We only collect data that is necessary to provide our services, improve your experience, and ensure safety.

A. Information You Provide Directly

• Account Information: To create an account, you must provide your mobile number, verified via OTP. You also provide a name or handle.
• Profile Information: Details to populate your profile, including your location, skills, budget, job history, and photos. Caution: We strongly recommend not including highly sensitive information (such as exact home addresses, Aadhaar/PAN numbers, specific financial details, or personal instant messaging handles) in your public profile.
• Verification Information: To ensure authenticity, you may voluntarily perform a real-time photo verification. Note: We do not store biometric data long-term.
• Communications: Interactions with support or via Chat and DM features.

B. Information We Collect Automatically

• Device & Usage Information: OS version, hardware model, IP address, features used.
• Location Data: With your explicit consent, we access precise geolocation to show relevant jobs. If denied, we approximate via IP.

C. Information from Third Parties

Payment processors handle billing; we don't store raw credit card details. We may also receive background check data legally.

We process your data on the lawful bases of user consent, legitimate interests, and fulfilling contracts to:

A. With Other Users

Any information added to your public profile (skills, photos, name) is visible. You should assume that anything you post may be publicly viewable. Other users may take screenshots of your profile or share your information with their friends outside the App. Messages sent in chat are shared with recipients.

B. With Service Providers

• Cloud & SMS: Host data (AWS/GCP) and deliver OTPs (Twilio).
• Identity Verification: Partners who securely process selfies. They are contractually required to permanently delete biometric data within 30 days.
• Payment & AI: Processors (Razorpay) and AI Tool Providers (OpenAI) to power smart features and moderation (prohibited from using private data to train public models).

C. Aggregated Data

We may anonymize your personal data so it no longer identifies you, sharing it with third parties for industry analysis, demographic profiling, and marketing.

D. For Legal Reasons

We disclose data if required by a subpoena, court order, or CERT-In request to protect safety and investigate fraud.

We implement industry-standard measures designed to protect your data, including:

• End-to-end encryption for in-transit data (HTTPS/TLS).
• Hashed and salted storage of sensitive inputs.
• Strict internal access controls.

Despite our efforts, no Internet transmission is 100% secure. You provide data at your own risk.

In compliance with the Digital Personal Data Protection Act, 2023, you have the following rights:

• 1
  Right to Access: Request a summary of personal data we process.
• 2
  Right to Correction & Erasure: Update your profile or request data deletion.
• 3
  Right to Withdraw Consent: Delete your account to revoke consent for future processing.

We retain your personal information only as long as you maintain an active account, plus a legally mandated 180-day grace period for chat logs and user identifiers post-deletion as per IT Rules 2021. After this, data is aggregated or permanently destroyed.

Kaampy is strictly restricted to individuals 18 years of age or older. We do not knowingly collect personal data from minors. If discovered, such accounts and data are immediately purged.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by revising the Effective Date and, in some cases, providing in-app notifications.

In accordance with the IT Act 2000, SPDI Rules, and DPDP Act 2023, our Grievance Officer details are: