KaamWalah Privacy & Permissions Policy
Effective Date: 01 October 2025
KaamWalah ("We", "Our", "App") respects your privacy and handles your data responsibly. This policy explains what information we collect, how it's used, and what permissions our app requires to function properly. By using KaamWalah, you agree to this Privacy & Permissions Policy.
1. Information We Collect
1.1 Account Information
- Full name, phone number, role (worker/user)
- Profile image or initials
- PIN for app security (hashed & salted)
- Firebase Authentication ID (UID)
1.2 Location Information
- GPS location for job tracking while online
- Background location only when the worker is online
- Location is not stored after a booking ends
1.3 Device & App Information
- Device identifiers, OS version
- FCM token for push notifications
1.4 Service & Transaction Data
- Booking requests (status, worker ID, user ID)
- Service type preferences & popularity data
- UPI ID for payments
2. How We Use Your Information
- Profile Management: Display and manage your account details
- Service Requests: Assign bookings and show top services
- Notifications: Inform you about new bookings and updates
- Location Tracking: Provide accurate job location and route information
- Security: Store hashed PIN for app access
- Support & Assistance: Help with app-related support and transactions
3. Permissions Requested & Their Purpose
| Permission | Purpose |
|---|---|
| ACCESS_FINE_LOCATION | Track worker location during active bookings |
| ACCESS_BACKGROUND_LOCATION / FOREGROUND_SERVICE_LOCATION | Enable background tracking only when worker is online |
| ACCESS_COARSE_LOCATION | Access approximate location for nearby job suggestions |
| INTERNET / ACCESS_NETWORK_STATE / ACCESS_WIFI_STATE | Communicate with Firebase and backend services |
| POST_NOTIFICATIONS | Send booking-related and status notifications |
| CAMERA / READ_EXTERNAL_STORAGE / READ_MEDIA_IMAGES | Capture or select profile images; never shared outside app |
| FOREGROUND_SERVICE | Maintain active service connection while app is in use |
| WAKE_LOCK | Keep the device active during ongoing jobs or navigation |
| com.google.android.c2dm.permission.RECEIVE | Receive Firebase Cloud Messaging (FCM) notifications |
| com.android.vending.CHECK_LICENSE / com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE | Verify app license and track legitimate installs |
| com.google.android.gms.permission.AD_ID / ACCESS_ADSERVICES_AD_ID / ACCESS_ADSERVICES_ATTRIBUTION | Used for ad identification, analytics and campaign attribution |
| com.google.android.providers.gsf.permission.READ_GSERVICES | Access Google service configurations when required |
| com.kaamwalah.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Protect in-app broadcast receivers and internal operations |
| CLIPBOARD | Copy UPI ID or transaction ID securely for payments |
Hardware Features Used
- android.hardware.faketouch: Supports touch-enabled devices
- android.hardware.location: Uses GPS and location sensors
- android.hardware.wifi: Requires Wi-Fi capability for certain services
Supported Screen Layouts
Small | Normal | Large | X-Large
4. Data Security
- PINS: Hashed using SHA-256 + random salt; never stored in plain text
- Profile Images: Stored securely in Firebase Storage
- Access Control: Only authorized personnel or system processes can access sensitive data
- Notifications: Users can enable/disable notifications anytime
5. Sharing Information
- We do not sell your data. Data may be shared only with:
- Service Providers: Firebase (authentication, storage, messaging)
- Payment Providers: UPI gateways for transactions
- Legal Requirements: When required by law
6. Cookies & Analytics
- We may use Firebase Analytics or similar tools to collect anonymous usage statistics to improve app performance.
- Cookies may be used on our website for session management and user experience. No cookies or analytics data are sold to third parties.
7. Your Rights
- Access & Correction: View or edit profile information
- Deletion: Contact support to delete your account/data
- Permission Control: Disable location, notifications, or camera access anytime (some features may be limited)
8. Children's Privacy
- Not intended for children under 13. If we discover personal information from a child under 13, we will delete it immediately.
9. Legal Compliance
- This policy complies with applicable Indian laws under the Information Technology Act, 2000. If you are located in the EU, UK, or other jurisdictions with specific privacy laws (such as GDPR), additional rights may apply.
10. Updates to This Policy
Updates may be made to reflect app or legal changes. Major updates will be notified via in-app messages, app updates, or email (if available). The latest version will always be available at kaamwalah.com/privacy-policy.
11. Contact Us
- Email: support@kaamwalah.com
- App Support: In-app support option
✅ Key Notes
- PINs are never stored in plain text
- Location is used only for service fulfillment
- Notifications can be disabled any time
- Profile images are optional; initials shown if none uploaded