Privacy Policy

This Privacy Policy explains how Popup Bits Pvt. Ltd. ("Popup Bits", "we", "us") collects, uses, and protects information when you use the Bhadama mobile application and the website at bhadama.app (together, the "Service"). By using the Service you agree to this Policy.

1. Who we are

The Service is operated by Popup Bits Pvt. Ltd., a company registered in Nepal at Gaurighat 8, Kathmandu. Popup Bits is the data controller for personal information processed through the Service. You can contact us at info@popupbits.com.

2. Information we collect

2.1 Information you provide

• Account information: name, email address, phone number, password (stored as a salted hash) and, optionally, a profile photo.
• Listing information (landlords): property address, description, rent and other listing details, and photos you upload.
• Communications: messages you send to us through email or in-app support.

2.2 Information collected automatically

• Approximate or precise location: when you grant the location permission, we use your device location to centre the map and show nearby listings. You can revoke this permission at any time in your device settings.
• Device and usage data: device model, operating system, app version, language, IP address, crash logs, and basic analytics events such as screens viewed and features used.
• Cookies and similar technologies (website only): our website uses essential cookies to keep you signed in during the account-deletion flow. We do not use third-party advertising cookies.

2.3 Information we do not collect

We do not collect government identification numbers, financial account details, biometric data, or contacts from your device. The Service does not include in-app payments at this time.

3. How we use information

We use the information described above only for the following purposes:

• Create and secure your account, and verify your email.
• Display rental listings on a map and connect tenants with landlords.
• Send transactional emails such as email verification, password reset, and account-deletion confirmation.
• Diagnose crashes, improve performance, and develop new features.
• Detect and prevent fraud, spam, abuse, and violations of our Terms of Service.
• Comply with legal obligations and respond to lawful requests from authorities.

4. Legal basis for processing

We process personal information on the following bases: (a) performance of a contract with you to provide the Service; (b) your consent, for example when you grant location permission; (c) our legitimate interests in operating, securing, and improving the Service; and (d) compliance with law.

5. How we share information

We do not sell your personal information. We share it only with the following categories of recipients, under contractual and security safeguards:

• Other users of the Service: the listing details, name, and contact information you choose to publish are visible to other users so they can contact you about a property.
• Service providers: Appwrite (authentication, database, file storage, and email delivery), Google Maps (map tiles and geocoding), and infrastructure or analytics providers that help us run the Service. These providers process your data on our instructions.
• Legal and safety: we may disclose information if required by law, court order, or to protect the rights, property, or safety of Popup Bits, our users, or the public.
• Business transfers: if Popup Bits is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. International data transfers

Some of our service providers, including Appwrite Cloud and Google Maps, may process your data on servers located outside Nepal. Where this happens, we rely on the providers' standard contractual protections to ensure your information is treated consistently with this Policy.

7. Data retention

We retain your account information for as long as your account is active. When you delete your account, we deactivate it immediately and permanently delete the associated personal data within 30 days, except where we are required to retain certain records for legal, tax, or anti-fraud purposes.

Listings you have published may be retained in anonymised or aggregated form for analytics and to preserve the integrity of past communications between users.

8. Your rights and choices

You have the following rights regarding your personal information:

• Access and correction: view and update most of your information from the Profile screen in the app.
• Deletion: delete your account at any time. Use the in-app option (Profile → Delete Account) or visit bhadama.app/delete-account on the web.
• Withdraw consent: revoke location or notification permissions in your device settings at any time.
• Complain: if you believe your privacy rights have been violated, contact us first at info@popupbits.com. You may also file a complaint with the relevant authority in Nepal.

9. Security

We use industry-standard safeguards, including TLS encryption in transit, salted password hashing, access controls, and audit logs. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we learn of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

10. Children's privacy

Bhadama is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us at info@popupbits.com and we will delete it promptly.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will notify you in the app or by email and update the effective date above. Continued use of the Service after the changes take effect constitutes acceptance of the revised Policy.

12. Contact us

If you have questions about this Policy or our data practices, contact us at:

Popup Bits Pvt. Ltd.
Gaurighat 8, Kathmandu, Nepal
Email: info@popupbits.com