Privacy notice
Last updated: [date]
1. Who we are
[Company name] (business registration number [BRN]), [registered address], Mauritius ("Tonton Fix", "we", "us") runs the Tonton Fix marketplace, which connects customers with independent service providers in Mauritius. We are the controller of the personal data described here. We are registered with the Data Protection Office under number [registration number]. Contact us at [privacy@ email address].
2. The waitlist
If you join our waitlist we collect your email address, whether you are a customer or a service provider, and optionally your area and trade. We also record when you agreed and which version of this notice you saw, and, if you came from one of our ads, a short tag saying which one. We use this only to contact you about Tonton Fix's launch. Our legal basis is your consent, which you can withdraw at any time by emailing us.
We keep waitlist details until we have invited you and for [12 months] after, or until you ask us to delete them, whichever is first.
3. The app: what we collect and why
| Data | Why we need it |
|---|---|
| Account details: email, password (stored only as a secure hash), phone number, full name, home address | To create and secure your account, contact you, and (for providers and customers) support identity checks. |
| Provider profile: business name, profile photo, bio, experience, portfolio photos | To let customers compare providers. A provider's profile photo is public: anyone with its link can view it. Real names are hidden from the other side until payment is secured. |
| Jobs: category, description, address, photos, completion photos and notes for each agreed criterion, repeat schedules, quotes, quote photos, counter-offers, change requests, ratings | To run the marketplace and settle disputes. |
| Messages between customer and provider, including photos and voice notes (up to one minute) | To let you coordinate a paid job. We scan the text of messages for phone numbers and email addresses shared before payment and may flag them for review. Photos and voice notes are not scanned, but either person can report a message. |
| Identity verification: a photo of your ID document, a short live video of your face, and our review decision | To confirm you are a real person before you quote (providers) or pay (customers), and to reduce fraud. |
| Trade licences (providers, optional): a photo of the licence or certificate, what it is for, and our review decision | To show customers a “Licensed” badge once we have checked it. Only the label is shown to customers, never the photo. |
| Payment records: amounts, status, dates [and card or mobile-money details are handled by our payment provider, not stored by us – confirm once chosen] | To process payments, pay providers and keep accounting records. |
| Device push-notification token, notification settings (muted types and quiet hours), notification history, referral codes and credits | To send job and message alerts and run the referral programme. |
| Admin audit log of review and moderation decisions | To keep a record of who approved or rejected what. |
| Disputes: what you report, the photos and notes either side adds, our decision and its reason, and any appeal | To decide problems fairly and keep a record of the decision. Evidence you do not add cannot be used. |
| Support messages: what you write to our team, the job it relates to, and our replies | To answer you and to keep a record of what was agreed. |
| Trusted contact (optional): the name and phone number of someone you choose | To help you send your visit details to that person from the job screen. Only you can see it, and you can remove it at any time. |
| Terms acceptance: which version of the terms you accepted, and when | To show that you agreed to the terms that apply to you. |
| App error reports: an error message, a short technical trace, the screen it happened on, your phone type and app version, and your account id. Email addresses and long numbers are removed before sending | To find and fix bugs. We do not use these reports for advertising. |
Legal bases (to be confirmed by our lawyer): performing our contract with you, our legitimate interest in preventing fraud and keeping the marketplace safe, legal obligations such as tax records, and your consent where we ask for it (for example identity verification and notifications).
4. Who sees your data
- Other users see only what the marketplace needs: a provider's photo, bio, experience and ratings before payment; names and contact details only once payment is secured. Photos you attach to a quote are shown to the customer only after our staff approve them.
- Our staff with a need to review identity documents, photos and disputes. Identity files are kept in private storage and are viewed only through short-lived links by authorised reviewers.
- Service providers that help us run Tonton Fix (processors): Supabase (database, file storage and sign-in, hosted in Ireland), [email provider], [payment provider], and push-notification services [Apple, Google, Expo – confirm]. They may only use your data to provide their service to us.
- We do not sell your personal data.
5. Transfers outside Mauritius
Our database and files are stored in the European Union (Ireland). [Lawyer to confirm the safeguards and any notification required for this transfer under the Data Protection Act 2017.]
6. How long we keep data
[All periods below are proposals for your lawyer to confirm.]
| Data | Kept for |
|---|---|
| ID photo, liveness video and trade licence photo | [30 days after our review decision, then the files are deleted; we keep only the decision and its date] |
| Account, profile, jobs, quotes, messages | While your account is open, then [12 months] unless a dispute or the law requires longer |
| Payment and tax records | [7 years, or as Mauritian tax law requires] |
| App error reports | 60 days, then deleted automatically |
| Support messages and dispute records | [12 months after the request or dispute is closed, or longer if the law requires] |
| Trusted contact | Until you remove it or delete your account |
| Terms acceptance record | [As long as your account is open and for the period the law requires after] |
| Waitlist details | See section 2 |
7. Your rights
You can ask to see your data, correct it, delete it, restrict or object to how we use it, and withdraw consent you gave. You can delete your account from within the app [once the in-app delete option is live] or by emailing us. We will answer within [one month]. You can also complain to the Data Protection Commissioner at the Data Protection Office, Mauritius.
8. Security
We limit who can see data, keep identity files in private storage, and use encrypted connections. If a breach puts your data at risk we will tell the Data Protection Office and, where required, you.
9. Age
Tonton Fix is for people aged 18 and over. We do not knowingly collect data from children.
10. Changes
If we change this notice in a way that matters, we will tell you in the app or by email and update the date above.