aspaas

Privacy Policy

Last updated: 28 October 2026

Who we are

aspaas is a local business directory app operated by SoftUs Infotech, Surat, Gujarat, India. Contact: contact@softusinfotech.com.

Information we collect

• Phone number — to create your account and sign you in (via Firebase Authentication, Google LLC). One number can hold a customer account and a shop owner account.
• Name — optional, only if you add it to your profile.
• Location — your device's precise or approximate location, only while the app is open, used to find shops near you. It is not collected in the background and is not stored with your account. Our servers keep short-lived request logs for security and troubleshooting, and these can include the location of a search.
• Business information — name, address, contact details, hours, photos and other details you choose to submit for a listing.
• Photos — only images you choose with the Android photo picker or take with your phone's camera app. The app does not request camera or storage permissions.
• On-device data — kept only on your phone: your saved shops, recent searches, parchi (shopping lists), street passport stamps, a log of the shops you open most (used to personalise your morning note), the shop alerts you set, and your last place and street, so the app can show them when you are offline. To refresh your saved shops the app sends us only their shop IDs, never your position. You can clear these in Profile → On this phone, and all of it is removed when you clear the app's data or uninstall the app. aspaas includes no analytics SDKs.
• Notifications — morning notes, closing reminders and opening alerts are planned on your phone from the shops' listed hours, and are off until you turn them on. "Remind me" and "Add to contacts" hand an entry to your phone's own calendar or contacts app; aspaas does not read your calendar or contacts.
• Push token — while you are signed in, the app sends us a push token (a device identifier from Firebase Cloud Messaging), used only to tell you about your own listings, such as when one has been reviewed. These are never sent at night: a decision made between 10 PM and 7 AM (India time) reaches you at 8 AM. The token is deleted when you sign out or delete your account.
• Anonymous shop counts — when someone opens a shop, taps Call, Directions, WhatsApp, Share or Save, or answers whether it was open when they went, we add one to that shop's count for the week so its owner can see how many people found them; these counts are not linked to you, and no name, phone number, device ID or IP address is stored with them.
• Sign-in checks and app identifiers — Firebase creates an installation ID for the app, and during sign-in Firebase Authentication uses your IP address and Google Play Integrity / reCAPTCHA checks to prevent abuse.

How we use it

To sign you in, show businesses near you, publish listings after review, handle reports about listings, and keep the service secure (for example rate limiting and fraud prevention). We do not sell personal information.

Service providers

Firebase (Google LLC) for phone sign-in, app configuration and push notifications; Google Maps Platform for maps and address lookup when you place a pin; OpenStreetMap Nominatim, only when our own list of areas cannot name your area; Cloudinary, which still serves some photos uploaded before we began storing photos on our own servers; and our cloud hosting and database providers to store accounts, listings and photos.

Advertising

aspaas shows no ads at present and does not use your device's advertising ID. If that changes, we will update this policy first.

Public information

Listings are reviewed before they become public, and anyone can report a listing from its page in the app (see our Terms of Service). Approved listings are public. Owners choose whether the listing's phone, WhatsApp and exact address are shown; hidden details are never included in public results.

Retention and deletion

We keep account data while your account is active. You can delete your account at any time in the app (Profile → Delete account) or via our account deletion page. This deletes both the customer and the shop owner account on your number, and every listing they own.

Security

All traffic is encrypted with HTTPS. Access to data is limited to what is needed to run the service.

Children

aspaas is meant for adults (18 and over). It is not directed at children and we do not knowingly collect their data.

Changes

We will update this page and its date when the policy changes.