Privacy Policy

Effective Date: July 1, 2026 | Version 1.0

Yupji Technologies Private Limited, Indore, Madhya Pradesh, India

1. Introduction

Yupji Technologies Private Limited ("Yupji", "we", "us", or "our") operates the Yupji mobile application and related services (collectively, the "Platform") that connect customers with verified independent service providers ("Helpers").

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our Platform. It applies to all users — customers, helpers, and visitors.

By using the Yupji Platform, you agree to the collection and use of information as described in this policy. This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

2. Information We Collect

2.1 Information You Provide Directly

• Full name and mobile phone number (mandatory for all users)
• Area and city of residence
• UPI ID (for customers — used to set up AutoPay mandate; not stored in full)
• UPI ID (for helpers — used to process weekly earnings payouts)
• Profile photograph and identity documents (helpers only — Aadhaar, education certificate, selfie)
• Background Verification (BGV) document — police verification, gazetted officer certificate, or principal certificate (helpers only)
• Driving licence (helpers offering driver services only)
• PAN card number (helpers — for TDS compliance when annual earnings exceed ₹1,00,000)
• Date of birth (helpers — verified via Aadhaar for age compliance)
• Self-written bio (helpers — optional, shown on public profile)
• Service preference ratings and review comments

2.2 Information Collected Automatically

• Device information: device model, operating system version, app version, unique device identifier
• Location data: GPS coordinates during active bookings (helper), approximate area (customer)
• Usage data: screens visited, features used, booking history
• Log data: IP address, timestamps, error logs
• Call metadata: duration and outcome of in-app voice calls (no recording of call content)
• Chat messages sent through the in-app chat feature during bookings

2.3 Information from Third Parties

• Aadhaar verification result (via UIDAI through Digio): verification status, date of birth, name match result — Aadhaar number itself is NOT stored
• Payment status from Razorpay: mandate status, payment success/failure — full UPI ID or card details are NOT stored by us
• Device fingerprint signals for fraud prevention

3. How We Use Your Information

3.1 Service Delivery (Mandatory — Cannot Be Disabled)

• Match customers with nearby available helpers
• Process bookings, check-ins, check-outs, and payments
• Display helper location on customer's map during active bookings
• Enable in-app calling and messaging between booking participants
• Process weekly payouts to helpers via UPI
• Calculate and deduct TDS as required by Indian tax law
• Verify helper identity and background for customer safety
• Maintain booking history and transaction records
• Respond to disputes, support queries, and grievances
• Comply with legal obligations under Indian law

3.2 Marketing and Promotions (Optional — Requires Your Consent)

• Send you offers, referral rewards, and new service announcements via WhatsApp or push notification
• Inform you of changes to services or pricing in your area

You may withdraw this consent at any time through Settings → Notifications → Marketing, or by contacting us at grievance@yupji.com.

3.3 Analytics and Platform Improvement (Optional — Requires Your Consent)

• Analyse anonymised usage patterns to improve app design and features
• Understand demand patterns to improve helper supply in your area
• We do not sell your personal data to third parties for advertising.

4. Data Sharing

4.1 Sharing with Helpers and Customers

When a booking is confirmed, we share the customer's locality (area name, not exact address) with the helper for navigation purposes. The customer's full address is provided only via the in-app map during the active booking. We do not share customer phone numbers with helpers — all calls are routed through our in-app calling system.

Helper profiles (name, designation, ratings, services, and bio) are visible to customers on the Platform. A helper's exact location is shared with the matched customer only during active bookings.

4.2 Sharing with Service Providers

We share data with the following categories of third-party service providers who process data on our behalf:

• Payment processing: Razorpay (UPI AutoPay mandates and payouts) — processes payment data under their own privacy policy
• Identity verification: Digio (Aadhaar OTP verification on behalf of UIDAI)
• SMS and OTP: MSG91 — receives phone numbers for OTP delivery
• WhatsApp messaging: Gupshup — receives phone numbers and message content for support and notifications
• Push notifications: Google Firebase (FCM) — receives device tokens
• File storage: Cloudflare R2 — stores helper documents in encrypted private storage
• Cloud hosting: Railway — hosts our servers in a secure environment
• Database: Supabase — stores all user and booking data in servers located in Mumbai, India

All service providers are contractually prohibited from using your data for any purpose other than providing services to Yupji.

