Privacy Policy

1. Overview & Scope

Khozna Private Limited ("Khozna", "we", "us", or "our") operates Nepal's peer-to-peer room rental and homestay platform available via our mobile applications and official website (khozna.com).

This Privacy Policy explains clearly and transparently how we collect, process, store, disclose, and protect your personal information when you register, search for rooms, list properties, communicate, or execute transactions through the Khozna platform.

2. Information We Collect

To deliver a safe, scam-free rental experience across Nepal, we collect the following categories of information:

2.1 Personal Identity Information

• Account Details: Full Name, Email Address, Registered Mobile Number, and Profile Avatar photo.
• Role Classification: Whether you are registering as a Room Seeker or Property Host/Landlord.

2.2 Know-Your-Customer (KYC) & Verification Data

• Identity Verification Documents: Images of government-issued identification certificates (Citizenship Certificate, Passport, Driving License, or Student ID).
• Verification Purpose: KYC verification is mandatory for Hosts and Seekers to eliminate rental fraud, fake listings, and identity spoofing. Submitted documents are encrypted and kept strictly confidential.

2.3 Geographic Location Data (GPS)

• Precise GPS Location: Collected with explicit user permission while using the app to display nearby rooms, verify host property coordinates, enable distance-based search radius, and assist navigation to property visits.
• Background Location: Location permissions are active only while utilizing location-based features within the application.

2.4 Property Media & Content Uploads

• Listing Content: Video walkthrough clips, high-resolution room photos, floor plans, rent pricing details, and property amenity descriptions uploaded by hosts.

2.5 Financial & Escrow Transaction Data

• Payment Logs: Transaction IDs, timestamps, and payment status for escrow booking deposits conducted via eSewa, Khalti, or Bank Transfer.
• Note: Khozna does NOT store raw credit card numbers, wallet PINs, or banking passwords on our servers.

2.6 Technical & Device Information

• Device Identifiers: IP address, operating system version, device model, app version, unique device tokens for Firebase Push Notifications, and system crash logs.

3. How We Use Your Information

We use collected data strictly to operate, protect, and improve the Khozna platform:

• Verifying Authenticity: Authenticating host identities and building ownership to eliminate rental scams in Nepal.
• Connecting Seekers & Hosts: Facilitating scheduled room visits, direct in-app messaging, and mutual contact exchange upon visit approval.
• Operating Khozna Escrow: Holding booking deposits safely in escrow until physical property inspection or move-in confirmation.
• Location-Based Recommendations: Presenting rooms and homestays nearby based on exact geographical proximity.
• Push Notifications & Alerts: Sending real-time updates regarding booking requests, chat messages, visit confirmations, and escrow status.
• Legal & Regulatory Compliance: Fulfilling tax reporting, anti-money laundering, and law enforcement requirements under the laws of Nepal.

4. Data Sharing & Third-Party Disclosure

We prioritize your privacy and strictly control how data is shared:

4.1 Mutual Host-Seeker Contact Release

To protect users against spam and unauthorized solicitations, phone numbers and direct contact details are shared between a Host and Seeker ONLY after a visit request is accepted or an escrow deposit is completed.

4.2 Essential Service Providers

We share data with trusted infrastructure providers bound by strict confidentiality agreements:

• Cloud Infrastructure & Database: Backend database services hosted securely on Supabase.
• Push Notifications: Firebase Cloud Messaging (FCM V1) for delivering real-time notification alerts.
• Digital Payment Gateways: Integration with eSewa, Khalti, and Nepal interbank transfer systems to process escrow deposits and payouts.

4.3 Legal Requirements & Law Enforcement

We may disclose user information to police or judicial authorities of Nepal only if mandated by a formal court order, search warrant, or official legal process issued by the Cyber Bureau of Nepal Police.

5. Data Security & Storage

We implement multi-layered security protections to keep your data safe:

• Data Encryption: All data transmitted between your device and Khozna servers uses SSL/TLS 256-bit encryption. Database storage at rest uses AES-256 encryption.
• In-App Screenshot Protection: Sensitive mobile app screens containing private KYC identity documents enforce screenshot-blocking technology to prevent identity theft.
• Access Controls: KYC documents are accessible strictly by authorized compliance staff for verification audit purposes.

6. Account & Data Deletion Rights

In full compliance with Google Play Store and Apple App Store policies, every user has the right to permanently request the deletion of their account and personal data.

Upon receiving a deletion request, your profile info, KYC identity documents, media uploads, and session logs will be permanently erased within 48 hours. Statutory financial transaction logs are retained for 3 years solely for Nepal tax compliance audits before permanent purge.

7. Children's Privacy

The Khozna platform is not intended for individuals under the age of 18. We do not knowingly collect or solicit personal information from minors. If we learn that a minor has submitted personal data, we will immediately delete the information and terminate the account.

8. Changes to Privacy Policy

We may update this Privacy Policy periodically to reflect app updates, new security safeguards, or legal requirements in Nepal. Material changes will be notified via in-app banner announcements and by updating the "Effective Date" at the top of this page.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer: