LocalBroLocalBro

Privacy Policy

Last updated: June 2026

1. Who we are

LocalBro is an Android application operated by Varulyon AI LLP. The app helps people in towns and villages across India coordinate everyday local needs such as transport, farming support, skilled work, daily-wage work, local business orders, appointments, classifieds, local jobs, locality contacts, and emergency-willing community help.

LocalBro helps users discover, request, offer, and communicate about local services and opportunities. We are a local coordination platform, not an employer, contractor, dispatcher, payment processor, ambulance service, police service, fire service, or government emergency service.

We do not employ providers, we do not guarantee provider availability, we do not dispatch ambulance, police, fire, or government emergency services, and we do not process payments.

This policy is governed by India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and applies to all users of LocalBro.

2. What this policy covers

This policy applies to:

  • the LocalBro Android app installed on your device,
  • our backend services that power the app,
  • the SMS, WhatsApp, IVR, and phone-call communications we send or route on your behalf,
  • our admin tools used by authorized operations staff and approved local representatives to review, verify, moderate, and maintain local information, provider profiles, posts, jobs, requests, and other platform content,
  • the public web pages we operate under varulyon.ai (including the account-deletion page).

It does not cover any third-party app, service, or website you reach through LocalBro. Once a phone call connects you to another person, what happens on that call is between you and them.

3. Data we collect

3.1 Information you give us when you sign up

  • Phone number (mobile, India). Required. Used as your account identifier and to send you a one-time password (OTP).
  • Preferred language. Your chosen supported Indian language.
  • Role(s). Consumer, provider, local representative, or a mix.
  • Home town/place (optional) and gender (optional — used only to surface women-led labour groups when relevant).
  • Saved addresses (optional). Addresses you choose to save — such as your home, or a location for a business you run — including any point you pin on the map. Used to help coordinate your own deliveries and appointments. You can add, edit, or remove them at any time, and the app works fully without them.
  • Profile photo (optional).
  • Referral code (optional).

3.2 Information you give us when you offer a service, work, product, job, or local help

  • Display name and contact channel preference.
  • Service details: categories, service area, indicative price, emergency rate (if opted in).
  • Group details (for labour groups): group name, size, women-led status (optional, opt-in). We never collect group members' phone numbers other than the leader.
  • Offerings catalog (optional, businesses): each offering's label, pricing, an optional note or short voice note, and the sections you group them under.
  • A timestamped consent record.
  • Age and eligibility verification, where required. For certain higher-risk roles or actions — such as labour-related work, emergency-willing participation, local representative access, repeated job posting, or other sensitive platform activity — we may use a third-party verification provider to confirm age or eligibility. LocalBro does not collect or store Aadhaar numbers, Aadhaar card images, biometrics, or full identity documents. We store only the minimum verification result needed for safety and eligibility checks, such as verification status, whether the person is 18 or older, age band, gender where consented, verification method, timestamp, consent version, and provider reference ID.

Assisted onboarding. An approved local representative may set up your profile on your behalf — for example, if you have a basic phone — but only after a one-time password sent to your phone number is verified. The same data handling and rights in this policy apply.

3.3 Information we generate as you use the app

  • Tap-to-call events. We record that a call was initiated but do not record the call itself.
  • Availability signals. Daily-decaying "available today" markers.
  • Paid-price reports (optional). What you paid or received — no money moves through the app.
  • Voice reviews (optional). Short audio reviews that may be checked for safety, quality, and policy compliance.
  • Enquiries. When you contact a provider, business, job poster, classifieds poster, or local contact through the app, we may record the enquiry so the relevant users can keep track of the interaction.
  • Classifieds posts and business promotions (optional). Free text and a single optional image or audio clip.
  • Order and appointment requests to local businesses (optional). For an order: a note, an optional list photo or voice note, and your preferred pickup time. For an appointment: the time you propose and, if you pick the "business comes to me" option, a visit address you type in — revealed only to that one business. We do not read this address from your device. Private to you and that business — no money moves through the app.
  • My Village contact nominations (optional). If you nominate a missing locality contact for your area, we record the details you submit and that you submitted them. A nomination is reviewed by our team or an approved local representative before it appears in the app.
  • LocalJobs data (optional). Job postings you create; job applications you send; saved job alerts; and an optional job-seeker profile (education, experience, preferred categories, and an optional résumé or short voice intro).
  • Personal emergency contacts (optional). The name and phone number of people you choose to add — used only to alert them when you trigger SOS. You type these in yourself; we never read your phone's contact book.
  • Private logbook entries (provider, optional). A private job journal — text or a short voice note and an amount. Visible only to you; never shown to consumers.
  • Notifications and your per-category notification preferences.
  • Emergency SOS events. Trigger, place, broadcast hops, responder acknowledgements, and closure.

3.4 Information your device gives us

  • App installation ID and FCM token (push notifications).
  • App version, OS version, and broad device model.
  • Approximate locale (to suggest a language on first run).
  • Coarse network state (online / offline).