4.3 Legal Disclosure

We may disclose personal data when required by law, court order, or government authority. We will inform you of such disclosure where legally permitted to do so.

4.4 What We Never Do

• We do not sell your personal data to advertisers or data brokers
• We do not share your phone number directly with other users — all calls are in-app only
• We do not store your full Aadhaar number
• We do not share your UPI ID or payment details with helpers or other customers

5. Data Storage and Security

5.1 Where Your Data Is Stored

All personal data is stored on servers located in India (Mumbai region) in compliance with the DPDP Act, 2023. Helper identity documents are stored in Cloudflare's APAC-region private storage with access restricted to authorised Yupji staff only.

5.2 How Long We Keep Your Data

We retain different categories of data for different periods:

• Account data: retained while your account is active, plus 30 days after deletion request
• Booking and payment records: 7 years (required by Indian tax and financial regulations)
• Dispute records: 3 years from resolution
• GPS location data from completed bookings: 12 months
• Audit logs: 5 years
• Identity documents (KYC): deleted from our storage 30 days after account anonymisation

5.3 Security Measures

• All data transmission encrypted using TLS 1.2 or higher
• Helper identity documents accessible only via time-limited signed URLs (5-minute expiry)
• All admin access to helper documents is logged and audited
• Payment data handled exclusively by Razorpay — Yupji stores only a truncated display reference (e.g. **@okaxis)
• Passwords and PINs stored using one-way cryptographic hashing
• Two-factor authentication required for all admin panel access

6. Your Rights Under the DPDP Act, 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

6.1 Right to Access

You may request a summary of personal data we hold about you. Submit requests through Settings → Privacy → Request My Data, or email grievance@yupji.com.

6.2 Right to Correction

You may update most of your personal data directly through the app (Settings → Edit Profile). For Aadhaar-verified fields, contact us at grievance@yupji.com.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your account through Settings → Account → Delete Account. We will:

• Acknowledge your request immediately in the app
• Apply a 30-day cooling-off period (you may cancel during this period)
• After 30 days: anonymise your personal information (name, phone number, photos deleted)
• Retain only booking and payment records required by law (anonymised, not linked to your identity)
• Note: Pending earnings will be processed and paid before account deletion is completed.

6.4 Right to Withdraw Consent

You may withdraw optional consents (marketing, analytics) at any time through Settings → Privacy. Withdrawal does not affect data processed before withdrawal.

6.5 Right to Grievance Redressal

If you believe your data rights have been violated, you may contact our Grievance Officer (details in Section 8). We will respond within 30 days.

7. Children's Privacy

The Yupji Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered on our Platform, please contact us at grievance@yupji.com immediately.

For the Play with Kids service, helpers must be 21 years or older (verified via Aadhaar) and require police background verification. A parent or guardian must be present at all times during service delivery.

8. Grievance Officer

In accordance with the Information Technology Act, 2000, the DPDP Act, 2023, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer:

Bhupendra Kumar Verma

Founder, Yupji Technologies Private Limited

Email: grievance@yupji.com

Address: Indore, Madhya Pradesh, India

Response time: Within 30 days of receipt

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Display a notice in the app and require you to review and accept the updated policy

Update the "Effective Date" at the top of this document

Increment the version number in our system (which may trigger a re-consent request in the app)

Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For questions about this Privacy Policy or your personal data, contact:

Email: grievance@yupji.com

• In-app: Settings → Help → Grievance Officer
• WhatsApp Support: available through the app's support button

Yupji Technologies Private Limited | Indore, MP | grievance@yupji.com