KaamAyega Privacy Policy

Version: 2026.11.1 · Last updated: 31 October 2026

Anil Kumar (proprietor of KaamAyega), New Delhi, India ("we", "KaamAyega") is the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, for the personal data you give us in the KaamAyega app. This page explains in plain words what we collect, why, who helps us process it, who can see it, how long we keep it and what your rights are. By accepting it when you sign up, you give your consent to the use described here. You can withdraw that consent at any time (section 7).

KaamAyega is offered in India. Section 11 explains the extra rights that apply if we offer the app in other countries.

1. What we collect

• Mobile number – to log you in with a one-time code (OTP), if you log in with your phone or link a phone to your account. Never shown to other users.
• Google account details (only if you choose "Continue with Google") – the name, email address and profile photo that Google shares with us. The name pre-fills your display name, which you can change. The photo is used only if you tick "Use my Google photo". Your email is never shown to other users and is not used for anything but your login. If you link your phone and your Google login, both belong to the same account.
• Age confirmation – that you confirmed you are 18 or older when you signed up.
• Name – the display name you choose. Shown to other users.
• Profile photo (optional) – shown next to your name.
• Email address (optional) – private to you. Never shown to others and not used to log in.
• Approximate location – the society, sector or area you choose, and an area-level point (rounded to about 100 m) on your listings. Never your exact address or flat number. "Use my current location" reads your phone's location once, on your phone, to suggest an area. We do not track you in the background.
• Unit details (optional, off by default) – building or tower, wing, and flat or unit number. Building and wing are shown on your listings only if you turn that on. Your flat or unit number is never public: it is shown only to the other person in a deal you have accepted, or to a donation-drive organiser you choose to share it with, and only so they can arrange pickup.
• Your content – listings and their photos, flat and home details, comments, chats, offers, saved items, reports and blocks, and donation drives you organise (public, with an area-level drop-off point) or pledge to.
• Deal records – for lending, renting, selling and giving away: the request, dates, agreed amount, deposit amount, pickup point, each step (accepted, handed over, returned, completed), confirmations, ratings, disputes and no-show reports.
• Proof photos – for rented or borrowed items, at least three photos at pickup and at return, with the time they were taken.
• Deposit records – that a deposit was marked paid, received, refunded or disputed, and an optional UPI reference if you add one. No money passes through KaamAyega and we never ask for bank or card details.
• Samaritan Score – points and level earned from completed deals and pledges, calculated by the app's rules.
• Device and push token – so we can send notifications you allow, plus your app and Android version and phone model.
• Login diagnostics (hashed OTP telemetry) – the step where a login failed, an error code, and only the last 3 digits of the number plus a one-way hash. Kept for 90 days.
• Crash reports – when the app crashes: the phone model, Android and app version, the screen and the technical error, and an anonymous installation ID. They never contain your name, phone number, messages or photos.
• Business or NGO details (only if you register an organisation) – name, address, city, pincode, ID type, optional logo and banner, and an ID number. Public (shown on your profile, listings, chats and drives): the name, address, city, pincode, ID type, a masked ID number (only the first 2 and last 3 characters, e.g. 27••••••••••1ZV), the verification status, the logo and the banner, and, for an NGO, the NGO Darpan ID in full (it is a public directory number). Private (visible only to you and the KaamAyega team, used only to verify the organisation): the full ID number (GSTIN, Udyam or licence number, or the NGO registration number), the optional 12A and 80G numbers, and the NGO contact person's name. We never ask for PAN, Aadhaar or bank details, and you should not enter a personal PAN or Aadhaar. Verification is optional and done by hand by our team. Logo and banner are deleted when you switch back to an individual account or delete your account.
• Your consent record – which version of the Terms and Privacy Policy you accepted and when.
• Support tickets – what you write, a masked phone number and the SMS request id.

Photo safety check: before a photo is uploaded, the app checks on your phone that it is not an explicit image. The check runs only on your phone; the photo is not sent anywhere for it.

We do not collect your contacts, call logs, SMS content, files, advertising ID, payment or card details, or background location. The app shows no advertising and uses no advertising or cross-app tracking.

2. Why we use it

• To create your account, confirm you are 18 or older and log you in safely.
• To show listings and people near you, and let neighbours chat and make deals.
• To record deals, deposits and proof photos so both members know what was agreed, and to settle disputes fairly.
• To calculate the Samaritan Score and trust badges.
• To send notifications, reminders and in-app alerts you allow.
• To keep the community safe: reports, blocks, takedowns, the photo safety check, fraud and abuse checks, and legal requests.
• To fix crashes and problems, support you and improve the app.
• To keep records that the law requires, and your consent record.

We use your data only for these purposes. If we ever want to use it for something new, we will ask you first.

3. Who can see what

• Everyone (also people not logged in): your display name, photo, listings (with approximate area), comments, Samaritan Score and level, trust badges and public reviews, and public Business or NGO details.
• Only the other member of a chat or deal: the chat, offers, the deal steps, the agreed amount and deposit, the pickup point, proof photos, the UPI reference you added, and your flat or unit number once you have accepted a deal.
• Only you and KaamAyega: your mobile number, email, consent record, support tickets, the reports you make, and no-show reports and disputes about your deals.
• KaamAyega's team looks at chats, deal records and proof photos only when there is a report, a dispute, a safety issue or a legal request.

