Privacy Policy

1. Who We Are and What This Policy Covers

PiknFix ("we", "us", "our") is a doorstep mobile and tablet repair booking service. We collect your device from your home, repair it, and return it — with live tracking, written quotes and a repair warranty along the way.

This Privacy Policy covers all the ways you interact with us: our website at piknfix.com, the "PiknFix" Android app used by customers, and the "PiknFix Partner" Android app used by our field staff (pickup and delivery agents and technicians). It applies whether you book a repair, track an order, or simply browse.

We act as the data fiduciary for the personal information described in this policy, which means we are responsible for how it is collected, used and protected under Indian law.

• Applies to piknfix.com, the PiknFix customer app, and the PiknFix Partner staff app.
• We are the data fiduciary responsible for your personal information.
• Written to comply with the Digital Personal Data Protection Act, 2023 and the Consumer Protection Act, 2019.

2. Information We Collect

We collect information you give us directly when you create an account, book a repair, or contact us. Your mobile phone number is your account identity — it is how you log in (via a one-time password) and how we reach you about your repair.

Some information is optional: you can use PiknFix without providing an email address, gender, date of birth or profile photo. Where a field is optional, leaving it blank never affects your ability to book a repair.

We do NOT collect your contacts, call logs, SMS inbox, files, or anything on your device beyond what is listed below. Card and banking details are entered directly with our payment gateway and never touch or reside on our servers.

• Mobile phone number — your account identity, used for OTP login and repair updates.
• Name, plus optional email address, gender and date of birth if you choose to add them.
• Profile photo, if you choose to upload one from your camera or gallery.
• Home / pickup addresses, including landmark, city and pincode, and the precise GPS coordinates of the map pin you place when saving an address.
• Device IMEI (optional) if you provide it when booking a repair, to identify the exact device.
• Your booking and repair history: devices, reported problems, quotes, job status and outcomes.
• Payment records — amounts, payment method type and payment status only. Card / UPI / bank credentials are handled entirely by the payment gateway and are never stored by us.
• Reviews, ratings and messages you send us through the app or website.
• A push-notification token for your device, so we can send you booking updates.

3. Location Data: Map Pins and Live Agent Tracking

Customer app: when you save a pickup address, you can drop a pin on a map. We store those GPS coordinates with your address so our agent can find your doorstep accurately. Location is captured only when you actively use the map picker — the customer app does not track you in the background.

Partner app (field staff): while an agent is on an assigned job and has explicitly switched on location sharing, the Partner app sends the agent's precise GPS position roughly every 15 seconds. This live position is shown on the customer's order-tracking page (so you can see your device on its way) and to PiknFix for coordinating the job.

Agent location sharing is explicit and consented, works only while the app is in the foreground, and stops automatically when the job closes. The live-location data recorded for a job is deleted when that job completes — we do not keep a movement history of our staff or build location profiles.

• Customers: GPS coordinates are saved only when you place a map pin for an address.
• Field staff: live location roughly every 15 seconds, only while actively sharing on an assigned job, foreground-only, with explicit consent.
• Live tracking stops when the job closes, and the job's location data is deleted on completion.

4. How We Use Your Information

We use your information for one core purpose: providing the repair service you booked — collecting your device, diagnosing and repairing it, keeping you informed, and returning it to you. We do not use your personal data for advertising or profiling.

• Providing repairs, doorstep pickup and delivery, and live order tracking.
• Logging you in securely with a one-time password (OTP) sent to your mobile number.
• Sending booking confirmations, quotes, status updates and delivery notifications via SMS, WhatsApp, email and push notifications.
• Processing payments and issuing invoices and refunds.
• Responding to your questions, reviews and support requests.
• Meeting legal obligations, such as tax record-keeping, and preventing fraud or misuse of the service.

5. Third-Party Services We Use (and What They Receive)

We use a small number of third-party services to run PiknFix. Each receives only the minimum information needed to do its job, and none of them is given your data for advertising. This is the complete list:

• apitxt.com — delivers our SMS and WhatsApp messages (OTPs and booking updates). Receives your mobile number and the message content.
• Google Firebase Cloud Messaging — delivers push notifications to the apps. Receives your device's push token and the notification content.
• Razorpay — processes online payments. You enter card / UPI / banking details directly with Razorpay; we receive only the payment amount, status and a transaction reference.
• OpenStreetMap Nominatim — converts your map pin or typed address into a readable address (and vice versa). The coordinates or address text you enter are sent to their servers for this lookup.
• CARTO / OpenStreetMap — provides the map tiles (map images) shown in the app. Loading tiles reveals the approximate area you are viewing and your IP address to the tile server.
• Google Fonts — the app downloads its display font from Google on first launch, which discloses your IP address to Google. No personal data is sent.
• simpleicons.org CDN — serves the device-brand logos shown in the app, which discloses your IP address to that CDN. No personal data is sent.

6. What We Do NOT Do With Your Data

It is easier to trust a service when you know what it does not do. So, plainly:

• We do NOT sell, rent or trade your personal data to anyone.
• We show NO advertising and use NO advertising networks.
• We use NO third-party analytics or behavioural-tracking SDKs in our apps or website.
• We do NOT store your card, UPI or banking credentials — the payment gateway handles those end to end.
• We do NOT read your contacts, call logs, messages, photos or files (a profile photo is uploaded only if you pick one yourself).
• We do NOT track your location in the background.

