Effective date: 20 October 2026
App: Quickox (Android package com.quickox.app)
Operator ("we", "us"): Quickox, India
Contact / Grievance Officer: privacy@REPLACE-ME.example (placeholder)
This Privacy Policy explains how UpBright collects, uses, shares, stores and protects your personal data when you use the Quickox mobile app to discover and book home services (such as AC repair, cleaning, plumbing, electrical work and salon at home) in India. It is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under them. By using Quickox you acknowledge this policy.
Information you provide
Phone number — to create and secure your account through one-time-password (OTP) verification.
Name, email address (optional) and gender (optional) — to set up your profile. If you choose "Continue with Google", we receive your name, email and Google account identifier from Google with your permission.
Service address and location — when you book a service, we collect the address where the service is to be delivered. With your permission, the app may use your device's approximate or precise location to detect or pin your address on a map.
Booking and payment information — services booked, slot, amount, order and payment status. Online payments are processed by Razorpay; card, UPI, net-banking or wallet details are entered into Razorpay's secure checkout and are not stored by us. We receive only a payment reference and status.
Support communications — messages you send us.
Information collected automatically
Device and app identifiers — Firebase installation ID, push-notification (FCM) token, analytics app-instance ID and, where applicable, the Android advertising ID (used only for analytics, never for advertising).
Usage and analytics data — screens viewed, features used and in-app events (Firebase/Google Analytics).
Crash logs and diagnostics — crash reports, device model, OS version and app version (Firebase Crashlytics).
App integrity signals — Firebase App Check / Google Play Integrity attestations to protect our services from abuse.
Data on your device — your cart, recently viewed services and cached catalogue are stored locally on your phone.
We do not collect your contacts, photos, messages, call logs, health or biometric data.
Create, verify and manage your account; authenticate you.
Show services, prices and offers and personalise your experience.
Process bookings, assign a professional, deliver the service at your address and process payments and refunds.
Send service updates, booking confirmations and (if you allow) promotional notifications.
Provide customer support and handle complaints.
Detect, prevent and investigate fraud, abuse and security incidents.
Analyse usage and crashes to fix bugs and improve the app.
Comply with legal obligations (e.g. tax, accounting, lawful requests by authorities).
The legal basis is your consent (given when you sign up and when granting permissions) and legitimate uses permitted under Section 7 of the DPDP Act (such as data you voluntarily provide for a specified purpose and compliance with law).
We do not sell your personal data. We share it only as follows:
Google / Firebase (Google LLC) — authentication (phone OTP, Google sign-in), cloud database (Cloud Firestore), file storage, push notifications (Cloud Messaging), Analytics, Crashlytics, Remote Config and App Check. See https://firebase.google.com/support/privacy and https://policies.google.com/privacy.
Razorpay Software Pvt. Ltd. — payment processing. See https://razorpay.com/privacy/.
Google Maps Platform — address search, map display and geocoding of your location. See https://policies.google.com/privacy.
Service professionals — your name, phone number, service address and booking details are shared with the professional assigned to your booking, only to deliver the service.
Authorities — where required by law, court order or to protect rights, safety and property.
Business transfers — in case of a merger or acquisition, subject to this policy.
These providers act as processors on our behalf and may store data on servers outside India, in compliance with applicable law and any restrictions notified by the Government of India.
Account and profile data: while your account is active; deleted within 30 days of account deletion.
Booking and payment records: up to 8 years after the transaction, as required by Indian tax and accounting laws.
Analytics data: up to 14 months (Google Analytics retention setting).
Crash logs: up to 90 days (Crashlytics).
Support communications: up to 3 years.
Local data on your device: until you clear app data or uninstall the app.
After these periods data is deleted or irreversibly anonymised.
You can delete your account at any time in the app: Account → Delete account. This deletes your profile and your login credential. You can also request deletion by emailing privacy@REPLACE-ME.example from or mentioning your registered phone number, or via https://REPLACE-ME.example/delete-account. We will process requests within 30 days, except for data we must retain by law (see Retention).
Data is encrypted in transit (TLS) and at rest by our cloud providers. Access is restricted by authentication and security rules, and we use App Check / Play Integrity to block unauthorised clients. No method is 100% secure; in case of a personal data breach we will notify the Data Protection Board of India and affected users as required by the DPDP Act.
Quickox is intended for users 18 years and older. We do not knowingly collect personal data of children (under 18 as defined by the DPDP Act) and do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us data, contact us and we will delete it. Processing of a child's data, if ever needed, will take place only with verifiable consent of a parent or lawful guardian.
Internet / network state — to connect to our services.
Notifications — to send booking updates (you can disable them in Android settings).
Location (when introduced) — only when you choose to detect your address; you can deny or revoke it at any time.
As a Data Principal you have the right to:
Access information — obtain a summary of the personal data we process and the processing activities, and the identities of those we have shared it with (Section 11).
Correction, completion, updating and erasure — correct inaccurate data, complete or update it, and erase data no longer needed (Section 12). You can edit your profile in the app or contact us.
Withdraw consent — at any time, as easily as you gave it (Section 6(4)). Withdrawal does not affect processing done before; some features may stop working.
Grievance redressal — contact our Grievance Officer; we will respond within the time prescribed under the DPDP Rules (and in any case within 30 days) (Section 13).
Nominate — nominate another individual to exercise your rights in the event of your death or incapacity (Section 14).
Complain to the Data Protection Board of India — if you are not satisfied with our response, after exhausting our grievance process.
Your duties as a Data Principal (Section 15) include providing authentic information and not filing false or frivolous complaints.
To exercise any right, email privacy@REPLACE-ME.example with your registered phone number. We may verify your identity before acting.
We may update this policy. We will post the new version in the app and on our website and update the effective date; material changes will be notified in the app.
Grievance Officer: Quickox
Email: quickox.help@gmail.com
Address: Khudiram Nagar Haldia West Bengal 721657