Privacy Policy
Last updated: 27 August 2026
Kirayapp is owned and operated by KIAPPEDGE TECHNOLOGIES (OPC) PRIVATE LIMITED ("Kirayapp", "we", "us", or "our"), with its registered office at 16-10-704, Shivanagar, Warangal, Telangana - 506002, India.
Scope and services
This Privacy Policy explains how we process personal data when you use the Kirayapp mobile application, website, account deletion page, property listing, Region Pass access, booking, chat, and related support services.
Information we collect
- Account and profile data: name, verified mobile number, country, state, user type, authentication identifiers, and account status. An email address and profile picture are optional and may be added, changed, or removed through the profile screen.
- Property data: property type, BHK, rent, region, listing status, exact address, coordinates, preferences, descriptions, and property pictures supplied by owners.
- Map location and search data: when you choose the current-location control, Kirayapp requests foreground device location to show your position on the map. When you use map search, the search text, the current visible map area or device location used to improve suggestions, the selected place, and its coordinates are processed to return and display that location.
- Marketplace activity: interests, owner and tenant confirmations, move-in and cancellation events, Region Pass purchases, bookings, and system-generated transaction events.
- Communications: text chat messages and related conversation metadata between owners and tenants.
- Payment records: product, amount, currency, order and transaction references, purchase token, verification and fulfilment status, refunds, reversals, and cashback records. We do not receive or store your card details, CVV, UPI PIN, banking password, or payment OTP.
- Optional cashback payout details: bank-account number and IFSC code, UPI-linked mobile number, and UPI ID that a user voluntarily saves for receiving an applicable Kirayapp cashback. These details are not required to use Kirayapp and do not themselves establish cashback eligibility.
- Technical and security data: IP address, timestamps, request identifiers, application logs, device or app information, crash and diagnostic information, SDK and API-request metadata, app-specific service identifiers, and fraud or abuse indicators. Integrated services such as Google Maps Platform may collect some of this information automatically when their features are used.
How we use information
- authenticate users and maintain account security;
- maintain the user profile and display an optional profile picture or email address where applicable;
- provide property listings, Region Pass access, chats, and booking workflows;
- show your current position when requested and let you search for an area or address and move the map to it;
- process, verify, fulfil, reconcile, refund, and audit purchases;
- verify cashback eligibility and execute, reconcile, support, and audit applicable cashback payouts using the payout destination selected by the eligible user;
- send transactional OTPs, service messages, and support communications;
- prevent fraud, duplicate fulfilment, misuse, and security incidents;
- comply with accounting, taxation, dispute, chargeback, and legal obligations; and
- operate, troubleshoot, and improve Kirayapp.
Mobile-number verification and SMS consent
Kirayapp's current SMS program is limited to transactional one-time passwords (OTPs) requested by a user for login or account-deletion verification. Before an SMS is sent, the user enters an Indian mobile number and deliberately selects Send OTP or Resend OTP. This action requests one Kirayapp verification message for that attempt. Message frequency varies and is ordinarily one message per request. Message and data rates may apply.
- OTP consent applies only to the requested authentication or account-deletion message. It does not enrol the number in marketing, promotional, or recurring SMS.
- Kirayapp does not use purchased, rented, scraped, or third-party contact lists to send OTPs. Users must submit only their own number or a number they are authorised to use.
- Each resend requires another deliberate user action and is subject to cooldown, per-number, daily, and source-IP abuse controls.
- We keep limited request time, source, delivery, and security metadata where needed for rate limiting, delivery troubleshooting, fraud prevention, and compliance. We do not log or retain the plain-text OTP in application logs.
- Mobile numbers and SMS opt-in data are not sold, rented, or shared with third parties for their marketing. They are disclosed only to processors such as Amazon Web Services as necessary to authenticate the user and deliver the requested message, or where disclosure is legally required.
Because an OTP is a one-time message initiated for a specific request, there is no recurring SMS program to cancel. To stop receiving OTPs, do not select Send OTP or Resend OTP. For assistance, contact info@kiappedge.com.
Service providers and disclosure
We use service providers including Amazon Web Services for cloud hosting, authentication, databases, object storage, logs, and SMS delivery; Google Play for Android purchase processing and verification; and Google Maps Platform for map display, current-location presentation, place suggestions, and selected-place details where those features are used. Map searches and the map or device coordinates used to bias results may therefore be processed by Google under Google's applicable terms and privacy practices. Google Maps Platform may also automatically process device and SDK metadata, IP address, request metadata, crash metrics, and an app-specific Google Maps Platform SDK identifier to provide, secure, maintain, and improve its services. When an eligible cashback is paid, limited payout details may be provided to a bank, UPI participant, payment or payout processor, or authorised Kirayapp personnel only as necessary to verify and execute the payout, reconcile it, prevent fraud, or resolve a payout issue. These providers process data under their own terms and applicable legal obligations. We may also disclose information when required by law, to protect users or Kirayapp, or to investigate fraud and security incidents.
