Privacy Policy

QuikPing is built privacy-first. This policy explains what we collect, why, how long we keep it, and your rights under India's Digital Personal Data Protection Act (DPDPA) and comparable laws.

Data we collect

From owners: mobile number (for login + as a routing target), display name (optional), country, vehicle details you enter (nickname, make/model, colour, last-4 of plate), and — if you buy a sticker from us — your shipping address and name.

From scanners: the mobile number a scanner enters is never stored in raw form. We store only a salted, peppered SHA-256 hash, used for rate-limiting and abuse blocking. We also store coarse country (derived from the number prefix) and the reason/short message they choose to send.

What we never expose

The scan page shows only display-safe vehicle details. It never shows your phone number, full plate, VIN, name, or any account identifier. Bridged calls use a masked virtual number so neither party sees the other's real number.

How we use data

To deliver the core service (notify you / bridge a call), prevent abuse, process payments and ship stickers, and provide support. We do not sell personal data. We do not use it for third-party advertising.

Third parties (processors)

We share the minimum necessary with: our telephony provider (to place the call / send the SMS), payment processor (to take payment), print/shipping partner (to fulfil sticker orders), and our hosting + database provider. Each acts as a data processor under contract.

Retention

Free-tier scan history is retained for 30 days, then deleted. Call/message logs for subscribers are retained for the life of the account. Hashed caller identifiers are retained as long as needed for abuse prevention. Order records are kept as required for tax/accounting.

Your rights

You may access, correct, or delete your data at any time. Account deletion (with a full data export) is available from your settings page. Deleting your account revokes all your stickers and erases your personal data, subject to legal retention requirements.

Security

Data is encrypted in transit. Phone numbers are hashed with a per-row salt and a server-side pepper. Database access is governed by row-level security; public scan routes run with least-privilege server credentials and return only display-safe fields.

Contact / grievance officer

For privacy requests or complaints, reach us via the contact page. We respond to verified requests within statutory timelines.