HelpingHands

This is a template prepared for launch; have it reviewed by a lawyer before scale.

Privacy Policy

Last updated: 12 July 2026

Helping Hands is a directory of home-service professionals in Assam. This policy explains what personal data we collect, why, who we share it with, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). Helping Hands acts as the data fiduciary for the data described here.

1. What we collect

From every user (customer or provider):

  • Phone number — used for OTP login. It is your account identifier.
  • Name and city — optional, if you choose to add them.
  • Reveal and purchase history — which numbers you unlocked, credits bought and spent. Needed to run the wallet and honour “unlocked stays free forever”.
  • Device signals — basic device and usage signals used to prevent fraud, scraping, and abuse of reveal caps.

Additionally from providers:

  • Profile photo and bio — shown publicly in the directory, with your consent.
  • KYC documents (PAN or Aadhaar, via offline e-KYC) — stored in private storage and accessed only by our admins for identity review. They are never shown to customers or anyone else.
  • Contact details — with your explicit, itemised consent, your phone number is disclosed to customers who pay the reveal fee. This is the core of the service and is only ever done with that consent.

2. Consent and withdrawal

We ask providers for separate, itemised consents: contact disclosure to paying customers, public profile display, and (optionally) marketing. Providers may withdraw consent at any time from the Pro dashboard (Withdraw consent). Withdrawal hides the profile immediately and stops all future reveals. Disclosures already made to paying customers cannot be undone.

3. What we never do

We do not sell customer data to third parties. Customer phone numbers are never shown to providers or other users. We do not use your data for third-party advertising.

4. Processors we use

We share data with service providers who process it on our behalf, under contract, only to run the service:

  • Hosting — Vercel
  • Database — Supabase
  • Payments — Cashfree (web) and Google Play (in-app purchases)
  • SMS/OTP delivery — for login codes and service messages
  • Push notifications — Google Firebase Cloud Messaging (FCM)

5. How long we keep data

  • Account data is kept while your account is active.
  • When you delete your account, we immediately deactivate it and scrub your name and phone number from the account record.
  • Unlock, purchase, and wallet-ledger records are retained in anonymized form for legal and accounting obligations — up to 8 years under Indian tax law.
  • Provider KYC documents are deleted within 30 days of account deletion.

6. Your rights under the DPDP Act

As a data principal you have the right to:

  • Access — ask what personal data of yours we hold and how it is used.
  • Correction — have inaccurate or incomplete data corrected (your name and city are editable in your account).
  • Erasure — delete your account; see Delete my account for exactly what is removed and what is retained anonymized.
  • Grievance redressal — complain to our grievance officer and escalate if unsatisfied; see Grievance Redressal.

7. Children

Helping Hands is for users aged 18 and above. We do not knowingly collect data from children. If you believe a minor has created an account, contact the grievance officer and we will remove it.

8. Security

Data is transmitted over encrypted connections and stored with access controls. KYC documents live in private storage restricted to admin review. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the authorities as the DPDP Act requires.

9. Changes and contact

We will update this policy as the service and the law evolve; the “Last updated” date will change and material changes will be notified in-app or by SMS. Questions about this policy or your data go to the grievance officer listed on the Grievance Redressal page.