Privacy Policy

1. Who is responsible for what

For the details of your own shop, we are the one responsible for protecting them.

For your customers' details (name, mobile, IMEI and anything else you choose to collect), you are the one who decides what to collect and why, and Kistcare processes it for you, only to run the service.

2. What we collect

About you: business name, your name, mobile number, and the plan you pay for. Optional details you add in your profile.

About your customers, entered by you: name, mobile number, phone IMEI, the sale and EMI details, payments you log, and the extra fields you choose to switch on (for example address or Aadhaar number).

From the phones with the lock app: whether the phone is online, battery, network, last known location, SIM change and tamper events, and the lock or unlock commands and their results.

From our website: your name, shop, mobile and city when you ask for a demo, and basic technical logs. We do not use advertising cookies.

3. Why we use it

To run Kistcare: sign you in, show your customers and dues, send you the notifications you chose, lock and unlock phones when you ask, take and confirm your plan payments, give support, keep the service safe and fix problems.

We do not sell personal data and we do not use your customers' data for advertising. We do not message your customers.

4. Who else sees it

Only the shop that entered a customer can see that customer. Our staff look at data only when needed for support or safety.

We use trusted providers to run the service: cloud hosting, an SMS provider to send one-time codes, a payment partner to take payments, and a push-notification provider. They receive only what they need and must protect it.

We may share information if the law or a court requires it.

5. How we protect it

Connections are encrypted. Sensitive customer details such as Aadhaar and PAN are stored encrypted. Sign-in uses one-time codes and short-lived sessions. Access to production data is limited.

No system is perfectly secure. If a breach affects you we will tell you and the authorities as the law requires.

6. How long we keep it

We keep your account data while your account exists. Location history is kept for about 30 days, and other device history for shorter or longer fixed periods, then deleted automatically. Payment records are kept as long as the law requires for accounts and tax.

7. Your choices and rights

You can ask to see, correct, or delete your data, and to withdraw consent, by writing to us. Deleting a shop closes its account. Customers whose details a shop entered should ask that shop first, and may also write to us.

You can switch off notifications you do not want in the app's settings.

8. Children

Kistcare is for businesses. We do not knowingly collect information from children.

9. Changes

We may update this policy. The date above shows the latest version.

10. Grievance officer

For any complaint about your data: TODO: grievance officer, hello@kistcare.in. We will reply within a reasonable time and in line with the law.