Privacy Policy

This policy explains what information Alar Softwares collects through its apps OnePharmacy and OneShop and this website, why we collect it, how we protect it, and the choices you have. It is written to follow India's Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000.

1. Who we are

Alar Softwares ("Alar", "we", "us") makes the OnePharmacy and OneShop billing and inventory apps. Our head office is near Sector 28 Metro Station, Mathura Road, Faridabad, Haryana 121003, and our regional office is at Line Bazar, near Kundi Pul, Purnia, Bihar 854301, India. You can reach us on +91 79031 67478 or support@alarsoftwares.com.

2. Two kinds of data, two roles

Your account data. When you sign up for OnePharmacy or OneShop, we decide how your account information is used. For this data we are the Data Fiduciary under the DPDP Act.

Your business records. The records you enter into the app — your customers, patients, prescriptions, suppliers, bills, stock and credit ledgers — belong to your business. You decide why they are collected and how they are used; we store and process them only on your instructions to provide the service. For this data, your business is the Data Fiduciary and Alar acts as your Data Processor.

3. What we collect

• Account details: your name, shop or business name, mobile number, email, business address, GSTIN, and, for OnePharmacy, your drug licence number.
• Business records: items, stock, batches, purchases, bills, payments, credit ledgers, and the names and phone numbers of your customers and suppliers. For OnePharmacy this can include prescription details you record for scheduled drugs.
• Staff details: names, logins and roles of staff you add, and the activity log of what each login did.
• Device and usage data: device model, operating system, app version, IP address, crash reports and basic usage events, used to keep the app working and secure.
• Payments: if you pay us online, the payment is handled by a licensed payment provider. We receive confirmation of payment, never your full card or bank details.
• Support conversations: messages, calls and screenshots you share with us when asking for help.

4. Why we use it

• To provide the apps: billing, stock, reports, sync between your devices, and cloud backup.
• To send bills, payment reminders and offers to your customers — only when you or your staff trigger them.
• To verify your identity, keep your account secure, and detect misuse or fraud.
• To give you support, set up your shop and fix problems.
• To send you important service messages, such as trial expiry, updates and security notices.
• To improve the apps using combined, non-identifying usage statistics.
• To meet our legal and tax obligations.

We send you marketing messages only if you agree, and you can stop them at any time.

5. Your customers' data

We do not sell your customers' or patients' data, use it for advertising, or contact them for our own purposes. Messages reach them only when you send them from the app. As the business that collects this data, you are responsible for telling your customers how you use it and for having a lawful reason to message them. We will help you respond if one of your customers asks to see, correct or delete their information.

6. Who we share it with

We never sell personal data. We share it only with:

• Service providers who help us run the service — cloud hosting, content delivery and security, SMS and WhatsApp messaging, email, and payments. They may use the data only to provide their service to us and must protect it.
• Authorities, when the law requires it or a valid legal order directs us to.
• A successor business, if Alar is merged or acquired, under the same protections as this policy.

WhatsApp messages. Bills, reminders and offers are sent through the WhatsApp Business Platform provided by Meta Platforms, Inc. To deliver a message, the recipient's phone number and the message content are passed to WhatsApp. We send a message only when the business using our app triggers it, and businesses are required to message only customers who have agreed to receive it. Meta handles that data under its own terms and privacy policy.

7. How we protect it

Data travels between your devices and our servers over encrypted connections. Each business's records are kept separate from every other business. Access is limited by login and role, important actions are written to an activity log, and data is backed up automatically. No system is perfectly secure, so please keep your login PIN and devices safe and remove devices you no longer use.

If a personal data breach happens, we will inform affected users and the Data Protection Board of India, and report to CERT-In, as the law requires.

8. How long we keep it

We keep your data while your account is active. If you close your account, your business records remain available for you to export for 90 days and are then deleted, except where the law requires us to keep something longer. Security and activity logs are kept for at least one year, as the DPDP Rules require.

Pharmacy owners: drug laws require you to keep certain sale and prescription records for a set period. Please export and keep these records before closing your account.

9. Your rights

You can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct, complete or update it;
• delete it, where we are not required to keep it;
• withdraw consent you gave earlier, for example for marketing messages;
• nominate someone to act for you if you die or cannot act yourself.

You can ask for your data to be deleted at any time; the steps are on our Data Deletion page. Send other requests to our Grievance Officer (section 12). We will reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

10. Children

Our apps are made for businesses and are not meant for anyone under 18. We do not knowingly collect data from children for our own purposes.

11. Changes to this policy

If we make an important change, we will tell you in the app or by message before it takes effect. The date at the top shows when this policy was last updated.

12. Grievance Officer