This policy explains how TICKLE CARE LLP (“Tickle”, “we”, “us”) processes personal data when you use ticklecare.com, the Tickle customer app (web, iOS and Android) and our car-care services. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, and we also follow the Information Technology Act, 2000 and its rules where they apply.
1. Who we are
- Legal name: TICKLE CARE LLP (a Limited Liability Partnership registered in India)
- Registered office: House No. 202, Tower-T2, Second Floor, Deevan Housing Society, Sector 84, Gurugram, Haryana 122004
- GSTIN: 06ABAFT8528P1ZJ
2. Personal data we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account | Name, mobile number, email (optional) | You, when you sign up with an OTP |
| Car & parking | Brand, model, registration number, colour, society, tower, parking level and slot, parking notes, parking photo, optional voice note | You |
| Service records | Visit dates and status, before/after photos of your car (the number plate is in frame), job videos, ratings, comments, support requests | Our washers and you |
| Payments | Plan, amount, payment status, Razorpay payment/subscription IDs, payment method type | Razorpay. We never see or store your full card number, UPI PIN or net-banking password. |
| Device & usage | App version, device type, push-notification token, IP address, error logs | Your device |
| Society requests | Society name, locality, optional mobile number | You, on our website or app |
Photos and videos. To prove every wash, washers photograph your car before and after cleaning and may record the job with a phone camera worn on a head strap. These are pointed at your car, but may incidentally capture its surroundings. We use them only for service proof, quality checks and resolving complaints.
3. Why we use it (purposes)
- Create and secure your account (OTP login, fraud prevention).
- Plan, assign and deliver visits: your washer sees your first name, car details and parking location for the day.
- Show you proof of each wash and let you rate visits and raise issues.
- Take payments, issue invoices and meet tax and accounting obligations.
- Send service messages (visit updates, payment reminders, pre-debit notifications) by push, SMS or WhatsApp.
- Understand demand for new societies (society requests).
- Improve quality and safety, and handle complaints, disputes and legal claims.
We process personal data on the basis of your consent (given when you sign up or submit a form) and for legitimate uses allowed by Section 7 of the DPDP Act, such as data you voluntarily provide for a specific purpose and compliance with law. We do not sell your personal data and we do not use it for third-party advertising.
4. Who we share it with
- Your washer and our operations team, only what is needed for your visits.
- Your society’s security desk, where needed for gate entry (for example, your car registration number).
- Data Processors working on our instructions under contract: Razorpay (payments), Amazon Web Services (hosting and storage), our SMS/WhatsApp OTP and messaging provider, and push-notification services (Apple, Google).
- Authorities, when required by law or to protect rights, safety and property.
Our servers are located in India. Some processors may process limited data outside India; we only allow this where permitted under Section 16 of the DPDP Act.
5. How long we keep it
- Account, car and parking data: while your account is active, and erased after you delete your account (see below).
- Before/after photos: 180 days. Job videos: 45 days, unless linked to an open complaint or claim.
- Invoices and payment records: as long as tax and accounting laws require (currently up to 8 years).
- Society requests: until we open in that society or for up to 24 months.
6. How we protect it
Encryption in transit (HTTPS/TLS) and at rest, OTP-based login, hashed session tokens, role-based access for staff and washers, short-lived signed links for photos and videos, and logging of administrative access. If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as required by law.
7. Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we process about you and who we have shared it with.
- Correct, complete or update it (most of it directly in the app).
- Erase it, by deleting your account (how to delete your account).
- Withdraw consent at any time. This doesn’t affect processing already done, and we may then be unable to provide the service.
- Nominate someone to exercise these rights if you die or become incapacitated.
- Raise a grievance with us, and if unresolved, with the Data Protection Board of India.
Email hello@ticklecare.com from, or mentioning, your registered mobile number. We will verify your identity and respond within the time required by law.
8. Children
Tickle is meant for adults (18+). We do not knowingly process children’s personal data. If you believe a child has signed up, contact us and we will delete the account.
9. Cookies and website
ticklecare.com does not use advertising or cross-site tracking cookies. The app stores your login session on your device so you stay signed in.
10. Grievance Officer
- Grievance Officer: Prateek Monga (Designated Partner)
- Email: hello@ticklecare.com
- Address: House No. 202, Tower-T2, Second Floor, Deevan Housing Society, Sector 84, Gurugram, Haryana 122004
General support: hello@ticklecare.com.
11. Changes to this policy
We will post updates here and change the date above. For material changes we will notify you in the app or by message before they take effect.