Legal
Privacy Policy
Last updated: 30 May 2026
1. Data Controller
Modenx Inc ("modenX", "we", "us") is the data controller for personal data processed via this website, the modenX platform, and the modenX mobile app. If you have any questions about this policy or how we handle your data, contact us at [email protected].
2. Data We Collect
- Website visitors: Anonymised device identifiers, page views, referrer URLs.
- Contact form submissions: Name, email, company, and message content.
- Platform (business) users: Visit signals (BLE/Wi-Fi/camera counts), loyalty identifiers, and transaction data — per the Data Processing Addendum in your MSA.
- App users (consumers): When you create an account in the modenX mobile app we collect:
- Account & profile data: Name, email address, phone number, and any profile photo you choose to add.
- Location data: Precise and approximate location, including in the background, used to detect when you enter a partner mall and to personalise your in-store experience.
- Bluetooth / proximity data: Signals from in-mall beacons used for accurate location context.
- Camera & photos: Images you capture or upload to scan QR codes, submit receipts, or set a profile photo.
- Activity & loyalty data: Visit history, offers viewed or redeemed, loyalty identifiers, and transaction data.
- Device & push data: Device identifiers, app version, and push notification tokens.
3. How We Use Your Data
We use personal data to create and manage your account, recognise visits to partner malls, deliver personalised offers and recommendations, process loyalty and transactions, send notifications you have opted into, provide customer support, and keep our services secure.
4. App Permissions
The modenX app requests the following permissions, each of which you can grant or revoke in your device settings at any time:
- Location (including background): To detect nearby and partner malls and deliver timely, location-relevant offers.
- Bluetooth: To detect in-mall beacons for accurate location context.
- Camera: To scan QR codes and capture receipts.
- Photos: To upload receipts and a profile photo.
- Notifications: To send offers, alerts, and account updates.
5. Legal Basis
We process data under consent (cookie analytics, marketing, location, and push notifications), contractual necessity (account and platform services), and legitimate interest (security, fraud prevention).
6. How We Share Data
We do not sell your personal data. We share data only with: (a) service providers who process data on our behalf, including Google Firebase (authentication, push notifications, analytics) and our cloud hosting providers; and (b) partner malls and retailers, in line with your consent and the relevant Data Processing Addendum. Processors are bound by contract to protect your data and use it only for the purposes we specify.
7. International Transfers
Your data may be processed on servers located outside your country of residence. Where this occurs, we apply appropriate safeguards consistent with applicable data protection law, including India's DPDP Act.
8. Data Retention
Website analytics data is retained for 26 months. Contact form data is retained for 3 years or until requested for deletion. App account data is retained for as long as your account is active and is deleted following an account deletion request (see Section 11), except where we are required to retain limited records for legal, accounting, or fraud-prevention purposes.
9. Your Rights (DPDP)
Under India's Digital Personal Data Protection Act 2023, you have the right to access, correct, and erase your personal data, to withdraw consent, and to nominate another person to exercise your rights. Submit requests to [email protected].
10. Children's Privacy
modenX is not directed to children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it.
11. Account & Data Deletion
All users can delete their account directly from the modenX app by selecting Delete Account in the Profile (YOU) module. If the app is not available to you, send an email to [email protected] with your details requesting account deletion.
When you delete your account, we permanently remove your profile and account data, location history, uploaded photos and receipts, and loyalty and activity data associated with your account. Some information may be retained for a limited period only where required for legal, accounting, or fraud-prevention purposes, after which it is securely deleted. Deletion requests are actioned within 30 days.
12. Security
We use technical and organisational measures — including encryption in transit, access controls, and secure cloud infrastructure — to protect personal data against unauthorised access, loss, or misuse.
13. Cookies
See our Cookie Policy for details on cookies placed by this website.
14. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notice within the app or website.
15. Contact
General privacy enquiries: [email protected]
Account deletion & app support: [email protected]