Privacy Policy

Effective Date: July 2, 2026

This Privacy Policy describes how DoToR ("we", "us", or "our") collects, uses, and shares your personal information when you use our mobile application ("DoToR") and related services.

By using DoToR, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you register, we collect your phone number (via Firebase Phone Authentication), name, email address (optional), and profile photo.
• Service Address: Your repair/service location address and pincode.
• Photos & Videos: Images and videos you upload describing repair issues or your profile.
• Technician Details: If you register as a technician, we collect your service area, skills/categories, experience, and DigiLocker verification data (including government-issued identity details such as name, date of birth, and document numbers you choose to share via DigiLocker).
• Chat Messages: Messages exchanged in in-app chat between customers and technicians are stored on our servers to facilitate communication.
• Reviews: Ratings and reviews you submit about technicians or services.

1.2 Information Collected Automatically

• Real-Time GPS Location: We collect your precise GPS location when the app is in use (foreground) to facilitate real-time technician tracking, distance calculation, and auto-assignment of nearby technicians.
• Device Information: Device model, operating system version, and unique device identifiers.
• Push Tokens: Expo push notification tokens to send you alerts about job status, technician arrival, and service updates.

1.3 Information from Third Parties

• LocationIQ: Address autocomplete search uses LocationIQ's API. LocationIQ's privacy policy applies to search queries you enter.
• Cloudinary: Uploaded photos and videos are stored and processed via Cloudinary.

2. How We Use Your Information

• To create and manage your account
• To connect you with nearby technicians or customers
• To provide real-time GPS tracking of technician location
• To calculate distances and auto-assign the nearest available technician
• To send push notifications about job status, alerts, and updates
• To enable in-app chat between customers and technicians (chat messages are stored for service records)
• To store and display job history and performance data
• To improve our services and troubleshoot issues
• To verify technician credentials via DigiLocker

3. How We Share Your Information

We share your information only as necessary to provide our services:

• Between Customers and Technicians: Your name, location, and photos are shared between customers and assigned technicians to facilitate the service.
• Firebase (Google): All data is stored on Firebase Realtime Database and Firebase Storage, which are Google Cloud services. Google's Privacy Policy applies to data storage.
• Cloudinary: Uploaded images and videos are processed and stored on Cloudinary's servers. Cloudinary's Privacy Policy applies.
• LocationIQ: Address search queries are processed by LocationIQ. LocationIQ's Privacy Policy applies.
• Expo: Push notifications are delivered via Expo's push notification service. Expo's Privacy Policy applies.

We do not sell your personal information to third parties, nor do we use your personal data for automated decision-making, profiling, or machine learning purposes.

4. Data Storage and Security

Your data is stored on Google Cloud (Firebase) servers located in the United States and/or India. We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS)
• Firebase Realtime Database security rules to restrict unauthorized access
• Phone number-based authentication with OTP verification
• ProGuard code obfuscation in release builds

However, no method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Data Breach Notification: In the event of a data breach that affects your personal information, we will notify you within 72 hours of discovery via the contact information we have on file (phone notification or email) and provide details of the breach and steps taken to address it.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. When you delete your account, we will delete your personal data from Firebase within 30 days, except where retention is required by law.

6. Your Rights and Choices

• Location Services: You can disable GPS location access in your device settings at any time. Note that this may limit the functionality of real-time tracking.
• Push Notifications: You can opt out of push notifications in your device settings.
• Camera/Photos: You can deny camera and photo library access in your device settings.
• Account Deletion: You can request account deletion by contacting us at the email below. Your data will be removed within 30 days.
• Data Access: You can request a copy of your personal data by contacting us.

7. Children's Privacy

DoToR is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

8. Permissions

DoToR requires the following device permissions:

• Location (Fine & Coarse): For real-time technician tracking and auto-assignment.
• Background Location: To continue sharing technician location when the app is in the background during an active job.
• Camera: To take photos of repair issues and profile pictures.
• Storage: To upload photos/videos from your device.
• Notifications: To send job alerts and updates.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date" at the top. You are advised to review this policy periodically.

10. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us:

11. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in India.