Privacy Policy

1. Data Jo Hum Collect Karte Hain

1.1 Account Data

• Mobile number (verification ke liye)
• Name, gender, city
• Email address (optional)
• Profile photo (optional)

1.2 Buddy KYC Data

• Aadhaar number (last 4 digits displayed only)
• Government ID document images (encrypted storage)
• Live selfie for face verification

1.3 Booking Data

• Booking details: date, time, location, duration
• Payment transaction IDs (not card details — Razorpay handles that)
• Reviews and ratings you submit

1.4 Usage Data

• Pages visited, search queries (anonymized)
• Device type and OS (for app optimization)
• Crash reports (no personal data)

2. Data Ka Use Kaise Hota Hai

• Service delivery: Bookings process karna, matches suggest karna, notifications bhejana
• Safety: KYC verify karna, fraud detect karna, disputes resolve karna
• Platform improvement: Features better banana, bugs fix karna
• Legal compliance: Applicable Indian laws ke under data retain karna
• Customer support: Aapke questions aur complaints resolve karna

3. Data Sharing

Hum aapka data kabhi nahi bechte. Limited sharing sirf yahan hoti hai:

• Razorpay: Payment processing ke liye (PCI-DSS compliant)
• KYC Partners: Identity verification ke liye (DigiLocker/UIDAI authorized APIs)
• Law Enforcement: Valid legal order milne par, as required by Indian law
• Between Users & Buddies: Booking confirm hone par naam aur contact sirf session ke liye

4. Data Security

• All data encrypted in transit (TLS 1.3) aur at rest (AES-256)
• KYC documents alag encrypted storage mein, main database se connected nahi
• Access controls — sirf authorized team members ko sensitive data ka access
• Regular security audits aur penetration testing
• Passwords hash kiye jaate hain — hum khud nahi dekh sakte

5. Aapke Rights (DPDP Act 2023)

India ke Digital Personal Data Protection Act, 2023 ke under aapke yeh rights hain:

• Access: Apna data dekh sakte ho (Settings → Privacy → Download My Data)
• Correction: Galat data correct karo anytime
• Deletion: Account delete kar sakte ho — data 30 days mein erase ho jaata hai (legal holds hone par longer)
• Portability: Data JSON format mein export kar sakte ho
• Grievance: privacy@carryfriend.in pe complaint kar sakte ho

6. Data Retention

• Active accounts: Jab tak account active hai
• Booking records: 7 years (GST compliance)
• KYC documents: Account deletion ke baad 1 year (fraud prevention)
• Chat messages: 90 days
• Inactive accounts: 2 years baad automatically purge

7. Cookies

Hum sirf essential cookies use karte hain — login session maintain karne ke liye. Analytics cookies optional hain aur aap opt-out kar sakte ho Settings mein. Hum cross-site tracking nahi karte.

8. Children's Privacy

CarryFriend 18+ users ke liye hai. Hum knowingly minors ka data collect nahi karte. Agar aapko lagta hai ki kisi minor ne account banaya hai, turant report karo: safety@carryfriend.in

9. Contact & Grievance Officer