Legal

Privacy Policy

Last updated: July 2026

Your privacy matters to us. Zrush collects only what is necessary to run the platform. We do not sell your personal data to third parties.

1. Who We Are

Zrush ("we", "us", "our") operates the Zrush mobile application and website (zrush.in) — a last-minute slot booking platform based in India. This policy explains what personal data we collect, why we collect it, and how we protect it.

For privacy questions, contact us at hello@zrush.in.

2. Data We Collect

We collect the minimum data needed to operate the platform:

Data	Why we collect it
Mobile number	Identity verification via OTP. Used to tie your account to your phone number.
Name	Displayed on your profile and shared with Vendors when you book.
Location (city/area)	To surface relevant slots near you. We store your chosen area, not your precise GPS coordinates.
Booking history	To show your past and upcoming bookings, process refunds, and resolve disputes.
Payment reference ID	Razorpay's transaction ID for payment verification. We do not store card or bank details.
Device push token (FCM)	To send you booking confirmations and slot availability alerts you opted into.
Profile photo (optional)	Stored in Firebase Storage if you choose to upload one.
Category & area alert preferences	To send targeted push notifications for slot types and areas you have enabled.
Crash and diagnostic data	Anonymised crash reports via Firebase Crashlytics to fix bugs and improve stability.

3. How We Use Your Data

To create and manage your account.
To process bookings and payments.
To send booking confirmations, PINs, and status updates.
To send push notifications for slot alerts you have opted into (you can turn these off at any time in Settings).
To detect fraud, prevent abuse, and enforce our Terms of Service.
To improve the app using anonymised usage and crash data.

We do not use your data for advertising, and we do not sell or rent it to third parties.

4. Third-Party Services

Zrush uses the following third-party services, each with their own privacy policies:

🔥

Google Firebase (Firestore, Auth, Cloud Functions, Crashlytics, FCM, Storage)

Our core backend. Stores user profiles, bookings, and slot data. Processes OTP authentication. Handles push notifications and crash reporting. Data may be stored in Google's global infrastructure. Google Privacy Policy →

💳

Razorpay

Payment processing. Razorpay handles all card and bank transactions. Zrush only receives a payment reference ID — we never see or store your full card or bank details. Razorpay Privacy Policy →

5. Data Sharing

We share limited data only in the following cases:

With Vendors: When you make a booking, your name is shared with the Vendor for check-in purposes.
With payment processors: Transaction data is shared with Razorpay solely to process payments.
With law enforcement: If required by a valid legal order or to protect safety.
Business transfers: If Zrush is acquired or merges, your data may transfer to the new entity under the same protections.

We do not share your data with advertisers, data brokers, or analytics companies.

6. Push Notifications

We send push notifications for:

Booking confirmations and status updates (always on — required for the service).
Slot availability alerts for areas and categories you subscribe to (opt-in, you can turn these off anytime in the app under Settings → Alerts).

You can revoke notification permissions at any time from your device Settings.

7. Data Retention

We retain your account data for as long as your account is active. Booking records are retained for 3 years for legal and financial compliance. Crash logs are retained for 90 days. If you delete your account, personal data is removed within 30 days, except where retention is required by law.

8. Your Rights

Under applicable Indian law (including the Digital Personal Data Protection Act, 2023), you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data (subject to legal retention requirements).
Withdraw consent for non-essential processing (e.g., alert notifications).
Nominate a representative in case of your death or incapacity.

To exercise any of these rights, email us at hello@zrush.in. We will respond within 30 days.

9. Children's Privacy

Zrush is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

10. Security

We use industry-standard security measures including Firebase security rules, encrypted data in transit (TLS), App Check to block automated abuse, and HMAC-verified booking PINs. No system is 100% secure — if you suspect a breach, contact us immediately.

11. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated via in-app notification. The "Last updated" date at the top reflects the most recent revision. Continued use after changes constitutes acceptance.

12. Contact

Privacy questions, data requests, or concerns:
📧 hello@zrush.in
We aim to respond within 2 business days.