Plain-language privacy
Your data, in plain words
What we keep, why, for how long, and how to make us delete it. Written to follow India’s Digital Personal Data Protection Act, 2023.
In this guide: 5 questions
What we never keep
No Aadhaar numbers. No photos or PDFs of identity documents.
When an identity check runs, we keep only its outcome: verified or not, whether the name matched, the document type and issuer, the time and the provider’s reference. The document and any returned XML are discarded straight away.
Other people see only the badge, never your identity details. This replaces the habit of sending Aadhaar photos to owners and brokers over WhatsApp.
What we collect, and why
| What | Fields | Why | How long |
|---|---|---|---|
| Early-access list | Name, who you are, college or locality; WhatsApp number only if you tick the box | To tell you when we open near you | Until you ask us to delete it, or we open and message you |
| Your account | Email or phone, name, role | To sign you in | While the account exists |
| Your search profile | College, budget, food and commute habits | To rank stays and work out true cost | While the account exists; delete any time |
| Identity check | Outcome only: verified yes or no, name match, document type, issuer, time, provider reference | To show a verified badge | As the consent screen states, then deleted |
| Parent links | A random token and when it was opened | So a parent can see what you shared | Until it expires or you revoke it |
| Visits from AI assistants | The page, the assistant’s name and a one-way hash | To know which assistants send people | Aggregated; no raw address kept |
We never send messages for you. WhatsApp links are drafted for you to tap. We don’t sell data and don’t run ad trackers.
How consent works
We ask before each use, say what it’s for, and use it only for that. Saying no to one thing doesn’t lock you out of the rest. You can withdraw consent at any time, and withdrawing is as easy as giving it.
Who sees what
Owners and brokers see a request to visit and what you choose to share; they never see your identity documents. Parents see only the stays you share with them, read-only, and never your private notes. Public pages show stays with an approximate location, about 200 m, and no owner phone numbers.
How to delete your data
Delete your search profile or account from your settings, or write to us and we’ll erase your personal data, unless another law requires us to keep a record. We also keep reasonable safeguards against breaches.
Joined the early-access list? Reply to our message, or ask us on the help page, and we remove your row.