Policy version: v1.1 · Last updated: 21 May 2026. Legal entity: KARMAVYUHA COMMUNICATIONS LLP operates Citizz in India. This policy explains, in plain language, what personal information we collect, why we collect it, who can see it, how long we keep it, and how we try to keep it safe. It applies to the Citizz mobile app, this public website (Citizz.app), any separate invite-only business account portal we enable for your organisation, and when you email us.
1. Who is responsible for your data
KARMAVYUHA COMMUNICATIONS LLP decides how and why personal data on Citizz is processed. Under India's Digital Personal Data Protection Act, 2023, we act as the data fiduciary for that data. Questions: contact@karmavyuha.com.
2. What we collect
We collect only what we need to run a local services marketplace. Depending on how you use Citizz, this may include:
2.1 Account and profile
- Name, email, and phone number when you register or verify your phone.
- For businesses: business name, categories, description, photos, team details you choose to add.
- Profile and listing images you upload (for example business photos and service pictures).
2.2 Location and address (minimal, for a purpose)
- Finding services near you — If you allow location on your phone, we use it to show nearby businesses and distances. You can deny permission; some discovery features may then work less well.
- Bookings at the customer's place — When a service needs a visit, the customer may enter an address (and sometimes map coordinates) so the business can attend. That information is shared with the business (and assigned staff such as jobbers) for that booking only — not for unrelated marketing.
- Business area — Businesses may provide a service area or location type so customers know where they operate. We do not continuously track business owners' personal movements through Citizz unless a feature you use clearly requires it and you consent.
We do not sell your live location to advertisers. See our Terms for how users must behave when meeting in person.
2.3 Messages, bookings, and activity
- In-app messages between customers and businesses (and related notifications).
- Booking details: date, time, service, status, customer name and phone where needed, address when required.
- Reviews and ratings you submit.
- Support and grievance emails or forms you send us.
2.4 Payments
- Payments are handled by a licensed payment partner. We do not store your full card number on our servers.
- We receive payment status, amounts, references, and billing details you submit (for example name or GST information for an invoice).
2.5 Device and security information
- Device type, app version, and general technical logs to keep the service stable and secure.
- IP address and sign-in activity to reduce fraud and abuse.
- Push notification tokens if you enable alerts.
2.6 Calls and messages through Citizz
- In-app chat — Messages you send through Citizz are stored and delivered through our systems so there is a record linked to the booking or conversation.
- In-app voice (VoIP) — When available, voice calls between users are set up through Citizz's servers. We keep call metadata (for example who called whom, timing, and billing records) to run the feature and prevent abuse.
- Masked phone calls — Where enabled, Citizz may connect two phone numbers through a telecom partner so personal numbers are not shown to the other party on the call. We still process call records needed for billing and safety.
Citizz is designed so customers and businesses can coordinate a job inside the app. We do not require you to share your personal mobile number, WhatsApp, or home address outside Citizz when the platform already provides messaging or calling for that booking.
3. Why we use your information
- Run the app: accounts, search, bookings, chat, and paid features you buy.
- Keep people safe: fraud checks, abuse reports, and enforcing our content rules.
- Send important messages: receipts, security alerts, booking updates, replies to support.
- Meet legal duties: tax, accounting, and responding to lawful requests.
- Improve Citizz using aggregated statistics that do not identify you personally.
4. Who sees your information
- Other users — Public profile and listing fields are visible as you intend. Messages go to people in the conversation. Booking addresses go to the business handling that job.
- Service providers we hire — Hosting, payments, messaging, maps, and similar partners who process data only to provide Citizz, under contract.
- Authorities — When the law requires it, or to protect safety and rights.
We do not sell your personal information as a product to third-party marketers.
5. How long we keep information
5.1 While your account is active
We retain data as long as needed to provide the service and as described below.
5.2 When you close your account
- Straight away — You cannot sign in. Listings are hidden from discovery. Push alerts stop.
- Up to 90 days — We keep identifiable personal data (name, email, phone, profile photos, addresses you gave us) for up to 90 days to handle support, disputes, and fraud prevention, then delete or anonymise it unless an exception below applies.
- Sign-in identity — Your login identity is disabled at closure and removed when personal data is purged.
5.3 Records we keep longer
- Payment and transaction history, tax-related billing data, and commission records — as long as law requires.
- Grievance and serious support cases — as long as needed to show fair handling.
5.4 Reviews and bookings
- Reviews you wrote may stay visible without linking to your closed profile.
- Reviews about a closed business may remain for marketplace trust.
- Booking records may be kept for business operations; customer personal details in old bookings are anonymised when your personal data is purged.
5.5 Abuse and safety investigations
If an account is suspended or removed for abuse (for example obscene images, threats, or fraud), we may keep relevant uploads, messages, and investigation notes longer than 90 days while needed to stop repeat harm, defend legal claims, or comply with authorities — then delete or anonymise when no longer required.
5.6 Other technical retention
Security logs, backups, and aggregated analytics may be kept for limited periods under normal IT practice. Account closure in the app is also described in our Terms of use. To ask for early erasure, email contact@karmavyuha.com — some records cannot be removed early where law requires them.
6. How we protect your information
We take reasonable steps appropriate for a consumer app, including:
- Sending data over encrypted connections (HTTPS) between your device and our services.
- Restricting staff and systems access to personal data on a need-to-know basis.
- Using reputable cloud and payment partners with their own security standards.
- Monitoring for suspicious sign-in or payment activity.
No online service can promise perfect security. If you think someone accessed your account, change your sign-in method where possible and email contact@karmavyuha.com.
6.1 Protecting your phone number and address
Customers: For your privacy, use Citizz in-app chat and call to speak with a business about a booking. Do not give your personal mobile number, WhatsApp, email, or full home address in chat, on a personal call, or on another app unless a feature in Citizz clearly requires it (for example entering a service address for a home visit). Sharing contact details outside Citizz can expose you to spam, harassment, or misuse — and is harder for us to help with if something goes wrong.
Businesses and team members: Do not ask customers to move conversation or share phone numbers and addresses outside Citizz when the platform already provides contact for that job. Use only what Citizz shows for the active booking. See our Terms of use §3.5.
Plain-language tips: Before you book and Trust & safety.
7. Your rights
Under Indian law (including the DPDP Act where it applies), you may ask to see, correct, or delete personal data, or withdraw consent where processing is based on consent — though some features may stop working if you withdraw. You may nominate someone to act for you in death or incapacity where the law allows.
Email contact@karmavyuha.com from your registered address when possible. We may ask you to confirm your identity. Some data must be kept even after an erasure request.
Unhappy with our answer? Use Grievance or, where applicable, the Data Protection Board of India. Contract disputes follow our Terms of use.
8. Children
Citizz is not for people who cannot legally contract in India (generally under 18). If you believe we hold a minor's data by mistake, contact us and we will delete it where appropriate.
9. Data outside India
Some partners may process data in India or other countries where they operate. We use safeguards required by law when data crosses borders.
10. Changes
We may update this policy. We post changes here and update the date above. Important changes may be announced in the app or by email when practical.
11. Contact
Privacy questions: contact@karmavyuha.com