Privacy Policy — Scrapify

Last Updated: August 10, 2026 · Version 5.2 · Android package: com.kabadiwala.app

Hi — this is Scrapify’s privacy policy, written in plain language so you know exactly what happens to your data.

Scrapify is a marketplace and local-services discovery app. You can sell scrap, find kabadiwalas (including email-verified and admin-verified dealers), post legal classified ads, chat with buyers/dealers/workers, share short status updates, request home services, and create a Local Worker profile (skills, rates, work photos) so nearby customers can find you. We are a technology platform — we connect people; we do not buy your scrap or employ local workers ourselves.

This policy covers the mobile app, web app, and related services. It is meant to meet Google Play requirements (Privacy Policy URL, Data Safety, account deletion, permissions) and applicable Indian law, including the Digital Personal Data Protection Act, 2023 where it applies.

If you do not agree, please do not create an account or use the app.

1. Who we are & how to reach us

We aim to reply to privacy requests within 7 business days.

2. What data we collect — and why

We only collect what we need to run the features you use.

Account (required to sign up)

What: name, email, phone, password or email OTP, role (user or dealer), optional address/city/area, optional profile photo, dealer business details, and email-verification status (isEmailVerified).

Why: create your login, prove you own the email (6-digit code sent to your inbox after signup), show a Verified / Verified Dealer badge on your public profile, and list dealers in the directory.

How: Auth and profile documents are stored in Appwrite Cloud. Signup verification and OTP login use Appwrite email tokens (6-digit codes). Passwords are handled by Appwrite. Until you verify email, the Verified badge is not shown.

Local Workers (optional — same login)

What: skills/categories, worker bio, experience, rate/charges text, availability flag, working hours, up to 10 work-sample photos.

Why: so nearby customers can browse the Local Workers directory and contact you via in-app chat, or Call/WhatsApp when phone visibility allows.

How: stored on your users profile in Appwrite; work photos on Cloudflare R2. Turning off worker profile sets isLocalWorker off and hides you from the directory.

Ratings & reviews

Star ratings (and optional short comments) about dealers/sellers/workers, plus public averages. Typically one review per reviewer→target, stored in Appwrite.

Marketplace ads & scrap rates

Title, description, category, brand/model, price, city/area text, photos, published scrap rates — for legal items only. Listings in Appwrite; photos on R2.

Chat & status

Text messages, optional chat images, status/story images and captions, optional online/busy/offline status. Messages/rooms in Appwrite with participant-level permissions where configured; images on R2 or legacy Storage. Status typically expires ~24 hours.

Order / pickup requests

Name, phone, city, approximate weight, note — usually opens WhatsApp or email. That conversation follows WhatsApp/email policies.

Location (optional)

Approximate GPS and reverse-geocoded city/area only while the app is in use (foreground) — to sort nearby dealers, ads, and Local Workers. No background location. Deny GPS anytime and pick a city manually.

Device & safety

App version, device/OS, theme, crash/diagnostic logs, and an Expo push token if you allow notifications. Push delivery uses Expo and Firebase Cloud Messaging (FCM) on Android for chat, marketplace alerts, and other opted-in alerts. Turning Push Notifications OFF (or logging out) clears your token from our database and chat rooms. Reports and blocks help reduce spam/fraud/harassment.

We do not ask for bank passwords, UPI PINs, or full card CVV. We do not sell personal data to data brokers or use location for third-party ad networks.

3. Photos & storage (Cloudflare R2 + Appwrite)

  1. The app compresses the image on your device.
  2. After sign-in, a short-lived upload permission is created (Appwrite JWT).
  3. The file is uploaded to Cloudflare R2; a public HTTPS URL is saved with your listing/profile/worker/chat/status record.
  4. Older uploads may still live in Appwrite Storage (legacy).

Public ads, status, and Local Worker profiles are visible to other users; chat images are meant for people in that chat. Account deletion removes associated images where we can reach them (including worker work photos).

4. How we use information

5. Who we share data with

6. Google Play Data Safety (summary for Console)

May collect: personal info (name, email, phone); photos you upload (including Local Worker work samples); messages; approximate location (optional); app activity; device/push IDs; crash/diagnostics.

Purposes: App functionality, Account management, Fraud prevention, Diagnostics (not advertising sale).

Encrypted in transit: Yes (HTTPS/TLS). Deletion: Settings → Delete Account + this site’s deletion page. Data is not sold.

7. Permissions — why each exists

8. Marketplace rules

Only approved categories are allowed (scrap, legal second-hand goods, home services, lawful Local Worker skills). Illegal or restricted items must not be posted. Users are responsible for what they post and for offline deals; use Report / Block tools.

9. Retention & account deletion

Data is kept while your account is active.

In app: Profile → Settings → Danger Zone → Delete Account → confirm. This deletes your Appwrite auth account and associated data we can reach (listings/photos, Local Worker work photos, stories, rates, favorites, blocks/reports, chat rooms/messages linked to you, related reviews where possible). Backups/legal holds may take up to 30 days.

If in-app delete fails, email ayaansaifi965036@gmail.com from your registered address. Full steps: Delete Account.

10. Security

HTTPS/TLS, authenticated sessions, and document permissions where configured (e.g. chat limited to the two participants). No method is 100% secure — use a strong password and never share OTPs.

11. Children

Scrapify is not directed to children under 13. You must confirm minimum age at signup. Contact us to remove any such data.

12. Your rights (DPDP / applicable law)

Subject to law: access, correction, deletion, and withdrawal of consent for optional permissions. Email ayaansaifi965036@gmail.com. We aim to respond within 7 business days.

13. Third-party links

WhatsApp, dialer, email, Play Store, and other external apps have their own policies. We are not responsible for those services.

14. Platform disclaimer

IMPORTANT: Scrapify is only a connecting platform. Deals, payments, pickups, chats, Local Worker jobs, and meetings are between you and the other person at your own risk.

If anything happens to you through this app involving another user, dealer, seller, or local worker (fraud, theft, harassment, accidents, disputes, injury, loss, etc.), Scrapify / Kabadiwala and its owners are NOT responsible and NOT liable, to the maximum extent permitted by law.

हिंदी: अगर इस ऐप के ज़रिए आपके साथ कुछ भी होता है, तो हम क़ानून की अधिकतम सीमा तक ज़िम्मेदार नहीं हैं।

See Terms and Disclaimer.

15. Changes

We may update this policy. The Last Updated date and version will change. The in-app Privacy Policy should match this web copy for Play Store listing.

16. Contact

Email: ayaansaifi965036@gmail.com