1 About this policy
Oneness Superapp Private Limited, operating as Oneness Superapp (“we”, “us” and “our”), explains here how we handle personal information when you use https://onenesssuperapp.com, an Oneness app if offered, or an assisted retailer channel connected with our services.
This policy covers enquiries and enabled services for mobile, DTH and OTT recharges; BBPS bill payments; Aadhaar Enabled Payment System (AePS) services; domestic money transfer; new PAN application assistance; hotel, flight, bus, cruise and rail bookings; and courier services. A service-specific notice may explain additional processing before you proceed.
2 Information required for your request
The information we need depends on your chosen service. We ask for details relevant to that request and identify required fields. Declining necessary information may prevent us or the relevant provider from completing it.
Contact and account details: your name, mobile number, email, address and login information, where an account is available, to identify your request and communicate with you.
Recharges and bills: the mobile, subscriber or customer identifier, selected provider, plan, bill information and amount, so the payment reaches the intended account.
Payments and verification: sender and beneficiary details, bank account information, transaction references, identity and address documents, and verification results, where needed for the supported financial service or applicable requirements.
PAN assistance: application particulars, photograph, signature and accepted supporting documents, limited to preparing and submitting the application you request.
Travel: passenger or guest names, ages, contact details, itinerary and booking references; identification, nationality or passport details where the journey or supplier requires them; and assistance preferences you choose to provide.
Courier: sender and recipient names, addresses and contact numbers, shipment description, declared value, delivery instructions and necessary delivery confirmation.
Service interactions: enquiry and complaint correspondence, receipts, transaction status and relevant technical records, to investigate requests and operate our channels.
3 Where information comes from
You may provide information directly through forms, documents, communications or an assisted service point. We may also receive details from a person arranging a booking, delivery or payment involving you, and from providers confirming verification, payment, booking or delivery status.
If you supply another person’s information, make sure you are entitled to do so, give them access to this policy and obtain any permission required. Tell us promptly if information has been entered incorrectly. We handle information submitted through our assisted channels under this policy; a retailer’s separate business activities may have their own privacy arrangements.
4 How we use information
We use relevant information to prepare and submit instructions, arrange the requested service, confirm its outcome, issue records and handle cancellations, refunds or complaints. We also use it to check identity where required, reconcile payments, detect misuse, investigate disputed activity and meet applicable recordkeeping or disclosure requirements.
Technical and service records may help us diagnose errors and improve the relevant journey. We limit this work to information needed for that purpose. If a new use falls outside the purpose explained when information was collected, we will provide the necessary explanation and obtain further permission where required before starting that use.
5 Your choices and consent
We explain the purpose of a request for sensitive information and obtain the consent required for its collection and use. Accepting our general terms does not by itself authorise every use of your information. You can ask what is required, decline optional information or contact us to withdraw consent.
Promotional communications are a separate choice. Where we offer marketing subscriptions, we seek your separate permission and provide a way to stop them. Refusing marketing does not affect access to a service. Necessary messages about your transaction, security or complaint may still be sent while we handle that matter.
6 Aadhaar and payment information
Where an enabled service uses Aadhaar authentication, we explain the applicable purpose and route before you proceed and obtain the required consent. Authentication must take place through the permitted provider process. Core biometric information, including raw fingerprints and iris scans, must not be copied into or retained in Oneness customer records, logs or backups. Authentication identity packets must be handled only within the permitted process and must not be added to those records. Transaction acknowledgements and other legally permitted verification records are distinct from biometric data.
Provide payment authentication details only in the designated transaction process. Do not send PINs, passwords, full card security details or authentication codes in a support message. We limit payment and identity information to the service, verification and lawful recordkeeping purposes that apply.
7 Who may receive information
We disclose relevant information to the recipients needed for a defined purpose, subject to applicable permission, confidentiality and legal requirements. Depending on the service, these may include:
Banks, payment processors, remittance providers, bill payment networks, billers and recharge providers, to verify, process, reconcile or investigate the transaction.
The relevant PAN application channel and authority, to submit documents and communicate application status or clarification requests.
Accommodation providers, carriers, reservation partners and courier operators, to fulfil the booking or shipment and handle changes or delivery issues.
Retailers handling your instruction, and technology, communications or support providers working for us, to carry out the relevant task with access limited to their role.
Professional advisers, auditors, courts or competent authorities, where necessary for advice, a dispute, an audit or a lawful requirement.
