Privacy Policy

We collect the minimum needed to run a trustworthy marketplace — and identity documents are stored in encrypted-at-rest hosting, visible only to our small verification team.

1. Who we are

KittiPoy ("we", "us") operates kittipoy.com, the KittiPoy mobile apps and the onboarding portal. This policy explains what personal data we collect, why, and the choices you have. By using our services you agree to this policy.

2. Data we collect

• Account data — your name, phone number and/or email address (used to log in and for order updates).
• Identity data (professionals only) — a live photograph, a 20-second introduction video, and photos of proof of identity (e.g. Aadhaar, passport, driving licence) and proof of address. These are required for KYC verification and are reviewed by trained human agents only. Documents are stored outside the public web root and are never publicly accessible.
• Location data — approximate area when you search ("nearby professionals"), the address where a service is performed, and (professionals) your location when you go online so customers can find you.
• Booking & payment data — services booked, amounts, payment mode. Online payments are processed by Razorpay; we never see or store your card numbers or UPI PIN — only the order identifier and payment status.
• Reviews & ratings — the rating and comments you leave after a completed job.
• Technical data — device push-notification tokens (to deliver booking updates), crash/diagnostic logs, IP address, and app version.

3. How we use it

• To create and secure your account (OTP or password authentication).
• To connect customers with suitable professionals and to show nearby results.
• To verify professional identities, prevent fraud, and keep the community safe.
• To send service notifications (job status, KYC decisions) by push notification, SMS and email.
• To resolve disputes and respond to support requests.
• In aggregate, to improve the platform (e.g. which categories are most needed in which areas).

4. What we share, and with whom

When you book a job, the professional sees your name, phone number and service address — nothing else. Professionals' publicly visible profile shows their name, work category, photo, ratings and approximate distance — never their documents, phone number or exact location. We share only what's strictly necessary with:

• Razorpay (payments) — order and contact details as required by payment regulations.
• SMS/email providers — the message and destination address.
• Firebase/Google (FCM) — device tokens for push delivery.
• Law enforcement — only when legally compelled.

We do not sell your personal data. Ever.

5. Security

All traffic is encrypted (HTTPS). Passwords are stored hashed with bcrypt. Identity documents live in a private directory that cannot serve files directly to the internet; every download requires an authenticated session and is logged. Access inside KittiPoy is role-restricted — only verification agents reviewing your submission can open your KYC files, and every decision is recorded in an audit trail.

6. Retention

• Verified KYC media: retained while your professional account is active; deleted within 90 days of account deletion or rejection withdrawal (other than copies we must keep under law).
• Rejected KYC media: deleted within 30 days if you do not resubmit.
• Booking records: 7 years (accounting and tax requirements).
• OTP codes: auto-expired within minutes and purged.

7. Your rights

You can access, correct or delete your personal data, or object to processing, by writing to [email protected] from your registered phone/email. We respond within 30 days. Deleting your account may be subject to pending bookings or payment obligations.

8. Children

KittiPoy is not for persons under 18. We do not knowingly collect data from minors; if we learn we have, we delete it.

9. Changes

Material changes will be notified in-app before they take effect. Continued use after notification means acceptance.

10. Contact

Grievance officer: [email protected] · Kochi, Kerala, India.