Privacy Policy

Lokyt ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the Lokyt platform, in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and applicable Indian laws.

1. Data We Collect

We collect only the data necessary to provide our services:

• Phone Number: Used for authentication via OTP. We do not store your OTP after verification.
• Name: Optional. Displayed with your reviews if provided.
• Location (Approximate): Used to show vendors near you and calculate distances. We do not store precise GPS coordinates.
• Search Queries: Used to improve search results. Anonymized after 30 days.
• Favorites & Reviews: Stored to provide personalized experience.
• Language Preference: Stored to serve content in your preferred language.

We do not collect: Aadhaar, PAN, bank details, payment information, contacts, photos, or any biometric data from users.

2. How We Use Your Data

• Authenticate your identity via phone OTP
• Show relevant, nearby vendor search results
• Store your favorite vendors and reviews
• Send notifications you have opted into
• Improve search quality and platform performance
• Comply with legal obligations under Indian law

We will never sell your personal data to third parties. We do not use your data for advertising. Lokyt is and will always be free for users.

3. Data Storage & Security

• All data is encrypted at rest using AES-256 and in transit using TLS 1.2+.
• Sensitive fields (phone numbers, GST numbers) are encrypted with additional application-level encryption.
• Authentication tokens are stored securely: refresh tokens in HttpOnly cookies, access tokens in memory only.
• OTPs are cryptographically generated and expire after use or timeout.
• Data is hosted on secure cloud infrastructure within India.

4. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: You can view all personal data we hold about you through your profile page.
• Right to Correction: You can update your name and preferences at any time from your profile.
• Right to Erasure: You can request complete deletion of your account and all associated data. This is irreversible.
• Right to Withdraw Consent: You can withdraw consent for optional data processing (location, notifications) at any time.
• Right to Grievance Redressal: You can contact our Data Protection Officer for any concerns.

5. Emergency Services

Emergency services on Lokyt are always free, require no login, and collect no personal data. Emergency access is never rate-limited.

6. Contact Us

For privacy concerns, data access requests, or to contact our Data Protection Officer:

• Email: privacy@lokyt.in
• Response time: Within 72 hours for all DPDP-related requests