Privacy Policy
Last updated [DATE] · Applies to the Nezdoo mobile app and nezdoo.com
Nezdoo is run by [LEGAL ENTITY NAME] ("Nezdoo", "we"). This policy explains what the app collects, why it needs it, and what you can do about it. It describes the app as it actually works, so where something is not collected, we say so plainly.
The short version
- We collect what the app needs to do its job: an account, a profile, and the listings, bookings, payment records and messages you create in it.
- We run no advertising, no analytics SDK and no tracking. There is no ad identifier, no third-party analytics library and no profiling of you across other apps or sites.
- We do not sell your data, and we do not share it for advertising.
- We never see your card or bank details, because Nezdoo does not process payments. Rent is paid to your owner directly and only recorded in the app.
What we collect
| What | Why |
|---|---|
| Account — your email address, and a password if you set one | To create your account and sign you in. You can sign in with a one-time code sent to your email instead of a password. |
| Profile — your name, phone number and profile photo, and whether you are a tenant or an owner | So the other side of a booking knows who they are dealing with. Your phone number is shared with an owner only under the rules below. |
| Search preferences (tenants) — preferred city and area, move-in date, budget range, room types | To fill in your searches. You can leave these blank. |
| Business details (owners) — business name, GST and PAN numbers, business address, contact email and phone | So your listings carry a real business behind them. GST and PAN are optional and are not shown to tenants. |
| Listings (owners) — PG name, address, location on the map, photos, amenities, rooms, beds and rent | This is the listing tenants see. You publish it and can unlist it. |
| Bookings and stays — requests, move-in dates, which bed, and the tenancy that follows | To run the booking, and to show both sides the same record of it. |
| Payment records — amount, what it was for, the date, and whether it was cash, UPI, card or a bank transfer | The rent ledger. These are records typed in by the owner, not transactions. No account numbers, card numbers or UPI IDs are collected. |
| Reviews and enquiries — your rating, your words, owner replies | So other tenants can read them, and so an owner can follow up. |
| Messages — chat between a tenant and an owner about a PG | To deliver them. Only the two people in a conversation can read it. |
| Notifications and your notification settings | To tell you about your own bookings, payments and messages. |
Device permissions
- Location (while using the app) — used to centre the map on you and to show PGs near you. It is used on your device for that search. Your location is not stored on our servers and is never attached to your profile. You can decline it; the app then asks you to pick an area instead.
- Camera and photos — only when you choose to add a PG photo or a profile picture. The app takes still images only; it does not record audio or video, and it does not read your photo library otherwise.
What we do not collect
No card, bank or UPI credentials. No contacts, no call logs, no SMS. No advertising ID. No background location. No Aadhaar or other government ID — the app has no identity verification, and a profile is not a vouched identity.
Who can see what
- Your listings and reviews are public to signed-in users of the app. A review shows your name only while "Profile visible to owners" is on — turn it off and your name comes off your reviews.
- An owner sees your name and photo when you request a bed with them.
- Your phone number reaches an owner once your booking is accepted, so they can reach the person living in their building. Before that, the request itself is the conversation. The "Show phone number" setting controls whether it is visible earlier.
- Payment records are visible to the owner who recorded them and to the tenant they are about, and to nobody else.
- Access is enforced on our database itself — every table has row-level rules, so one account cannot read another's data even if the app asked it to.
Who we share it with
We use a small number of service providers, and only for the job named:
- Supabase — our database, sign-in and file storage. Your data is held in their infrastructure in the [REGION — e.g. Mumbai, India] region.
- Resend — sends the sign-in code and account emails. It sees your email address and the message.
- Google Maps — draws the map. On Android, and when an owner searches for their PG's address, the search text and approximate map area go to Google under Google's privacy policy.
- Apple Maps — draws the map on iPhone, under Apple's privacy policy.
We also disclose data if the law requires it, or to establish or defend a legal claim. We do not sell personal data, and we do not share it with advertisers or data brokers.
How long we keep it
For as long as your account exists. Deleting it removes your profile and everything that is about you: your preferences, your saved PGs, your messages, your reviews and any open booking request.
One thing outlives the account, and it is worth being exact about. If you have stayed at a PG, your owner's record of that stay — the tenancy, and the rent they recorded against it — stays in their ledger, with your account unhooked from it and the rows labelled "Former tenant". Their books are their business record, and a row showing an amount, a date and a room number identifies nobody once the person is off it. Beyond that we keep only what the law requires, for as long as it requires. Backups are not edited in place and roll off on their own cycle within 30 days.
Your choices
- Edit or correct anything on your profile in the app, under Profile → Edit Profile.
- Control what is shared under Profile → Privacy & Security: profile visibility, phone number, activity status and personalised recommendations.
- Get a copy, or get it deleted — email [email protected] from the address on your account and we will action it within 30 days. See how to delete your account.
- Withdraw a permission — location and photo access can be turned off in your phone's settings at any time.
Security
Everything between the app and our servers travels over HTTPS. Your sign-in session is held in the device's own secure storage (Keychain on iPhone, Keystore on Android), not in ordinary app storage. Passwords are stored hashed by our authentication provider and are not visible to us. No system is perfect, and we will tell affected users promptly if something goes wrong.
Children
Nezdoo is for adults renting accommodation and is not directed to children under 18. We do not knowingly collect data from them; if we learn that we have, we delete it.
Changes
If this policy changes in a way that matters, we will change the date at the top and tell you in the app before it takes effect.
Contact
[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Email: [email protected]
Grievance Officer: [NAME] · [email protected]