfectly secure. While we follow industry-standard practices, you acknowledge that you provide your data at your own risk.
6. Sharing of information
CompareMyKart does not sell your personal data to anyone, ever.
We share data only in these limited circumstances:
- With delivery platforms (Zomato, Swiggy, Magicpin, EatClub, etc.) — exclusively for the purpose of fetching menus, prices, and coupons relevant to your account, on your direct instruction. These platforms have their own privacy policies; please review them separately.
- With our infrastructure providers — Utho (Indian VPS hosting), GoDaddy (DNS) — strictly for hosting the Service. They are bound by data-processing terms requiring confidentiality.
- With law enforcement or regulators — only when we receive a valid legal order under Indian law.
7. Use of Accessibility Service (important — required Play Store disclosure)
Android Accessibility Services are powerful and can read screen content of any app. Google requires apps that use Accessibility Service for non-accessibility purposes to provide a prominent disclosure and consent mechanism. Here is our full disclosure:
Why CompareMyKart uses Accessibility Service
Zomato — one of India's largest food-delivery platforms — does not expose a public API for reading the user's current cart. To compare the same cart on Swiggy, Magicpin, and EatClub (which DO expose APIs after the user logs in), we first need to know what's in your Zomato cart. Accessibility Service is the only Android API that allows reading on-screen content from another app.
Why this is NOT an accessibility-help feature
We are honest with reviewers and users: this feature is not designed to help users with disabilities. It is a price-comparison utility. We use Accessibility Service because no other technical mechanism (public API, web scraping, deep link, intent extra) is available for reading Zomato's cart, and we provide value to the user by saving them money on food orders.
Strict, OS-enforced limits
- Scoped to Zomato only. Our service config declares
android:packageNames="com.application.zomato". The Android OS itself filters out events from every other app — we cannot read anything else even if we wanted to. - Triggered only when YOU enable it. The Overlay Bubble is OFF by default. You must turn it on with a switch on the home screen.
- Reads only when you tap the bubble while you're inside the Zomato cart screen. There is no background passive scanning.
- Reads structured cart data only — item names, quantities, prices, restaurant name, totals. We do not capture screenshots, keystrokes, contacts, photos, or anything you type.
- Cart data is sent to our backend over HTTPS, used immediately to query Swiggy/Magicpin/EatClub for matching prices, and discarded after the comparison is shown to you. No long-term storage of cart contents.
- Revocable any time. You can disable accessibility from Android Settings → Accessibility → Installed Services → CompareMyKart, or simply turn off the Overlay Bubble switch in the app. The rest of the app (saved addresses, profile, etc.) continues to work.
Consent (the prominent disclosure)
Before we send you to OS Accessibility Settings, the App shows a full-screen disclosure modal listing:
- exactly what we read (Zomato cart items only),
- exactly what we do NOT read (other apps, passwords, screen content elsewhere),
- how we handle the data (HTTPS to our server, used immediately to compare and then discarded — not stored long-term),
- how to revoke the permission later.
You must tap "I Understand, Continue" before the OS Settings deep-link is triggered. You can also tap "Cancel" with no consequence. The Accessibility Service cannot be enabled silently or by default — Android requires you to also navigate to Settings and explicitly toggle it on, on a separate OS-controlled screen.
What about Swiggy, Magicpin, EatClub?
For those three platforms we use direct, official-API integration with your account (you log in with phone + OTP via the standard authenticated flow). They do NOT use Accessibility Service in any way. The Accessibility integration is exclusively for Zomato.
8. Permissions the App requests
| Permission | Purpose | Required? |
|---|---|---|
| Internet | Communicate with our backend and delivery platform APIs | Yes |
| Location (Approximate / Precise) | Pre-fill the address picker with your current location | Optional — App works without it if you enter address manually |
| Foreground Service | Show the floating "Compare" bubble overlay while you use the Zomato app | Required for compare feature |
| System Alert Window (display over other apps) | Show the floating "Compare" bubble | Required for compare feature |
| Accessibility Service | Read the cart screen when you tap the bubble | Required for compare feature; revocable any time |
| Receive SMS (if applicable) | Auto-fill OTPs sent to your phone for faster login | Optional |
You may deny any of these permissions; the App degrades gracefully where possible.
9. Data retention
- Your account profile (phone number, addresses) — kept until you delete your account. To delete, email us at support@comparemykart.com.
- Cart-comparison history — kept for 30 days for debugging and support, then automatically purged.
- Crash logs and analytics — kept for 180 days, anonymised.
You may request earlier deletion at any time.
10. Your rights under Indian law (DPDP Act 2023)
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access the personal data we hold about you.
- Correction of inaccurate or outdated data.
- Erasure of your data, subject to lawful retention exceptions.
- Withdraw consent for any processing that was based on your consent.
- Grievance redressal — if your concerns are not addressed satisfactorily, you may approach the Data Protection Board of India.
To exercise any of these, write to support@comparemykart.com with subject line "Privacy Request".
11. Children's privacy
CompareMyKart is intended for users 18 years of age or older. We do not knowingly collect data from children under 18. If you believe we have inadvertently collected such data, contact us immediately so we can delete it.
12. International transfers
Our infrastructure is hosted entirely in India. We do not currently transfer your personal data outside India. If we ever need to (for example, to use a non-Indian backup region), we will update this Privacy Policy and obtain your consent under the DPDP Act 2023 first.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be notified to you within the App at least 7 days before they take effect. Continued use after the effective date constitutes acceptance.
14. Trademarks and third parties
"Zomato", "Swiggy", "Magicpin", "EatClub" and other delivery-platform names referenced in CompareMyKart are trademarks of their respective owners. CompareMyKart is not affiliated with, endorsed by, or sponsored by any of these platforms. Use of those names is solely to identify the platforms with which CompareMyKart is interoperable.
15. Grievance Officer
In compliance with the Information Technology Act, 2000, and rules made thereunder:
Grievance Officer: Yash Gupta
Email: support@comparemykart.com
Address: Sector 9, Vijay Nagar, Ghaziabad, Uttar Pradesh 201009, India
Response time: within 15 working days of receipt of complaint.