Privacy Policy for Maidnest
Welcome to Maidnest, an on-demand domestic cleaning and maid marketplace operated by Karsmiths. This policy discloses how we handle personal identity records, background/foreground location telemetry, service bookings, and account deletion under international privacy regulations and Google Play Developer Policies.
1. Introduction & Developer Identity
Welcome to Maidnest (the "Application" or "App"), an on-demand home maid and domestic cleaning marketplace operated by Karsmiths ("we", "us", or "our").
We respect your privacy and are committed to protecting the personal and sensitive user data you entrust to us. This Privacy Policy outlines how we collect, use, process, disclose, retain, and delete your information in accordance with applicable data protection laws and the Google Play Developer Policy on User Data and Permissions.
2. Scope & Target Audience
Maidnest connects two primary user groups:
Individuals seeking to book domestic cleaning, cooking, housekeeping, and maid services.
Independent domestic professionals offering cleaning, housekeeping, and maid services.
3. Personal & Sensitive Data We Collect
Depending on how you interact with Maidnest, we collect and process the following categories of data:
A. Personal Identification & Profile Information
- Account Registration Data: Name, email address, phone number, and password (hashed and securely handled).
- OAuth Authentication Data: If you choose to log in using third-party single sign-on (such as Google Sign-In), we receive your basic authentication profile information (name, email address, and profile picture avatar) from the provider.
- Profile Details: Profile photo, role identifier (Customer or Service Provider), and language preferences.
B. Location Data (Foreground & Approximate/Precise Location)
Core Marketplace FeatureMaidnest utilizes device location services to power the domestic services marketplace.
- Data Collected: Precise GPS coordinates (
ACCESS_FINE_LOCATION) and approximate network-derived location (ACCESS_COARSE_LOCATION). - Foreground Location Service (
FOREGROUND_SERVICE_LOCATION): When active service appointments are in progress or when a service provider is traveling to/dispatched to a customer job site, a persistent notification informs the user that location tracking is actively operating in the foreground.
- To pinpoint customer service addresses and provide accurate reverse geocoding via Google Maps Platform.
- To match customers with qualified, nearby service providers.
- To estimate travel times and calculate arrival updates for booked appointments.
C. Maid Professional Verification & KYC Documents
To preserve community safety and trust on our platform, service providers submit:
- Government-issued identification credentials or verification certificates.
- Professional experience, skills, offered service categories, and hourly/flat service rates.
- Availability schedules and service radius.
- These verification documents are encrypted and stored in restricted-access cloud storage buckets (
maid_documents).
D. Photos, Media, and Camera Access
- Camera & Photo Gallery Permissions: Requested when you choose to take or upload a profile picture or submit verification documents.
- We do not access or scan photos or videos in your media library other than those you explicitly select and upload.
E. Financial, Transaction & In-App Wallet Data
- In-App Wallet: Records of wallet balances, credit/debit transactions, top-ups, referral bonuses, and payout history.
- Payment Processing: When you pay for bookings, payment transactions are handled through secure, compliant third-party payment gateways. Maidnest does not store your full payment card numbers, CVVs, or bank account passwords on our servers. Only transaction reference IDs, status, and payment method identifiers are retained.
F. Bookings, Service Events & User Reviews
- Details of services booked (date, scheduled time slot, service address, cleaning instructions, and status changes).
- Ratings, feedback, and customer reviews published for service providers.
G. Diagnostic, Log & Device Telemetry Data
- Device & App Identifiers: Device manufacturer, hardware model, operating system version, app version code, network connectivity type, and unique pseudonymous crash/installation identifiers.
- Performance & Error Traces: Application performance telemetry, crash reports, and system traces collected via OpenTelemetry and SigNoz (
otel.signoz.karsmiths.com) to troubleshoot crashes, resolve bugs, and ensure app stability.
