Draft for legal review. This text is not final and must be approved before launch.
Privacy Policy
Last updated: 27 October 2026
Knocko is a service of [Bacancy legal entity name], [registered address] ("Knocko", "we"). This policy explains what personal data we collect, why, and the choices you have. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.
The short version
- The person who scans your Knocko QR never sees your phone number, and you never see theirs.
- We store your data in India (AWS Mumbai region).
- We never sell your data. We only use it to run Knocko.
- You can download your data or delete your account at any time.
What we collect
If you own a vehicle and sign up: your mobile number, your chosen language, your vehicle number and type, and, if you give them, your name, email, a photo of your RC, emergency details (blood group, allergies) and up to 3 family contacts. We also keep your notification settings and the device details needed to send you alerts.
If you scan a Knocko QR: your mobile number (to stop fake alerts), the reason you chose, and, if you add them, a short note, a photo and your approximate location.
From everyone: basic technical data such as IP address and browser type, used for security and to stop misuse.
Why we use it
- To create your account and log you in with a one time code.
- To make your Knocko QR and pass alerts, replies and masked calls between the owner and the person who scanned.
- In an accident alert, to show the emergency details you chose and to alert your family contacts.
- To prevent spam, fraud and misuse, for example by limiting codes and blocking abusive numbers.
- To send WhatsApp alerts or tips and offers, but only if you ticked those boxes. These are separate choices and start unticked.
How phone numbers stay private
Phone numbers and vehicle numbers are encrypted when stored. Calls between the owner and the person who scanned go through a calling partner that connects both sides with a virtual number, so neither side sees the other's number. A Knocko QR shows only a short code, never your name, number or full vehicle number. People who scan see only your vehicle type and the last 4 digits of the number.
Who we share data with
Only service providers that help us run Knocko, under contracts that require them to protect it: cloud hosting (Amazon Web Services, Mumbai), SMS, WhatsApp, email, push notification and calling partners ([provider names, once chosen]). We share data with authorities only when the law requires it.
How long we keep it
- The scanner's mobile number is kept in readable form only for the call window (30 minutes), then removed.
- Scans, photos and notes are deleted after [number] days.
- Account data is kept while your account is active. When you delete your account we erase it, except what the law requires us to keep.
Your rights
Under the DPDP Act you can:
- Get a summary of your data, or download it from your account.
- Correct or update your data.
- Delete your account and your data.
- Withdraw any consent, such as WhatsApp alerts or offers, at any time. This does not affect what was done before.
- Nominate someone to use these rights for you in case of death or incapacity.
- Complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.
Family contacts
When you add a family contact, we tell them by SMS that they were added and how to opt out.
Children
Knocko is for people aged 18 and over. We do not knowingly collect data from children.
Changes
If we change this policy in a way that matters, we will tell you in the app and ask for your consent again where the law requires it.
Contact
Questions or complaints: our Grievance Officer at grievance@knocko.in. See the Grievance Officer page for details.