This policy explains what the Cylin app collects, why, who it is shared with, and how to delete it. It covers the Cylin apps for customers, merchants (gas dealers), their delivery staff, and Cylin's own administrators.
1. What Cylin does
Cylin lets a household order LPG gas cylinders for delivery. Your address decides which merchant serves you: the dealer whose service area covers it. That merchant delivers the cylinder and takes payment directly, in cash or on a credit account with them. Cylin never handles your money and never asks for card or bank details.
2. Information we collect
- Account: your phone number (used to sign in with a one-time code), and if you add them, your name, email address, username and profile photo. If you sign in with Google or Apple, we receive an account identifier and the name and email that service shares.
- Location: the delivery addresses you save, including a map pin, and your device's precise location if you choose "use my location". We use it to find the merchant that serves you and to deliver. You can add an optional photo of your gate or building to help the delivery person.
- Delivery staff location (merchants' delivery staff only): if you deliver orders for a merchant, while an order is assigned to you and out for delivery your phone sends its precise location (and speed and direction) to Cylin every few seconds, so the customer can see where their delivery is and how long it will take. It starts when the order goes out for delivery and stops when it is delivered, cancelled or fails, or when you sign out. Cylin never reads your location at any other time, and never in the background outside a delivery. The app asks your permission first (“While using the app” is enough), shows a notice on your phone while it is on, and you can turn it off in your phone's settings. You choose your usual vehicle (bicycle, motorcycle or truck), which only sets the speed used to estimate the time.
- Orders: what you order, delivery details and instructions, order status and history, loyalty points, and, if your merchant gives you credit, the amounts on that account.
- Documents and photos you upload: cylinder insurance documents, photos for an insurance claim, and your profile photo. Only you, the people handling your claim, and Cylin's administrators can open them, through short-lived links.
- Someone else's details: when you order for someone else, the name and phone number you type are sent with that order. The app does not read your phone's contacts.
- Camera: used to scan QR codes at delivery and to photograph documents. Scans are not stored; photos are stored only when you choose to upload them.
- Messages: support conversations with Cylin, and feedback you send from the app (including a screenshot, if you attach one).
- Technical data: a notification token so we can send order updates, crash reports, basic in-app usage statistics, and your IP address in our server logs. We do not use an advertising identifier.
Fingerprint and face unlock for the app lock are handled by your phone; Cylin never receives them.
3. How we use it
To sign you in, match you to a merchant, place and deliver orders, show prices, run loyalty points and cylinder insurance, send notifications you have not turned off, answer support requests, prevent fraud and abuse, and fix problems in the app. We do not sell your information or use it for third-party advertising.
Offers and news by email. If you have added an email address, we may send you occasional offers and news about Cylin. This is on by default. You can turn it off at any time in the app under Settings → Notifications, or with the unsubscribe link at the bottom of every such email; after that we send you no more of them. Order and account emails are separate and have their own setting.
4. Who we share it with
- Your merchant and their delivery staff: your name, phone number, delivery address and order, so they can deliver it.
- The customer, and anyone they share with, for a delivery in progress: while your order is out for delivery, you can see the delivery person's name, vehicle and live position on a map, and the time and distance left. You can also make a link that lets someone else (for example, someone at home) watch the same delivery without signing in. Anyone with the link sees the rider's position, first name and vehicle and the delivery's approximate area (not your exact door), until the delivery ends and for two hours after. You can switch the link off at any time in the order's delivery screen, and it then stops working. The merchant's owner and managers can see their own delivery staff on a map while they deliver.
- Service providers who run parts of Cylin for us: our database host (MongoDB Atlas, servers in Germany) and web host, Google Firebase (crash reports and usage statistics), OneSignal (push notifications), Brevo (sending email), our SMS provider (to send sign-in codes), Google Maps (maps, addresses and road routes for deliveries), and Google or Apple sign-in if you use them. They may only use the data to provide their service to Cylin.
- An AI app you connect: if you choose to connect Cylin to an AI app such as Claude or ChatGPT, Cylin sends that app the information you ask it for: your orders, addresses, prices and credit balance, and for merchant staff the merchant's orders, including customers' names, phone numbers and delivery addresses. What the AI app does with it is covered by that app's own privacy policy. Nothing is sent unless you connect one, and you can disconnect it at any time in the app under Settings → Devices. See Cylin for Claude and ChatGPT.
- When the law requires it, for example a valid request from a Nepali authority.
5. Keeping and deleting your information
You can delete your account at any time in the app: More → Delete account. This permanently deletes your profile, photos, saved addresses and insurance documents, and signs you out on every device. Your phone number is freed, and your Google or Apple sign-in unlinked. Past orders stay with the merchant as part of their records, without your name or phone number. If an insurance claim is still open, its documents are kept until the claim ends and then deleted.
If you cannot use the app, email admin@eachut.com from, or mentioning, the phone number on your account, and we will delete it within 30 days. Deleted information disappears from our backups within 60 days.
Delivery tracking data. The latest position of a delivery is replaced every few seconds and is shown only while the delivery is under way. The route a delivery took is kept for 30 days so that a merchant or Cylin can settle a complaint about a delivery, then deleted automatically. Only the merchant's owner and managers and Cylin's administrators can see that route; it is never shown to customers or other delivery staff.
6. Security
All traffic between the app and our servers is encrypted (HTTPS). Sign-in codes are stored only in hashed form, sessions can be revoked from the app, and uploaded documents are kept outside the public web and opened only through signed links that expire within minutes.
7. Children
Cylin is for adults ordering gas for a household or business. It is not directed at children under 16, and we do not knowingly collect their information.
8. Changes
If we change this policy in a way that matters, we will tell you in the app before the change applies.
9. Contact us
Questions about this policy or your information: admin@eachut.com or +9779801149729.
10. Reporting a security issue
If you believe you have found a security vulnerability or a way to access another person's data, please report it privately to admin@eachut.com with “SECURITY” in the subject line, and give us reasonable time to fix it before disclosing it publicly. Please do not access, change, or keep anyone else's data while investigating — tell us what you found rather than how much you could reach. We aim to acknowledge reports within 3 working days.
Last Updated: 23 Oct 2026