Privacy Policy

1. Overview

This Privacy Policy applies to the ApniNanny website (apninanny.in and associated domains), our WhatsApp registration bot, and any mobile applications we release. By using the service, you agree to this policy.

This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and applicable rules thereunder.

2. Who We Are

Data Fiduciary (Controller): ApniNanny
Contact: privacy@apninanny.in
Grievance Officer: See Section 14

3. Data We Collect

For Families (users who search and hire)

For Nannies

4. How We Collect It

• Web form — when you create an account, write a review, or register as a nanny on our website.
• WhatsApp bot — nannies who self-register via our WhatsApp number share their profile data through a conversational flow. The conversation state is retained for up to 30 days after registration completes, then deleted automatically.
• Family referral — a family may refer a nanny by providing her name and phone number. We send her one WhatsApp message with the option to join or decline. If she declines or does not respond, we do not create a profile.
• KYC upload — nannies who opt in to Gold-tier verification upload Aadhaar images and a selfie through a dedicated secure upload page.
• Automatically — standard browser/device data (IP address, browser type, pages visited) collected via Firebase Analytics for fraud prevention and service improvement.

5. How We Use Your Data

Families

• Display your city to match you with local nanny profiles.
• Verify you are a real person via phone OTP before publishing a review.
• Grant contact credits when your review is approved by our moderation team.
• Process payments for contact credit packs via Razorpay.
• Track which nanny contacts you have unlocked so you can re-access them.

Nannies

• Display your profile to families searching in your city.
• Notify you via WhatsApp when a new review about you is published, when your tier changes, or when a family refers you to the platform.
• Verify your identity (Aadhaar KYC) when you opt in for the Gold badge.
• Aggregate anonymised salary data to show families a fair salary range.

6. Data Sharing

We share data only with the following service providers, strictly to operate the platform:

We may also disclose data when required by law, court order, or a legitimate request from a government authority in India.

7. Aadhaar Data

• Aadhaar document images (front, back) and selfies are stored in Firebase Cloud Storage with restricted access rules — they are never publicly accessible.
• Only authorised ApniNanny administrators can view submitted KYC documents for the purpose of manual review.
• Aadhaar numbers are masked in all storage and display — we do not store the full 12-digit Aadhaar number.
• KYC verification for Gold tier will be performed by a UIDAI-licensed KYC User Agency (KUA) partner (Digio or IDfy). At that point, the Aadhaar data will be transmitted to the partner under their privacy obligations.
• KYC documents are deleted within 90 days of verification being approved or rejected, unless retention is required by law.
• Nannies can request deletion of their KYC documents at any time by contacting privacy@apninanny.in.

8. Data Retention

9. Your Rights

Under the Digital Personal Data Protection Act 2023 and applicable Indian law, you have the following rights:

Right to Access

You may request a summary of the personal data we hold about you. Email privacy@apninanny.in — we will respond within 30 days.

Right to Correction

You may request correction of inaccurate personal data. Families can update their name and city directly from the site. Nannies can request corrections via email.

Right to Erasure (Data Deletion)

For nannies: Send the word HATAO to our WhatsApp number at any time. Your entire profile, conversation history, and associated data will be permanently deleted within 24 hours.

For families: Email privacy@apninanny.in with the subject line "Delete My Account". We will delete your account and associated data within 30 days, except payment records required by law.

Right to Withdraw Consent

You may withdraw consent for data processing at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Grievance Redressal

See Section 14 for our Grievance Officer's contact details.

Right to Nominate

You may nominate another person to exercise these rights on your behalf in case of incapacity or death, as provided under the DPDPA 2023.

10. Security

• All data is stored on Google Firebase (servers located in asia-south1 / Mumbai).
• All data in transit is encrypted via HTTPS/TLS.
• Nanny contact details (phone, WhatsApp, email) are stored in a separate Firestore collection with no public read access — they are only returned by a server-side Cloud Function after verifying payment or review eligibility.
• KYC documents in Firebase Storage have restricted access rules and are not publicly accessible.
• Admin access requires email + password authentication plus an explicit admin role check in our database.
• Payment processing is handled entirely by Razorpay, a PCI-DSS compliant payment gateway. We never store card numbers or CVV.

Despite these measures, no internet transmission is 100% secure. Please notify us at security@apninanny.in if you discover a vulnerability.

11. Cookies & Local Storage

We use the following technologies to operate the service:

• Firebase Authentication cookies — store your login session. Strictly necessary; cannot be disabled.
• localStorage — stores your search preferences and UI state locally in your browser. No personal data is sent to our servers via localStorage.
• Firebase Analytics — collects anonymous usage data (pages visited, button clicks) to help us improve the service. This uses cookies. You can opt out via browser settings or a cookie opt-out tool.

We do not use third-party advertising cookies or share cookie data with advertisers.

12. Children

ApniNanny is intended for adults aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe a child has submitted data to us, please contact privacy@apninanny.in and we will delete it promptly.

13. Policy Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via:

• A banner on the website for 30 days after the change.
• A WhatsApp message to registered nannies for changes that materially affect their data rights.
• An email notification to registered families.

For material changes that affect your data rights, we will seek fresh consent (e.g., via a consent prompt on your next login) rather than relying on continued use as deemed acceptance.

14. Grievance Officer

As required by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act 2023, we have appointed a Grievance Officer:

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted under the DPDPA 2023.