Privacy policy · MS Care

In short. We collect what we need to register your appliances, track their warranties and get them serviced. We do not sell your data, we do not show you advertising, and we do not use your bills or appliance details for anything else. You can delete your account from the app at any time.

1. Who we are

The MS Care app and this website are operated by MS CARE, Ranebennur, Haveri district, Karnataka 581115, India (“MS CARE”, “we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), MS CARE, Ranebennur is the data fiduciary: we decide why and how your personal data is processed, and we are responsible for it.

This policy is published under the DPDP Act, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Questions about it go to muhaimeen@mscare.in.

2. The personal data we collect

Information you give us

Account details — your name, email address and password. You sign in with your email address and password. Your password is stored only as a one-way hash; we cannot read it.
Mobile number — a contact number so that a technician or our support team can reach you about a booking. It is not used to sign in, and we do not send you SMS messages or one-time passwords.
Profile photo — only if you choose to add one.
Service addresses — the address and PIN code where an appliance is installed, so a visit can be arranged.
Appliance details — brand, category, model, serial number, purchase date and seller, as you enter them or as they are read from your bill.
Purchase bills and photos — the bill or invoice images and PDFs you upload, and photos of the appliance’s serial plate. A bill may show the seller’s details, the price you paid and your billing address.
Service, installation and uninstallation requests — the problem you describe, the visit you book, and the progress and outcome of the request.
Support chat — the messages, photos and voice notes you send to our support team, and their replies.

Information collected when you use the app

Location (optional) — if you tap the option to use your current location while adding an address, the app reads your device’s location once, with your permission, and your phone’s built-in geocoding service turns it into an address for you to check. The map point is saved with that address. We do not track your location in the background, and you can always type an address instead.
Push notification token — an identifier issued by Google Firebase Cloud Messaging that lets us send notifications to your device, with the device platform and when it was last seen.
Technical records — server logs of requests made to our systems (such as the time, the IP address and the action taken), kept for security and to investigate faults.

App permissions

Camera and photos — to photograph or pick a bill, a serial plate or a fault. Only the images you choose are uploaded.
Microphone — only while you record a voice note in support chat.
Location — only when you ask the app to fill in an address from where you are.
Notifications — to tell you about your requests, warranty reminders and support replies.

You can refuse or withdraw any of these permissions in your phone’s settings. The rest of the app keeps working; only the feature that needs that permission will not.

What we do not collect

We do not collect your contacts, call logs, SMS messages, advertising identifiers or browsing history, and the app contains no advertising or analytics trackers. We never receive your card, UPI or bank credentials. Please do not send us government ID numbers, Aadhaar, health or financial details; we do not need them.

3. Why we use it

We process your personal data on the basis of the consent you give when you create an account and use the features above, and, where the law allows, for legitimate uses such as complying with the law. We use it to:

create, secure and run your account;
read your bill, record your appliance and work out its warranty period from the purchase date;
book repairs, installations and uninstallations, and pass them to the right authorised service centre;
send you updates on your requests, warranty reminders and replies from support;
answer your support messages and handle complaints;
process a payment, if you make one, and keep the records the law requires; and
keep the service secure, prevent fraud and misuse, and meet our legal obligations.

We do not sell or rent your personal data, and we do not use it for advertising or share it with anyone for their own marketing.

4. How your bills are read

When you upload a bill, it is read automatically with optical character recognition (OCR) running on our cloud provider, to pick out the purchase date, seller and appliance details. What was read is shown to you to check and correct before it is saved, and our team may review a bill before the appliance is marked verified. A warranty decision is never made by automation alone.

5. Who we share it with

We share personal data only as needed to provide the service:

Manufacturers’ authorised service centres — when you book a repair, installation or uninstallation, we pass the centre what it needs to attend: your name, mobile number, service address, the appliance details and the problem, and where relevant your bill as proof of purchase. The centre handles that information under its own and the manufacturer’s privacy policies.
Cloudflare, Inc. — hosts our servers, database and file storage (Cloudflare Workers, D1 and R2), and runs the bill-reading OCR.
Google LLC (Firebase Cloud Messaging) — delivers push notifications to your device using your push token and the notification text.
Razorpay Software Private Limited — processes any payment you make. Razorpay collects your payment details directly; we receive only the payment reference, amount and status.
Authorities — where we are required to by law, by a court order or by a lawful request from a government agency.

Our service providers process data only on our instructions and only to provide their service to us. If MS CARE’s business is ever transferred, your data would move with it under the same protections, and we would tell you first.

6. Where your data is stored

Your data is stored with Cloudflare and processed through Google Firebase. Both operate global networks, so your data may be stored or processed outside India. Any such transfer is made in line with the DPDP Act and will not be made to a country to which the Government of India has restricted transfers.

7. How long we keep it

While your account is open — we keep your account, appliances, bills, requests and chat history so they remain available to you. You can remove a saved address or an appliance at any time.
When you delete your account — you can no longer sign in, and your email address, mobile number and password are removed at once. The rest of your personal data is deleted or anonymised within 30 days, except for the records below. The full detail is on deleting your account and data.
Payment and tax records — kept for up to 8 years, as required by Indian tax and accounting law.
Security logs — kept for one year, to detect and investigate misuse as Indian law requires, and then deleted.
Records needed for an open complaint, claim or legal dispute — kept until it is resolved.

8. Your rights

Under the DPDP Act and other applicable law, you have the right to:

access a summary of the personal data we hold about you and how we use it, and know who we have shared it with;
correct, complete or update it — most of it you can edit yourself in the app;
erase it, by deleting your account or by asking us, unless we must keep it to comply with the law;
withdraw your consent at any time. Withdrawing consent does not affect processing that happened before, and since the app cannot work without the data above, withdrawal means closing your account;
nominate another person to exercise these rights on your behalf if you die or become unable to; and
have a grievance resolved by us, and then by the Data Protection Board of India.

To use any of these rights, email muhaimeen@mscare.in from the email address on your account. We may ask you to confirm your identity before acting on a request.

9. Grievance Officer

If you have a concern or complaint about how your personal data is handled, contact our Grievance Officer:

Muhaimeen, Grievance Officer
MS CARE, Ranebennur, Haveri district, Karnataka 581115, India
Email: muhaimeen@mscare.in

We will acknowledge your grievance promptly and resolve it within one month of receiving it. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. How we protect your data

All traffic between the app, this website and our servers is encrypted in transit. Passwords are stored only as salted hashes. Uploaded bills, photos and voice notes are kept in private storage that can be reached only through your signed-in account or by authorised staff. Staff access is limited to what a task needs, and staff actions are logged. No system is perfectly secure; if a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

11. Children

MS Care is meant for adults. You must be 18 or older to create an account. We do not knowingly collect personal data from anyone under 18; if you believe a child has created an account, email muhaimeen@mscare.in and we will delete it.

12. This website

This website does not use advertising or analytics cookies. It stores your light or dark theme choice in your own browser, which is never sent to us. If you use the contact form, we receive the name, email address, optional mobile number and message you enter, and use them only to reply to you.

13. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change materially affects how we use your personal data, we will also tell you in the app before it takes effect.

14. Contact

MS CARE, Ranebennur, Haveri district, Karnataka 581115, India
Email: muhaimeen@mscare.in