7. How We Protect Your Information

All communication between your device and our servers is encrypted in transit using HTTPS / TLS. Access to personal data on our systems is protected by access controls, and our staff can see only the information their specific job requires — for example, a pickup agent sees the address and contact details for their assigned job, not your full account history.

No system on the internet can be guaranteed 100% secure, but we follow reasonable security safeguards as required by Indian law, and we review and improve them as the service grows. If we ever become aware of a data breach affecting you, we will notify you and the Data Protection Board of India as the law requires.

• HTTPS / TLS encryption for all data in transit.
• Access controls on our systems; staff access is limited to what their role needs.
• Breach notification to affected users and the Data Protection Board of India, as required by law.

8. How Long We Keep Your Data

We keep personal data only as long as it is needed for the purpose it was collected for, or as long as the law requires us to keep it — whichever is longer for that particular record.

• Account and profile data: kept while your account is active, and deleted when you delete your account (see Section 10).
• Booking, invoice and payment records: retained for the periods required by Indian tax and consumer-protection law, even after account deletion, in anonymised or minimised form where possible.
• Live agent location: wiped when the job closes — it is not archived.
• OTP codes: expire within minutes of being issued and are not reusable.
• Push-notification tokens: removed when you log out, delete your account, or the token becomes invalid.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023 and the Consumer Protection Act, 2019, you have rights over your personal data, and we make them easy to use. Most of them can be exercised directly in the app: you can view and edit your name, email, addresses and profile details from your Profile screen at any time.

To exercise any right you cannot complete in the app, contact us using the details in Section 12. We will verify that the request comes from you (usually via your registered mobile number) before acting on it, and we will respond within the timelines required by law.

• Access: ask us what personal data we hold about you and how it is used.
• Correction: fix inaccurate or outdated details — most can be edited directly in the app.
• Deletion: delete your account and personal data (see Section 10 for exactly what is deleted and what must be retained).
• Consent withdrawal: withdraw a consent you gave earlier — for example, stop sharing your location or remove your profile photo. Withdrawing consent needed for the core service (such as your phone number) may mean we can no longer serve you.
• Grievance redressal: complain to our Grievance Officer (Section 12), and if unsatisfied, escalate to the Data Protection Board of India or the appropriate consumer forum.
• Nomination: nominate a person to exercise these rights for you in case of death or incapacity, as provided by the DPDP Act.

10. Deleting Your Account

You can delete your PiknFix account yourself, without contacting support, in either of two ways: in the app, go to Profile and choose Delete account; or on the web, visit https://piknfix.com/delete-account and follow the steps. Both routes verify your identity via your registered mobile number before deleting.

When your account is deleted, we remove your profile (name, email, gender, date of birth, profile photo), your saved addresses and map coordinates, your push-notification tokens, and your login access. This is not a deactivation — the account cannot be restored afterwards.

What we must keep: records of completed bookings, invoices and payments are retained in anonymised or minimised form for as long as Indian tax and consumer-protection law requires, because the law obliges every business to keep financial records. These retained records are no longer linked to a usable personal profile.

• In-app: Profile → Delete account. On the web: https://piknfix.com/delete-account.
• Deleted: profile details, photo, addresses and map pins, notification tokens, login access.
• Retained (as legally required): anonymised booking and financial records for tax and consumer-law periods.
• Deletion is permanent and cannot be undone.

11. Children

PiknFix is intended for users aged 18 and above. If you are under 18, you may use the service only with the consent and supervision of a parent or legal guardian, who must make the booking and handle the handover on your behalf.

We do not knowingly collect personal data from children. If you believe a child has created an account without guardian consent, please contact us using the details in Section 12 and we will delete the account and its data.

• Service intended for users 18 or older.
• Under-18 use requires parent / guardian consent and supervision.
• Accounts created by children without consent will be deleted on request.

12. Grievance Officer and How to Contact Us

If you have any question, request or complaint about your personal data or this policy, contact our Grievance Officer using the details below. We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days, as required by the Consumer Protection (E-Commerce) Rules, 2020 and the DPDP Act, 2023.

If you are not satisfied with our resolution, you may escalate to the Data Protection Board of India, the National Consumer Helpline (1915 / consumerhelpline.gov.in), or the appropriate consumer forum under the Consumer Protection Act, 2019.

• Grievance Officer: PiknFix
• Email: hello@piknfix.com
• Phone / WhatsApp: +91 81018 87381
• Address: West Barasat, Sutia Barasat, Gaighta, 24 PGS (N), West Bengal, 743273, India
• Acknowledgement within 48 hours; resolution targeted within 30 days.

13. Changes to This Policy

We may update this Privacy Policy from time to time — for example, when we add a feature, change a service provider, or when the law changes. The version published on this page is always the current one, and the "Last updated" date below reflects when it last changed.

If we make a material change to how we handle your personal data, we will notify you through the app or by SMS / WhatsApp / email before the change takes effect, and where the law requires it, we will ask for your consent again.

Last updated: 07 July 2026.

• The version on this page is always the current policy.
• Material changes are notified in advance via the app, SMS, WhatsApp or email.
• The "Last updated" date above changes whenever this policy is revised.