8 Responsibility when providers are involved
We require providers processing information for us to follow appropriate confidentiality, security and permitted-use terms. A bank, carrier or other service provider may separately determine how it handles information under its own obligations. We explain the relevant provider’s involvement through the service journey or notice.
If a business transfer or restructuring requires access to customer information, we limit disclosure to what is necessary, apply confidentiality protections and give any notice or obtain any permission the law requires. A business change does not remove the protections required for your information.
9 Cookies technical information and app permissions
Where used, cookies and similar technologies may maintain a session, remember a choice or record a technical event. Information can include an IP address, browser or device details, pages visited and error records. Optional analytics or advertising technologies require a clear explanation of their purpose and any applicable choice before use.
If an app requests access to a camera, selected files, location or another device feature, we explain why the particular function needs it. You can manage permissions through your device settings; withdrawing a required permission may affect that function.
For questions about cookies, technical information or permissions relating to a service you use, contact info@onenesssuperapp.com or +91 9147223803.
10 Protecting information
We apply organisational, technical and physical precautions proportionate to the information and service involved. These include restricting access to authorised roles, protecting information during handling and transmission, and requiring confidentiality from people who handle it. We review concerns and address identified weaknesses.
No system can eliminate every risk. Protect your account credentials, check the recipient before sending documents and contact us if you suspect misuse. We will assess security incidents, take appropriate containment and corrective action, and make notifications to affected people and authorities within the periods required by the laws that apply.
11 How long information is kept
We decide retention by record type and purpose. Relevant factors include completing the transaction, dealing with refunds or disputes, maintaining necessary accounts, meeting legal recordkeeping duties and preserving evidence for a specific investigation or claim. We do not keep sensitive information longer than its lawful purpose or an applicable requirement justifies.
When that need ends, we delete the information or irreversibly anonymise it, as appropriate. A deletion request may therefore leave some records subject to a lawful retention duty or legal hold. Where backup copies exist, removal follows the applicable replacement process, with continued restrictions on access and use.
12 Storage and transfers
A service may require information to pass between Oneness and providers in different locations, particularly for travel. We make transfers only where permitted, with the protection, permission and contractual arrangements required for the information concerned. Any applicable restriction on payment, Aadhaar or other regulated information continues to apply.
Contact info@onenesssuperapp.com or +91 9147223803 for clarification about storage locations or transfers connected with your request.
13 Access correction and deletion requests
You can contact us to request access to information you provided, correct an error, withdraw consent or ask for deletion. We assess the request under the law applicable to the information and explain any permitted restriction. We may ask for proportionate verification before disclosing or changing a record, particularly where another person’s information is involved.
Withdrawal does not undo a completed transaction or remove a lawful recordkeeping requirement. If we cannot continue a requested service without the information, we explain the consequence. Where a provider holds the relevant record independently, we identify the appropriate contact or help route the request when possible.
14 Children and assisted bookings
Independent accounts are intended for people aged 18 or above. An adult may arrange travel or another permitted service involving a child, with parental or guardian authority where required. We limit the child’s information to the details needed for that request and seek the applicable consent.
A parent or lawful guardian can contact us about information relating to their child. Please avoid including unnecessary documents or sensitive details. We investigate reports of an account created by a child and take appropriate steps, while preserving any records lawfully required.
15 Questions and complaints
For privacy questions and grievances, contact Oneness Superapp Private Limited at info@onenesssuperapp.com or +91 9147223803.
Explain your concern, the service involved and any relevant reference number. We will review privacy grievances promptly and redress them within one month of receipt, or a shorter period where the law requires. We will explain the outcome and any available next step. This process does not limit your right to approach a competent authority or seek another remedy available under applicable law.
For general assistance, contact info@onenesssuperapp.com or +91 9147223803. Business correspondence: Oneness Superapp Private Limited, Office No. 1205, Cyber One, Green Scape Group, Plot No. 4 & 6, Sector 30A, Vashi, Navi Mumbai, Maharashtra 400703, India.
16 Other websites and policy changes
A link to another website or application does not place it under this policy. Read its privacy information before supplying details. We remain responsible for our own handling of information.
We may update this policy as services or legal requirements change. We display the effective date and provide additional notice of material changes where appropriate or required. Where a changed use requires fresh consent, we obtain it; publishing a revised policy alone does not supply that consent.