Privacy Policy

Last Updated: 31st August 2026

1. Introduction

This Privacy Policy explains how QWIKLY LABS PRIVATE LIMITED ("Batao.ai", "we", "us", or "our") collects, uses, shares, and protects information when businesses ("Sellers") and their customers ("Buyers" or "End Users") use our platform, accessible at https://batao.ai, and any related services (collectively, the "Service"). It should be read alongside our Terms and Conditions, which also govern your use of the Service. By using the Service, you agree to the collection and use of information as described here.

2. Information We Collect

2.1 Information Sellers Provide

When a business signs up, we collect business and contact details such as business name, owner/staff name, email address, mobile number, and store information needed to configure the platform.

2.2 Information About End Users

To enroll a customer in a store's loyalty or referral program, we collect that customer's name and mobile number, and we record their activity within the program — points earned, rewards redeemed, referrals made, and related transaction details supplied by the Seller or its point-of-sale system.

2.3 Information Collected Automatically

We collect usage data (pages and features used, time spent, and similar interaction data), device information (device model, operating system, and network information), and, where applicable, cookies used to keep you signed in and to understand how the Service is used.

3. How We Collect Information

Directly from you: when you sign up, sign in, or use dashboard features.
Firebase Authentication: sign-in is handled via one-time passcode sent to your mobile number, through Google Firebase. Firebase issues an authentication token that identifies your account on subsequent visits.
Point-of-sale integration (Petpooja): for stores that connect their Petpooja account, we receive order and bill data needed to identify the End User and apply or redeem loyalty rewards automatically at checkout.
Google Business Profile: for stores that connect their Google Business Profile, we access listing and review data relevant to the Service.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including signing you in and keeping your account secure.
• Track loyalty points, referral activity, and reward redemptions for each store.
• Apply and redeem rewards automatically at checkout for stores connected to Petpooja.
• Send End Users transactional and marketing messages about their points, rewards, and offers via WhatsApp, SMS, or email.
• Help Sellers manage their Google Business Profile listing and reviews, where connected.
• Monitor, analyze, and improve the Service, and generate insights and recommendations for Sellers.
• Detect, investigate, and prevent fraud and other illegal activity.

5. WhatsApp Messaging

We send loyalty and referral related messages to End Users over WhatsApp using Meta's WhatsApp Business Platform, delivered through our messaging partner AiSensy. A phone number is required to receive these messages, and message content and delivery status may be processed by Meta and AiSensy on our behalf, solely to deliver the Service.

6. Data Storage and Processing

Account and program data is stored using Google Firebase (Authentication, Firestore, and Cloud Storage). Firebase, Petpooja, Google Business Profile, and AiSensy act as our data processors for the purposes described above; we do not sell your information to anyone.

7. How We Share Information

We do not sell End User or Seller data. We share information only:

• With the service providers named in this Policy (Firebase, Petpooja, Google, AiSensy), solely to operate the Service.
• Between a Seller and its own End Users' program data — a Seller can only see data belonging to its own store, never another business's data.
• Where required by law, regulation, or a valid legal process.
• As part of an AI training process used to improve recommendations and insights within the Service — we do not share this data with third parties for their own purposes.

8. Data Security

We use industry-standard measures to protect your information, including encryption in transit, access controls, and Firebase's built-in security infrastructure. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. Data Retention

We retain account and program data for as long as the associated Seller account remains active, and for a reasonable period after to meet legal, accounting, or dispute-resolution requirements. You may request deletion of your data as described in Section 10.

10. Your Choices and Rights

Access and correction: Sellers can update account information from their dashboard; End Users can contact us to review or correct the information we hold about them.
Deletion: You may request deletion of your personal information by contacting us at the details below, subject to our legal and legitimate business retention needs.
Marketing messages: End Users can opt out of marketing messages by following the opt-out instructions included in those messages, or by contacting the Seller directly.
Cookies: You can control cookies through your browser settings, though this may affect how the Service functions.

11. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from them. If we learn we have done so, we will delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide at least 30 days' notice before they take effect. Continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: