Privacy Policy

1. Introduction

Welcome to DOOCAL (“we”, “our”, or “us”). This Privacy Policy explains how our mobile application and backend services collect, use, disclose, and protect your information when you access or use DOOCAL as a Customer, Store Owner, or Vendor.

By installing, registering, or using DOOCAL, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the application.

2. Information We Collect

• Phone Number & Authentication Data: When registering or logging in, we collect your mobile phone number to generate and verify secure One-Time Passwords (OTPs).
• Profile Information: For Customers, we collect your display name. For Vendors/Shop Owners, we collect your shop name, owner name, description, registered business categories, physical shop address, city, pincode, and business verification details.
• Location Information (Precise & Coarse): With your explicit foreground permission, we access your device GPS coordinates. For Customers: Used solely while using the app to broadcast product inquiries to stores located within up to 10 km. For Vendors: Used to display your storefront on neighborhood maps and calculate driving directions. Location is not tracked in the background.
• Photos and Camera Access: With your permission, we access your camera/photos so you can attach sample photos of items you wish to buy, or upload store logos and storefront photos.
• Push Notification Device Tokens: We collect and register a Google Firebase Cloud Messaging (FCM) device token to send direct updates (when product quotes arrive or nearby requirements are posted). You can disable notifications in your Android system settings at any time.

3. How We Use Your Information

• To verify your identity and prevent fraudulent account creation using SMS OTP.
• To route customer product requests to nearby verified retail vendors.
• To allow customers to contact vendors via direct phone call or view turn-by-turn driving directions using Google Maps.
• To notify vendors of nearby purchase requests and notify customers when price quotes arrive.
• To maintain platform security, prevent spam, and enforce our Terms of Service.

4. Data Sharing & Disclosure

We do not sell, rent, or monetize your personal information. Information is only shared under specific conditions:

• Between Customers and Vendors: When a customer accepts a vendor's quote, the physical shop address, shop name, and contact phone number become visible to facilitate in-person fulfillment.
• Infrastructure Partners: We utilize encrypted database hosting (MongoDB Atlas), secure image CDN (ImageKit.io), transactional SMS OTP delivery, and push notifications via Google Firebase Cloud Messaging.
• Legal Compliance: If required by Indian law, regulation, subpoena, or governmental request to protect user safety and platform integrity.

5. Data Security

We implement industry-standard administrative, technical, and physical security measures. All communications between the mobile application and our servers use encrypted HTTPS / TLS protocols. User passwords are not stored; authentication relies strictly on expiring 6-digit SMS OTPs and cryptographically signed JWT tokens.

6. Data Retention & Account Deletion

We retain your personal information only as long as your DOOCAL account remains active or as required by applicable laws.

7. Children's Privacy

DOOCAL is intended for general audiences aged 18 and older. We do not knowingly collect or solicit personal data from children under 13.

8. Contact Information