4. How We Use Your Data
We process your data exclusively for legitimate operational, service, and legal purposes:
5. How We Share and Disclose Your Information
We do not sell, rent, or lease your personal information to third parties. Data is disclosed only in the following scenarios:
A. Between Customers and Service Providers
- When a customer confirms a booking, their service address, first name, and contact phone number are shared with the accepted service provider strictly for the purpose of fulfilling the scheduled service.
- Customers can view the service provider’s public profile, including name, photo, ratings, customer reviews, verified status, and skill categories.
B. Third-Party Service Providers and Infrastructure Sub-Processors
We work with reputable third-party infrastructure and service vendors bound by confidentiality and data protection obligations:
Self-hosted / Managed Appwrite (appwrite.karsmiths.com) for secure database storage, user authentication, and encrypted file hosting.
Google Maps Platform for address autofill, geocoding, and distance calculations.
SigNoz / OpenTelemetry (otel.signoz.karsmiths.com) for anonymized error logging, app telemetry, and performance tracking.
Google OAuth for secure single sign-on authentication.
C. Legal & Regulatory Compliance
We may disclose personal information if required by law, court order, or governmental authority, or when necessary to protect the safety, rights, or property of our users, the public, or Karsmiths.
6. Data Retention and Account Deletion
A. Retention Period
We retain your personal data only as long as your account remains active or as needed to provide our services. We also retain certain records (such as completed transaction invoices, payment histories, and dispute logs) to satisfy legal, tax, accounting, and anti-fraud statutory requirements.
B. Account & Data Deletion (Google Play Policy Compliance)
You have the full right to delete your Maidnest account and request the deletion of your personal data at any time through either of the following methods:
- Open the Maidnest app and log in.
- Go to Profile / Settings > Delete Account.
- Select your reason and optional feedback.
- Confirm deletion request.
- Session ends immediately and deletion is executed.
In accordance with Google Play's Account Deletion requirement, you can submit a deletion request online even if you have uninstalled the app:
- Online Deletion Form:https://maidnest.karsmiths.com/delete-account
- Email Request: privacy@karsmiths.com Subject: "Account Deletion Request - Maidnest"
3. What Happens Upon Account Deletion:
7. Device Permissions & User Controls
You can grant or revoke device permissions at any time through your device's system settings:
ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION)Required for discovering nearby cleaners and geocoding your cleaning address. If disabled, address entry must be performed manually and nearby matching may be restricted.
FOREGROUND_SERVICE_LOCATION)Used strictly to support real-time active booking fulfillment and dispatch updates when a provider is en route.
Required only when actively capturing or uploading profile pictures or verification documents.
Used to deliver real-time booking status alerts, arrival updates, and security notices.
8. Data Security Measures
We implement robust administrative, technical, and physical security safeguards to protect your personal information:
- All data transmission between the Maidnest application, third-party APIs, and our Appwrite backend is encrypted using industry-standard Transport Layer Security (TLS 1.2 / 1.3 / HTTPS).
- Sensitive verification documents are stored in private, access-restricted cloud storage buckets with strict access policies.
- Database access is restricted with role-based security rules and principle of least privilege.
- While we strive to protect your personal data, no electronic transmission over the internet or storage system can be guaranteed to be 100% secure.
9. Children's Privacy
Maidnest is not structured or intended for children under 18 years of age. We do not knowingly collect personal data from children. If we discover that a minor under 18 has registered an account or provided us with personal information, we will take immediate steps to delete the information and terminate the account. If you believe a minor has provided us with their data, please contact us immediately at privacy@karsmiths.com.
10. Your Rights & Choices
Depending on your jurisdiction (including GDPR, CCPA, and regional privacy regulations), you have rights regarding your personal information:
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our app features, operational practices, or applicable laws. When changes are made, we will update the "Last Updated" date at the top of this page. For significant modifications, we will provide a prominent notice within the app or via email before the changes take effect.
12. Contact Us
If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact us at:
