Privacy Policy

1. Information We Collect

Kariyo is a two-sided marketplace connecting customers requiring local labour and technical services with skilled workers. We collect only information that is strictly necessary to deliver these services:

A. Account Registration & Authentication

• Basic Profile: Your full name, email address, mobile phone number, and a securely salted password hash.
• Google Sign-In: When you choose to authenticate via Google, we receive your Google ID, name, verified email address, and profile photo URL via Google OAuth API. We do not receive access to your Google account password or personal files.

B. Customer Data

• Job Postings: Task title, category, description, budget estimate, timeline, general job locality/address, and optional photographs uploaded to describe the required work.
• Booking & Feedback: Booking confirmation history, agreed quotations, and ratings/reviews submitted for service providers.

C. Worker Profile & Service Capabilities

• Professional Details: Display name, profile photograph, service categories, subcategory skills, years of trade experience, spoken languages, and general service area/locality.
• Trade Quotations: Quotes submitted to customer postings, including proposed rates, scope, and estimated duration.
• Payout Information: For processing earnings settlements, worker-provided payout preferences (such as UPI ID or bank account details).

D. In-App Communications & Progress Media

• Chat Messages: Text communication exchanged between matched customers and workers for confirmed bookings.
• Progress Photos: Job arrival and progress updates uploaded by workers during booking execution. Progress media is stored in protected storage accessible only by booking participants.

E. Payment Transaction Records

• Digital Payments: Payment gateway transaction IDs, payment status, amount, and timestamp. Note: Kariyo does not process or store sensitive payment card numbers, CVVs, or online banking passwords. All digital payments are processed through RBI-authorized payment aggregators.
• Cash Payments: Declarations and mutual confirmations of cash handed over directly upon job completion.

F. Location Information Clarification

Kariyo does not track your continuous or background real-time GPS location. We only collect general locality names or one-time approximate coordinates chosen by you to match local jobs within your working radius.

2. How We Use Your Information

We use the collected information solely for legitimate marketplace operations:

• To facilitate matching between customers and local service providers.
• To authenticate user sessions and secure your account with Sanctum token technology.
• To deliver booking updates, arrival notifications, and progress messages.
• To calculate worker earnings, process settlement requests, and generate booking invoices.
• To prevent fraudulent behavior, enforce community standards, and investigate disputes.
• To provide customer support and grievance redressal.

3. Data Sharing and Disclosure

Kariyo does not sell, rent, or trade your personal data to advertisers or third parties. Information is disclosed only in the following controlled contexts:

• Between Matched Users: When a customer and worker enter into a quotation or booking, their respective names, contact numbers, and job locality are shared to enable job completion.
• Authorized Service Providers: Trusted technical infrastructure providers (such as Cloud hosting, SMS/email verification, and payment gateway partners) subject to confidentiality agreements.
• Legal & Regulatory Authorities: Where mandated by law, court order, or official regulatory requirement under Indian law.

4. Data Storage and Security

We implement industry-standard technical and organizational security measures:

• All network communication is conducted over secure HTTPS/TLS encryption.
• Passwords are hashed using industry-standard Bcrypt cryptography.
• Sanctum session tokens are stored securely in encrypted platform storage (Flutter Secure Storage) on your mobile device.
• Private booking attachments and progress updates are protected by server-side authentication checks and are not publicly browsable.

5. Data Retention & Account Deletion Policy

In full compliance with Google Play Store policies, Kariyo provides users with full autonomy over their accounts:

• In-App Deletion: You can delete your account directly inside the Kariyo mobile application at any time by navigating to Profile & Settings > Delete Account.
• Web Deletion Portal: If you no longer have access to the app, you can submit an account deletion request through our public web portal at kariyo.in/delete-account.
• What is Deleted: Upon verified deletion, your personal identity information (name, phone number, email, profile photos, Google credentials, and authentication tokens) is permanently erased from active systems.
• Statutory Retention Exception: In accordance with statutory Indian taxation, financial reporting, and dispute-resolution laws, anonymized records of completed financial transactions, invoices, and accounting ledger entries are retained for the statutory retention period.
• Pre-Conditions: Accounts cannot be deleted while there are active, unfulfilled bookings, pending worker settlement payouts, or open disputes under investigation.

6. Children's Privacy

Kariyo is designed for adults capable of entering into legally binding service agreements under the Indian Contract Act, 1872. We do not knowingly collect personal information from individuals under the age of 18.

7. Changes to this Privacy Policy

We may update this policy periodically to reflect platform enhancements or regulatory changes. Updated versions will be published on this page with an updated effective date. Material updates will also be notified within the mobile app.

8. Contact & Grievance Redressal

For questions regarding this policy, your personal data, or to lodge a grievance under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, contact: