Notice · version 2026-09-v1
What we collect, and why
Every kind of personal information this product holds, what each one is for, and how long it stays. Nothing here needs you to have read anything else.
Draft
This notice has not yet been through legal review.
The table below is factual — every row names a column or a code path, and the last band on this page lists the places where the product does not yet do what we would like it to. The legal framing around all of it is not settled, and the grievance officer is not yet appointed. Both land before anyone can create an account in production.
Itemised
What we hold, item by item
If a row here does not match what the product does, the row is wrong and we want to know.
| What | Why we hold it | How long | Who sees it |
|---|---|---|---|
| Your email address | To sign you in, to send you an alert when somebody scans your code, and to answer you. | Until you delete your account, then a further hold before purge. | Never to anyone who scans. Sealed at rest. Staff see a mask; unmasking it is itself recorded against the person who did it. |
| Your WhatsApp number | To prove you are a real person before a stranger can be sent to your inbox, and to reach you quickly. | Until you delete your account, then a further hold before purge. | Never to anyone who scans. Sealed at rest. Staff see a mask; unmasking it is itself recorded against the person who did it. |
| Your password | To sign you in. | Until you change it. Stored as a scrypt hash, never as the password. | Never, to anyone, including us. |
| What you register — a vehicle, a helmet, a bag — and its nickname, colour and note | To show a scanner enough to know they have the right thing, and to let you tell them something. | Until you delete it. | What kind of thing it is, and whether it is available, are always on the public page. The nickname and the colour appear only if you switch them on. Up to five things per account. |
| Messages a scanner sends you, and the scan record | To deliver the message, to show you your own history, and to act on abuse. | Set to a year — not yet swept automatically, see below. | The scanner is a handle to you, never a name or a number. |
| Emergency contacts you add | So somebody can be told if your things are found in an emergency. | Until you remove them. Someone who asks us to stop is marked and never contacted again, but their details are not yet erased — see below. | Never to a scanner — not the number, not the name. They can stop us at any time. |
| A delivery address and a phone number, if you buy a sticker | To post it to you, and to give the courier a number to call. | With the order, for as long as tax and consumer law require it. An address you save for reuse stays in your address book until you delete it. | To the delivery partner only. Sealed at rest. |
| Payment details | To take the payment. | We never receive them. They are typed into the payment provider’s own window. | We are told the method, the last four digits of a card and the bank that issued it. Never the number. |
| Your IP address | To stop abuse, to apply rate limits, and to record the moment you agreed to something. | A scan keeps only a keyed hash and a shortened address. Kept in full on a sign-in challenge, on the record of your consent, on a message sent to you and on security events. | Staff see a short handle. On the security and message screens the address itself is visible to staff who hold that permission, and looking is recorded. |
What you can do
Your rights, and how to use them
Each of these is a working screen, not an address to write to and wait. Where a request needs a person, we answer within 30 days.
- See what we hold
- Privacy and data in your account prepares a copy on the spot. It covers your account, the things you have registered, your QR codes, your scan history and the messages sent to you. It does not yet include your emergency contacts, your saved addresses or your orders — ask on the same screen and we will send those by hand until it does.
- Correct it
- Your account screens edit what you registered; your profile edits your details.
- Have it erased
- Privacy and data deletes the account. There is a grace period in which you can change your mind, and then it goes.
- Withdraw your consent
- Deleting the account withdraws it entirely. To stop one thing rather than all of it — emergency contacts, for instance — the switch is on that screen.
- Nominate someone
- Privacy and data records a nominee: choose “Nomination”, give their name and email address, and we hold those sealed and unused until the nomination is exercised. The Act provides for naming a person to act for you if you cannot.
- Complain
- Write to [email protected]. Our grievance officer is being appointed and will be named here. If you are not satisfied, you may complain to the Data Protection Board of India.
And what we never do
Things this notice does not have to say
- We do not sell personal data, and there is no advertising tracker on this site.
- We never show a scanner your phone number, your email address or your name, and never show you theirs. That is the product, not a setting.
- We do not profile you and we do not advertise to you. There is one automated decision: repeated abuse reports about the same code suspend it without a person looking first, and you can appeal that to a human.
- Everything on the safety path — your QR, your alerts, your controls — is free and stays free. See pricing.
Being honest
What we do not do yet
Four things this notice would rather claim. They are being built; until they are, this is what happens.
- Retention is set, not yet automatic. The periods above are configured and enforced when you delete your account, but no scheduled job sweeps old scan records and messages on a clock yet. Until it runs, they stay.
- Erasure misses two tables. Deleting your account does not yet remove your emergency contacts or your saved addresses. Ask us and we remove them by hand, and it is being fixed properly.
- The export is incomplete. It leaves out emergency contacts, saved addresses and orders, as the rights section above says.
- An opt-out marks rather than erases. An emergency contact who tells us to stop is never contacted again, but we still hold their name and number.