This Privacy Policy explains how GUGA (“GUGA”, “we”, “us”) collects, uses, stores, and shares information when you use the GUGA mobile application and related websites (together, the “Services”). GUGA operates a marketplace that helps customers discover and book appointments with independent local service providers, and helps those providers manage listings and bookings.
1. Information we collect
Depending on how you use GUGA, we may collect the following information:
Account and profile information
- Email address and password (authentication is handled through Firebase Authentication).
- Display name, phone number, and optional profile details you provide.
- Account role information (for example, customer or linked vendor account).
- Account status information such as onboarding and whether an account has been blocked by GUGA.
Saved addresses
- Address labels, full address, landmark, city, state, pincode, and default-address preference.
Booking and appointment information
- Service selections, vendor and service names, requested date and time, notes, booking status, and service duration.
- Vendor shop address snapshots used for store-visit bookings.
- Reschedule information, including vendor-suggested alternative times and customer acceptance or decline of those suggestions.
- Payment status, Razorpay order/payment identifiers, paid timestamps, and settlement-related metadata where payments are processed through GUGA.
Vendor and business information
- Business name, description, location text, city, state, categories, services, pricing, availability, working hours, shop open/closed status, amenities, and centre type.
- Vendor-provided shop coordinates (latitude/longitude) used to display maps and directions. GUGA does not collect your device GPS location through the Android app.
- Vendor contact email and phone submitted during vendor registration or business profile management.
- Shop images uploaded by vendors.
- Vendor payout/settlement details such as UPI ID and/or bank account information submitted for manual settlement processing.
Reviews
- Star rating, optional written comment, booking reference, vendor reference, and customer display name snapshot associated with a completed booking review.
Notifications and device information
- Firebase Cloud Messaging (FCM) device tokens, platform label (for example, Android), and timestamps used to deliver push notifications.
- In-app notification records such as title, message, type, read status, and related booking references.
Favorites
- Vendor identifiers saved to your favorites list.
Payment processing
- When you pay through GUGA, payment checkout is handled by Razorpay. GUGA receives payment status, order identifiers, payment identifiers, and related transaction metadata after server-side verification.
- GUGA does not store full card numbers, CVV, or UPI PINs in the app or on GUGA servers.
- Customer name, email, and phone may be prefilled into Razorpay Checkout to complete payment.
Technical and third-party service data
- Information processed by Firebase services used to operate GUGA, including Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, and Firebase Cloud Messaging.
- Network requests to third-party services used by the app, such as Google Fonts, OpenStreetMap map tiles, and external map applications opened for directions.
- Firebase Analytics and Firebase Crashlytics are included as dependencies in the project; actual collection in your build should be verified against your deployed configuration and Play Console Data Safety disclosures.
2. How we use information
- To create, authenticate, and manage user and vendor accounts.
- To enable discovery, booking requests, confirmations, rescheduling, and related communications.
- To operate vendor tools for listings, services, bookings, earnings visibility, and payout method setup.
- To process payments through Razorpay and record payment/settlement status.
- To deliver push and in-app notifications about bookings and account activity.
- To display reviews and vendor marketplace listings.
- To maintain security, prevent abuse, enforce account restrictions, and comply with law.
- To respond to support requests.
3. How we share information
We may share information with:
- Service providers you book with — information needed to fulfill a booking, such as your name, contact details, selected service, appointment time, and notes.
- Payment partners — Razorpay, to initiate and verify payments.
- Infrastructure providers — Google Firebase and related cloud services that host GUGA data and deliver notifications.
- Map and font providers — when map tiles, fonts, or external navigation apps are loaded or opened by the app.
- Authorities — when required by applicable law or to protect rights, safety, and platform integrity.
We do not sell personal information.
4. Data retention
We retain information for as long as needed to provide the Services, maintain booking and payment records, resolve disputes, meet legal or accounting obligations, and enforce our agreements. Retention periods may vary by data type and account status.
If you delete your account through the app, GUGA deletes your authentication account and personal profile data such as your user profile document, saved addresses, favorites, and device notification tokens. Booking, payment, and review records may be retained where required for legitimate business or legal purposes, with personal identifiers anonymized where appropriate.
5. Your choices
- You may update certain profile details in the app.
- You may delete your account from the app’s Privacy & Data section, subject to confirmation and re-authentication.
- You may also request account deletion on the web, without installing the app, at Delete your GUGA account.
- You may control notification permissions on your device.
- You may contact us with privacy questions or requests where applicable under law.
6. Security
We use reasonable administrative and technical safeguards appropriate to our Services, including Firebase security rules and server-side payment verification. No method of transmission or storage is completely secure.
7. Children’s privacy
GUGA is not directed to children under 18. If you believe we have collected information from a minor without appropriate consent, contact us and we will take reasonable steps to address it.
8. Changes
We may update this Policy from time to time. The “Last updated” date above will change when we do. Continued use of the Services after an update means you accept the revised Policy.
9. Contact
For privacy questions, contact us at gugatechnologies08@gmail.com or see our Contact Us page.