01.Introduction
Vokitoki (“we”, “us”, “our”) is the hyperlocal super app that connects the people, shops, services and communities of your neighbourhood. This policy explains how we handle personal information across the Vokitoki app and this website.
We wrote it to be read — short sections, plain language, no legal maze. If anything is unclear, ask us; contact details are at the end.
Legal review: confirm registered entity name, registered address, and the jurisdictions in which Vokitoki operates.
02.Information We Collect
We collect only what the product needs to work:
- Account details — your name, phone number, and any profile information you add.
- Content you create — listings, shop details, photos and videos, Address Tags, giveaways, service offerings.
- Communication data — messages and calls are delivered through our systems; private chats are end-to-end encrypted.
- Location — with your permission, to show shops, services, products and people near you.
- Transactions — order, cart and booking details when you buy, sell or book.
- Device and log data — technical information that keeps the app reliable and secure.
Legal/engineering review: verify this inventory against the production app before publication.
03.How We Use Your Information
- Show you what’s genuinely nearby — shops, products, services, giveaways and people.
- Deliver your messages, voice messages and calls.
- Process orders, bookings and payments.
- Keep the platform safe — preventing fraud, spam and abuse.
- Support you when something goes wrong.
- Improve Vokitoki based on how features are used.
We never sell your personal data.
04.Legal Basis for Processing
Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), we process personal data primarily on the basis of your consent, and for certain legitimate uses recognised by law.
Where laws such as the GDPR (EU) or CCPA/CPRA (California) apply, we rely on the corresponding bases: consent, performance of a contract, legitimate interests, and legal obligations.
Legal review: confirm which regimes apply based on actual user base and tailor this section accordingly.
06.Chat, Voice & Communication
Private conversations are exactly that. One-to-one chats are end-to-end encrypted — we cannot read their content.
To deliver messages, voice messages, walkie-talkie audio and calls, we process the technical data needed for delivery (such as who a message is addressed to and when it was sent).
Engineering review: confirm the precise encryption scope per message type (chat, group, walkie-talkie, calls) before publication.
07.Marketplace Transactions
When you buy, sell or book on Vokitoki, we process the details needed to complete the transaction — items, amounts, delivery or pickup choice, and the buyer–seller conversation around it.
Payments are handled by payment providers; we do not store your full card details.
Legal review: name payment partners and confirm exactly which payment fields, if any, are stored.
09.AI Features
If we introduce features that use AI to process your content, we will explain clearly what they access, why, and how to control them — before those features reach you.
Update this section when any AI-powered feature ships.
10.Third-Party Services
Vokitoki works with a small set of service providers to run the platform:
- Cloud hosting and storage
- Maps and location services
- Payment processing
- Push notifications
Providers act under contract, only on our instructions, and only with the data needed for their role.
Legal review: list the actual providers (or provider categories with a request-for-details channel) as required by applicable law.
11.Data Sharing
- With other users — only what you choose to share: your profile, your listings, the Address Tags you send, the messages you write.
- With service providers — under contract, as described above.
- For legal reasons — when required by law or to protect our users and platform.
We do not sell personal data, and we do not share it with advertisers.
Legal review: confirm the advertising statement matches current and planned business practices.
12.Data Retention
We keep your information while your account is active. When you delete your account, we delete or anonymise your personal data, except where the law requires us to retain certain records (for example, transaction records).
Legal review: confirm concrete retention periods per data category.
13.Data Security
Security is a design decision, not a checkbox. Here is how we protect what you trust us with:
Encryption
Data is encrypted in transit; private chats are end-to-end encrypted.
Location care
Location is used to power nearby discovery — not to track you.
Address Tags
Your exact door is shared only when you share it.
Voice delivery
Voice messages travel through secure channels.
Marketplace safety
Report and block tools, and payment handling by dedicated providers.
Access controls
Internal access to personal data is limited and logged.
No system is 100% secure. If an incident ever affects your data, we will inform you and the relevant authorities as required by law.
Engineering review: validate each protection above against current infrastructure.
14.International Data Transfers
Your data is stored and processed in India. If we ever transfer personal data outside India, we will do so in line with applicable law and with appropriate safeguards.
Engineering/legal review: confirm hosting regions and any cross-border flows.
15.Children’s Privacy
Vokitoki is not directed at children. We do not knowingly collect personal data from anyone below the age required by law (18 under the DPDP Act). If you believe a child is using Vokitoki, contact us and we will act.
Legal review: confirm the minimum age policy and verification approach.
16.Your Rights
Your data belongs to you. You can:
- Access the personal data we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your data by deleting your account.
- Withdraw consent at any time.
- Raise a grievance — we will respond within the timelines set by law.
- Escalate to the Data Protection Board of India if you are unsatisfied with our response.
If GDPR or CCPA/CPRA applies to you, you may have additional rights such as portability and the right to object.
Legal review: appoint and name the Grievance Officer / DPO with contact details as required by the DPDP Act.
17.Account Deletion
Leaving should be as easy as joining. You can delete your account from the app settings, or by emailing us. Deletion removes your profile, listings, Address Tags and personal data, subject to the retention rules above.
Engineering review: confirm the in-app deletion flow and completion timeline.
18.Changes to This Policy
When this policy changes, we will update the date at the top of this page. For material changes, we will notify you in the app before they take effect.
19.Contact Information
Questions, requests or concerns about privacy — we want to hear them. Reach the team at the email below, or through the contact page. We usually reply within 1–2 business days.
Questions about privacy?
Our privacy team reads every message.
hello@vokitoki.com · We usually reply within 1–2 business days.