Privacy Policy

Last Updated: 03 September 2026

1. Introduction

This Privacy Policy describes how Appointu ("we", "us", or "our") collects, uses, and protects your personal information when you use our mobile application. Appointu is a digital queue management and appointment scheduling platform connecting local service providers (Partners) with customers (Users).

We strictly adhere to applicable data protection laws, including the Digital Personal Data Protection Act (DPDP Act), Indonesia Personal Data Protection Law (UU PDP), Bangladesh Data Protection regulations, and global privacy standards. 

2. Information We Collect

A. Registration via Google Authentication

We use secure Google Sign-In. We collect:

• Full Name: To identify you on the platform.

• Email Address: Used as your unique account credential.

• Profile Picture: Used as your public avatar.

B. User Data (Customers)

• Mobile Phone Number: Collected to allow the Service Provider to contact you regarding your appointment.

• Pincode & City: Used to discover service providers in your local area.

• GPS Location: Accessed only while the app is in use (foreground) to calculate real-time distance (e.g., "1.2 km away") and show nearby shops. GPS data is NOT stored permanently for customers.

C. Service Provider Data 

• Business Profile: Business Name, Business Type (Shop / Clinic / Hospital / Lab), Owner Name, Category, and Profession.

• Contact & Physical Address: Business Phone Number, Complete Street Address, and Pincode.

• Precise Business Coordinates: Exact GPS coordinates (pinned on Google Maps) to enable customer directions.

• Operational Data: Operating hours, slot duration, capacity, off-days, and service price menu.

• Verification Proofs (In-App Upload): 

  1. Business Proof: Official Trade License, Business Registration Certificate (such as Shop Act / MSME for India, NIB / SIUP for Indonesia, Trade License for Bangladesh, CAC for Nigeria, or Municipal Business Certificate), Clinic / Medical Registration, or Professional Degree. 

  2. Identity Proof: Government-issued National ID Card (such as Voter ID, Indonesia KTP, Bangladesh NID, Nigeria NIN, Pakistan CNIC, or Driving License) only. (Note: We strictly DO NOT collect Aadhaar Card or PAN Card). 

D. Cloud Media Storage

All photos and verification proofs are encrypted and stored securely using enterprise-grade cloud media infrastructure (Cloudinary & Google Cloud Firebase). Replaced or deleted photos are permanently purged from cloud storage.

E. Permissions

• Camera (android.permission.CAMERA): Used strictly for in-app QR code scanning (to quickly scan shop posters and open booking pages) and capturing profile photos. Camera feed is processed in real-time on-device and is never recorded or stored on any server. • Gallery / Storage: To pick business photos and verification documents. 

• Location (Coarse/Fine): To find nearby providers.

• Exact Alarm (SCHEDULE_EXACT_ALARM): For timely appointment reminders 30 minutes before your slot.

F. Biometric Security & App Lock Appointu includes optional Biometric Authentication (Fingerprint and Face Lock) to allow users and service providers to lock the app and protect sensitive verification documents from unauthorized viewing.

•Zero Server Storage: We DO NOT collect, store, transmit, or process your biometric data (fingerprint or face templates) on our databases or third-party servers.

•On-Device Processing: All biometric verification is performed entirely on your local device by the Android Operating System’s secure BiometricPrompt framework.

• Document Masking & Auto-Blur: Uploaded verification documents (Licenses & ID Proofs) are automatically blurred and masked on-screen. Service providers must authenticate via on-device biometric (Fingerprint/Face) to unblur documents, which automatically re-blur after 8 seconds for enhanced physical security. 

3. How We Use Your Data

• Booking & Real-Time Token Generation: To assign token numbers and calculate estimated wait times.

• Direct Communication: Sharing customer contact number with the booked Service Provider for order/appointment coordination.

• Safety & Fraud Prevention: Manual admin verification of submitted business documents to grant the Verified ✅ Green Tick and suspend fraudulent/inactive listings. 

• App Stability: Firebase Crashlytics to monitor performance, diagnose crashes, and fix bugs.

• NO DATA SELLING: We strictly DO NOT sell, rent, or trade your personal information to any third-party advertisers or marketing agencies.

In-App Advertisements (Google AdMob): We display third-party advertisements (Banner, Interstitial, and Native Ads) within the Appointu app provided by Google AdMob.

•Google AdMob may collect non-personally identifiable information, such as your Device Advertising ID (GAID), app interaction metrics, and approximate location for serving non-intrusive and personalized ads.

•You can manage or reset your Advertising ID at any time via your Android device settings (Settings -> Google -> Ads).

•To learn more about how Google handles ad data, please review the Google Advertising Privacy Policy.

• User Safety & Content Moderation: We enforce strict AI and human moderation on uploaded photos. Users can report any objectionable, misleading, or offensive content using the in-app "Report" button, which is reviewed and acted upon within 24 hours. 

4. Data Sharing & Disclosure

• Customers can see the verified Partner’s business name, phone number, address, opening hours, and service menu.

• Service Providers can see the customer’s name, phone number, and token number for active appointments.

• We do not share customer email addresses with Service Providers.

5. Data Security

• Encryption in Transit: All data transfer is encrypted using HTTPS / TLS 1.3.

• Encryption at Rest: Database records and media are secured using AES-256 encryption on Google Firebase and Cloudinary.

• Access Control: Strict Firestore security rules prevent unauthorized access to user data.

•Google Play Integrity API & Firebase App Check: We utilize Google Play Integrity and Firebase App Check to verify that requests originate from a genuine, untampered Appointu application on a verified Android device. This prevents unauthorized API abuse, fraud, and automated bots.

•Screen Security (FLAG_SECURE): To prevent unauthorized data capture, sensitive document verification screens and user profiles are protected with anti-screenshot and anti-screen recording protocols.

6. User Rights & Data Rectification

• Edit Profile: Users can update their name and phone number anytime in the app.

• Partner Profile Updates: Partners can update timings, slot capacity, and contact information. Minor edits remain live under review, while major category or license changes undergo Admin re-verification.

• Review Management: Customers can edit or delete their reviews at any time.

• Upload explicit, inappropriate, copyrighted, or sexually suggestive images to shop or profile listings. 

7. Account & Data Deletion Policy

In compliance with Google Play Store data safety standards:

• Users and Partners can permanently delete their account directly within the app (Go to Profile -> Settings -> Delete Account -> Type "DELETE" and confirm).

• Upon deletion: Your personal profile, phone number, token records, appointments, business listings, and uploaded cloud images are permanently and irrevocably erased from our servers immediately.

8. Children's Privacy

Appointu is intended for general audiences capable of contracting services (aged 13 and above). We do not knowingly collect personal data from children under 13.

9. Contact & Grievance Officer

For any privacy concerns, data rectification, or queries, please contact our Grievance Officer at:

• Email: helpdeskoknear@gmail.com

• Jurisdiction: Gadchiroli, Maharashtra, India.

Terms and Conditions

1. Agreement to Terms

By downloading, accessing, or using the Appointu mobile application, you agree to be bound by these Terms and Conditions. Appointu serves as a digital intermediary platform connecting customers (Users) with local businesses, salons, doctors, and clinics (Service Providers).

2. Platform Intermediary Role

• Appointu is an online scheduling and queue management tool.

• We do not own, operate, or provide any of the physical services (haircuts, medical consultations, spa treatments, etc.) listed on the platform.

• Service fulfillment, quality, safety, and hygiene remain the sole responsibility of the respective Service Provider.

3. Zero-Transaction / No In-App Payment Policy

• Appointu is a 100% NON-TRANSACTIONAL platform.

• No In-App Payments: We do not process, collect, or store money, credit cards, UPI, or digital payments.

• Direct Offline Billing: All service fees, bills, and payments must be paid directly by the customer to the Service Provider at their physical shop/clinic.

• Price Disclaimer: Service rates displayed in the app are estimated and set by the Service Provider. Appointu is not responsible for pricing disputes or billing differences at the physical location.

4. Token & Wait Time Disclaimer

• Token numbers and time slots are estimates generated based on average slot duration.

• Unforeseen circumstances at the physical location (e.g. complex treatments, emergency cases, power cuts) may cause delays. The Developer is not liable for waiting time variations.

5. Service Provider Verification & Profile Updates

• Service Providers must provide accurate documentation (Establishment Proof, ID Proof, Qualification) during onboarding.

• Providing falsified licenses or prohibited content will result in immediate suspension and blacklisting.

• Minor profile updates undergo in-app review without disruption, while major structural category or credential changes require mandatory Admin re-verification.

• Instant Live & Verified Green Tick: Service providers can register and start managing appointments immediately. The ✅ Green Tick Verified Badge is awarded after Admin review of legal business documents to help customers identify fully authenticated providers. 

6. Prohibited Activities

Users and Partners agree not to:

• Create spam, fake, or fraudulent appointment bookings.

• Misuse or harvest customer/partner phone numbers for harassment or unauthorized marketing.

• Users and Partners agree not to: 

• Create spam, fake, or fraudulent appointment bookings. 

• Misuse or harvest customer/partner phone numbers for harassment or unauthorized marketing. 

• Upload explicit, inappropriate, copyrighted, or sexually suggestive images to shop or profile listings.  

7. Medical & Professional Services Disclaimer

Appointu does not provide medical, clinical, or professional advice. The doctor-patient or client-professional relationship is strictly between the User and the Service Provider. Appointu is not liable for professional negligence, treatment outcomes, or medical malpractice by any listed provider.

8. Account Termination & Deletion

We reserve the right to suspend or terminate accounts that engage in harassment, fake listings, or terms violation. Users may also voluntarily delete their accounts at any time through the in-app deletion tool.

9. Governing Law & Jurisdiction

These Terms shall be governed by and interpreted in accordance with the laws of the Republic of India. Any legal dispute or claim arising out of these terms shall be subject to the exclusive jurisdiction of the competent courts located in Gadchiroli, Maharashtra, India.

10. Contact Us

For support or inquiries regarding these Terms:

• Email: helpdeskoknear@gmail.com