4. Who processes it for us

We use these service providers ("processors"). They get only what they need and may use it only to provide their service to us:

• Supabase – database, file storage and login. Data is stored in the Mumbai (India) region.
• MSG91 – sends the OTP by SMS (or a call if you ask), using your mobile number.
• Google – "Continue with Google" sign-in (Google Sign-In / Credential Manager). Google tells us your name, email and photo when you choose it. Google's own privacy policy applies to what Google collects.
• Google Firebase Cloud Messaging – delivers push notifications (your push token and the notification text).
• Google Firebase Crashlytics – receives crash reports (see section 1).
• OpenStreetMap services (Overpass) and Photon (komoot) – the place names you search for and the area you browse, to find places and societies.
• OpenFreeMap – map tiles for the area you view (only when you open a map).
• Authorities, only when Indian law requires it, and only what they lawfully ask for.

Some of these providers (for example Google, OpenStreetMap, Photon and OpenFreeMap) may process data outside India. We share only what each one needs, and only with providers in countries to which Indian law allows transfers.

5. We do not sell your data

We do not sell or rent your personal data, we do not share it for advertising, and we do not show advertising based on it.

6. How long we keep it

• Your account, profile and listings: until you delete them or your account. When you delete your account it is deactivated at once (hidden from everyone) and permanently deleted after 60 days; log in again within those 60 days to restore it exactly as it was.
• Deleted listings and their photos: removed at once.
• Chats: deleting a chat removes it only for you; the other member keeps their copy. When an account is permanently deleted, the messages it sent are deleted too.
• Deal records, deposit records and proof photos: kept so that disputes can be checked, until the account of either member of that deal is permanently deleted; then they are deleted for both.
• Login diagnostics: 90 days, then deleted automatically.
• Crash reports: kept by Firebase Crashlytics for up to 90 days.
• Consent records, reports and support tickets: kept as long as needed for safety, legal and dispute purposes. Reports and tickets are kept without your account link after you delete your account.
• Records the law requires (for example security logs): kept for the period the law sets, and no longer.
• Backups made by our hosting provider are overwritten on their normal schedule.

7. Your rights (DPDP Act)

You can:

• Access – ask for a summary of the personal data we hold about you, what we do with it and who we share it with.
• Correct or update – change your name, photo and email in Edit profile, or ask us to fix anything else.
• Erase – delete your account in the app (Profile → Settings → Account → Delete account) or as described on our deletion page. If a deal is still open (an item is out, a return is not confirmed, or a deposit is recorded), finish it first. Your data is deleted within 60 days: the account is deactivated immediately and can be restored by logging in again during that time.
• Withdraw consent – as easily as you gave it: turn off notifications, remove your photo or unit details in the app, or delete your account. Withdrawing consent does not affect what was done before, and some features may stop working.
• Grievance redressal – write to our Grievance Officer below. We acknowledge within 24 hours and aim to resolve within 15 days.
• Nominate – name another person who can exercise these rights for you if you die or cannot act.
• If we do not solve your problem, you may complain to the Data Protection Board of India.

Write to kaamayega33@gmail.com to use any of these rights. We may ask you to confirm it is your account before we act.

8. Children

KaamAyega is only for people who are 18 or older; everyone confirms this when they sign up. We do not knowingly collect data from children and we do not offer accounts for children with a parent's consent. If you think a child is using the app, tell us and we will remove the account and its data.

9. Security

Data is encrypted in transit (HTTPS) and each user can only reach their own private data (row-level security). Access by our team is limited to what is needed. No system is perfectly secure. If a personal data breach affects you, we will tell you without delay, with what happened and what you can do, and we will report it to the Data Protection Board of India as the law requires.

10. Changes

We may update this policy. We will change the version and date above, and the app will ask you to accept the new version before you continue.

11. If you use KaamAyega outside India

KaamAyega is currently offered only in India. If we offer it in other countries, the following also applies there:

• European Union / United Kingdom (GDPR): we use your data to provide the service you asked for (contract), to keep the community safe and fix problems (legitimate interests), where the law requires it (legal obligation), and for optional features you turn on (consent). You also have the rights to restrict or object to processing and to data portability (a copy of your data in a common format), and to complain to your local data protection authority. Transfers outside your country are protected by standard contractual clauses or another lawful safeguard.
• United States (including California): we do not sell or share personal information for advertising. You can ask to know, correct or delete the personal information we hold, and we will not treat you differently for using these rights. KaamAyega is not for children under 13 (and, like everywhere, not for anyone under 18).

Write to kaamayega33@gmail.com to use any of these rights.

12. Contact and Grievance Officer

• Anil Kumar (proprietor of KaamAyega), New Delhi, India
• Grievance Officer: Anil Kumar · kaamayega33@gmail.com