3.5 Information we do NOT collect

  • SMS or call logs.
  • Precise GPS location continuously in the background. (Listings are ordered by locality-to-locality distance, not live tracking.)
  • Your device's contacts list. We never read your phone book — emergency contacts are the ones you type in yourself.
  • Videos. We accept only the media you explicitly attach — a profile photo, a classifieds/business image or audio clip, an order list photo or voice note, and job-related voice or résumé files — never video.
  • Biometric data, financial account data, or government IDs.
  • Aadhaar numbers or Aadhaar card images. Where age or eligibility verification is required, we use a third-party provider and store only the verification result — never your Aadhaar number or card image.

4. Who we share data with

We share the minimum necessary data with the following third parties to operate the service:

  • MSG91 (India) — SMS, WhatsApp, and IVR communications.
  • Google Firebase Cloud Messaging — push notifications.
  • Cloudflare R2 — media storage (voice reviews and other audio, images, and document files you attach).
  • DigitalOcean — application hosting (Bangalore, India).
  • Sentry — crash reports (no phone numbers).
  • KYC / eligibility verification provider — used only where age or eligibility verification is required for selected higher-risk roles or actions. LocalBro stores only the verification result and does not store Aadhaar numbers or Aadhaar card images.
  • Google Analytics — anonymous website usage statistics (such as which pages are visited) on varulyon.ai only. It is loaded only after you accept analytics cookies in the website banner; if you decline, no analytics cookies are set.

We do not sell your data. We do not share with advertisers. We do not use your data to train external AI models.

5. Voice reviews and aggregated data

If you record a voice review with consent, we may use it to display on the relevant provider or business profile, improve speech recognition for supported Indian languages, and build aggregate pricing insights. You may withdraw consent at any time by contacting us.

Improving local map accuracy from saved addresses. When you save an address and pin it on the map, we may use its approximate location — combined in aggregate with pins from other people in the same village or town — to improve the map coordinates we hold for that place, so nearby-first search works better for everyone. This use is aggregate and anonymized: we derive only a general centre-point for a village or town, and only once enough different people have pinned there, and we never publish, share, or show any individual's saved address or exact pin to anyone else. A business address you choose to make public is shown on that business's public profile so customers can find you; your personal saved addresses are always private to you.

6. Emergency SOS — important notice

The Emergency SOS surface is not an emergency service. It does not replace 108. It is best-effort community alerting. See our full Emergency Disclaimer.

7. Data retention after account deletion

  • Phone number: hashed-only for up to 90 days, then deleted.
  • Provider profile, offerings, and public posts: deactivated immediately, removed from public view immediately, and deleted or anonymized within 30 days.
  • Order & appointment requests: deleted or anonymized within 30 days; any visit address you entered is removed.
  • Classifieds, jobs & applications: removed within 30 days; job-seeker profile and emergency contacts deleted on account deletion.
  • Voice reviews: removed from listings immediately; audio retained for safety review and dispute history for up to 180 days.
  • Tap-to-call / communication events: deleted or anonymized within 30 days.
  • Paid-price reports: anonymized within 30 days; aggregate insights may be retained.
  • Emergency / help request records: anonymized where possible and retained for up to 7 years for safety, dispute-resolution, abuse-prevention, and legal-compliance purposes.
  • Age / eligibility verification result: retained while the verified role or account remains active, and for up to 180 days after deletion, unless a longer period is needed for safety, abuse-prevention, dispute-resolution, or legal-compliance purposes.
  • Sensitive-operation audit logs: retained for up to 7 years for security, abuse-prevention, and legal-compliance purposes.

8. Your rights

Under the DPDP Act 2023, you may:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Delete your account and linked personal data (subject to retention windows in §7).
  • Withdraw any consent you previously gave.
  • Nominate another person to exercise these rights on your behalf.
  • Lodge a grievance with us or with the Data Protection Board of India.

How to exercise: In the app: Settings → Account → Delete my account. If you've lost access to your device, visit varulyon.ai/localbro/delete-account. We respond within 30 days.

9. User-generated content

Voice reviews are governed by our Acceptable Use Policy.

10. Children

LocalBro is intended for users 18 years and older. We do not knowingly collect data from anyone under 18. Contact us immediately at [email protected] if you believe we have.

11. Grievance Officer

In line with India's DPDP Act 2023 and the Information Technology (Intermediary Guidelines) Rules, you can reach our Grievance Officer for any complaint about your data or content on the platform:

Grievance Officer, Varulyon AI LLP
[email protected]

The Grievance Officer acknowledges complaints within 15 days of receipt.

12. Security

We protect your data with:

  • TLS in transit.
  • Encryption at rest on our database and storage.
  • Hashed-only OTP storage.
  • Phone-number masking in application logs.
  • Immutable audit logs for sensitive operations.
  • Role-based access control for ops.

13. Changes to this policy

We may update this policy. Material changes will be notified in the app and, where reasonable, by SMS in your preferred language.

14. Contact us

Operator: Varulyon AI LLP
Support: [email protected]
Privacy / grievance contact: [email protected]
Country: India