Location choices and retention
Current-location access is optional, requested only while you use the relevant map feature, and is not requested as background location. Denying permission does not prevent you from browsing the map or using location search. You can change location permission later in Android settings.
Kirayapp does not store your current GPS position or your map-search history on its backend for this map navigation feature. The selected result is used to move the map. On the owner map, searching for a place does not select or change a TO-LET location; the owner must still tap the exact property position and confirm it. Property coordinates intentionally submitted while creating a TO-LET remain property data and are retained as described elsewhere in this policy.
Optional profile and cashback information
You can use Kirayapp without providing an email address, profile picture, bank-account number, IFSC code, UPI-linked mobile number, or UPI ID. Optional profile information can be changed or removed in the profile screen. Optional payout details are used only to verify and execute an applicable Kirayapp cashback, reconcile or support that payout, prevent fraud, and meet accounting or legal obligations. Kirayapp does not use these details to initiate debits and will never request a UPI PIN, banking password, card PIN, CVV, or payment OTP in the profile.
Security
We use access controls, encrypted transport, protected cloud storage, audit logs, and other reasonable technical and organisational safeguards. Profile pictures are kept in private object storage and are made available through time-limited authorised access rather than public object URLs. Access to optional payout details is restricted to authorised systems and personnel with a business need. Kirayapp will never ask you to enter a UPI PIN, payment OTP, CVV, card PIN, or banking password in the profile. No electronic transmission or storage method is completely secure.
Account deletion and data retention
How to request deletion
Open your Kirayapp profile menu and select Delete Profile, or visit https://www.kirayapp.com/account-deletion/ directly. The external page does not require you to reinstall or open the app. You must verify the mobile number registered to an active account using an OTP. For help, including when you cannot access the app to complete a required booking action, contact info@kiappedge.com.
Pending owner or tenant actions
If an owner has a property confirmation awaiting the tenant's move-in decision, or a tenant has an owner-confirmed property awaiting the tenant's move-in decision, Kirayapp does not yet accept the deletion request. The deletion page identifies the properties and required actions. The owner must ask the tenant to confirm move-in or cancel the confirmation; the tenant must confirm move-in or cancel the confirmation.
These actions should be completed within 30 days. If they remain unresolved, the account is deactivated and placed on administrative hold for support-led resolution; it is not automatically deleted while the transaction remains unresolved. This protects the other participant where a property handover, advance, refund, or dispute may still be outstanding.
Deactivation and waiting periods
Once a deletion request is accepted, account access is deactivated immediately. Deletion is ordinarily scheduled for 10 days. If the account has cancelled property booking history that may require a longer dispute window, deletion is scheduled for 30 days and Kirayapp may notify the other participant through the existing system chat. A new active confirmation discovered before execution places the request on administrative review rather than deleting it automatically.
Data deleted or irreversibly anonymized
When deletion is completed, Kirayapp:
- deletes the authentication account and removes the profile name, mobile number, email address, optional cashback payout details, authentication identifier, country, state, and user preference;
- deletes the profile picture and its stored object versions;
- deletes owner-uploaded property pictures, including stored object versions;
- removes exact property addresses, coordinates, PIN code, personal preferences, descriptions, and other identifying free text;
- replaces user-authored chat text with “Message removed because the sender deleted their account”, removes the sender link, generalizes system messages, and closes affected conversations;
- withdraws active interests, cancels active Region Pass access, and removes non-completed owner listings from public use; and
- prevents the retained records from being used to restore or identify the deleted account.
Limited records retained
We retain only limited pseudonymous records where reasonably necessary for payment reconciliation, accounting, taxation, approved refunds or cashbacks, chargebacks, dispute handling, fraud prevention, security, legal claims, and regulatory compliance. These may include an internal numeric user reference, payment and reversal history, booking lifecycle, broad non-identifying property attributes such as region and property type, and a minimal deletion-request audit record. They do not retain the deleted profile name, mobile number, email address, bank-account or UPI payout details, authentication identifier, exact address, coordinates, profile or property pictures, or original user chat text.
Pseudonymous payment and linked refund or reversal records are ordinarily retained for up to nine calendar years from the deletion request and are then scheduled for deletion. A specific legal, tax, fraud, chargeback, or dispute hold may require longer retention. Independent records held by Google Play, a bank, or another payment provider are governed by that provider's policies and legal duties and are not controlled by Kirayapp.
Your rights and grievance support
You may request access, correction, or erasure of personal data, or raise a privacy grievance, subject to applicable law and legitimate retention requirements. Contact the person responsible for privacy and grievance enquiries at info@kiappedge.com.
Policy changes
We may update this policy when our services, deletion process, or legal obligations change. The date above identifies the latest version.
Contact
Email: info@kiappedge.com
Registered address: 16-10-704, Shivanagar, Warangal, Telangana - 506002, India