What we collect, and what we do with it.

Written to be read. If anything here is unclear, ask us and we will explain it in plain words.

Last updated 30 July 2026 · Version 2026-07-28 · Applies to mysheher.com and the MySheher app

Who we are

MySheher is operated by Salinur Alom, sole proprietor, trading as MySheher, from Guwahati, Assam, India. Under the Digital Personal Data Protection Act, 2023 he is the Data Fiduciary for everything described here, and also the Grievance Officer.

What we collect from workers

When you create a worker profile you give us the following. The right-hand column is the part that matters most: who can see it.

About your location

If you allow it, we take your coordinates once, so customers nearby see you first. We deliberately round them to about 100 metres before storing them. That is precise enough to rank you by distance and far too coarse to identify the house you live in. You can skip this entirely and still publish a profile — you simply will not be sorted by distance.

Why your number is not simply published

Your WhatsApp number is shown to a customer who is booking you — that is the point of it. It is not readable in bulk: it is handed out one booking at a time, and each request is recorded, so nobody can take a copy of every number on MySheher in one go. Until 27 July 2026 they could, and that has been closed.

About your PIN

Your PIN is never stored as you typed it. We keep only a bcrypt hash, which cannot be reversed back into your PIN. Nobody at MySheher can read it, and neither can anyone who obtains a copy of our database. To stay signed in on your own phone, the app keeps your PIN in that phone's local storage — it never leaves your device except to sign you in.

What we collect from customers

You can search and browse MySheher without giving us anything at all. We ask for details only when you send a booking request: your name, phone number, locality, the service and timing you chose, and any note you write. We record the request so we can help if something goes wrong, and we pass your name and number to that worker so they can reply to you.

Sending a request also needs a customer account, and it holds those same three things and nothing more — name, phone number, locality — plus a 4-digit PIN, stored only as a bcrypt hash and never in a form we can read. No email address, no home address, no date of birth. The account exists so that the details you are about to hand to a stranger are somewhere you can see them, correct them and delete them; it is not a way for us to learn anything further about you, and there is nothing in it that a booking did not already require.

You are never asked to make one to look around. If you would rather not have one, you can still browse every profile, every rate and every review — you simply cannot send a request.

If you let your browser share your location, that stays on your device. It is used to sort workers by distance and is never sent to our servers.

Messages inside MySheher

Booking someone now opens a conversation inside the app rather than pushing you into WhatsApp. That means we hold what you send:

• The messages themselves — what each of you typed, and when.
• The state of the job — requested, accepted, declined, started, finished, cancelled — and the times it changed.
• The customer's name, number and locality, which the worker sees once they accept.

We keep these so a booking has a history: so a worker can show what they have done, so a customer can look back at what was agreed, and so we can look into a complaint about a job. Nobody at MySheher reads a conversation as a matter of course. We open one only when one of you reports a problem with it, or where the law requires it.

A conversation is kept for 12 months after it finishes, on the same clock as any other booking record, and then deleted automatically. Deleting your worker profile deletes your conversations with it.

You can still call or use WhatsApp once a job is accepted — the number is there for exactly that. What happens on WhatsApp is between you and covered by WhatsApp's policy, not ours.

Your MySheher Worker ID

Every worker gets a permanent twelve-digit number and a card they can show or print. Anyone who has the number can look it up and see your name, trade, locality, how long you have been on MySheher, your rating and how many jobs you have finished — the same things already on your public profile, and nothing more. The lookup never returns your phone number, your address or your coordinates.

The card you print for yourself does show your mobile number, because it is your card and it is there so a customer can reach you. What you do with a printed copy is up to you.

The number is yours permanently and does not change if you edit your profile. A number only checks out as valid while your profile is approved and live; delete your profile and it stops resolving to anything.

Reviews

When a job is confirmed finished, the customer can leave a rating and a few words. The review shows your first name only, alongside the service and the date. It is public, because a review nobody can read is not worth writing. We remove reviews that are abusive or untrue.

Only someone whose job actually completed can leave one, and only one per job.

If you report a profile

When you use Report this profile we keep what you chose, what you wrote, and the contact details you gave us if you gave any. The person you reported is never told who reported them. We keep the report while we deal with it, and remove it afterwards.

If you turn on alerts

Both workers and customers can ask to be told about a booking while MySheher is closed. Allowing that gives us a push subscription — an address issued by your own browser, plus two keys that let only us send to it. It identifies a browser, not a person, and it is the only thing we can do with it: we cannot read anything from your phone through it.

A worker's subscription is deleted with their profile. A customer's is tied to the booking it was created for, and goes when that booking does. Turning notifications off in your phone's settings stops them immediately, and the dead address is discarded the next time we try to use it.

What we do not do

• No advertising, and no advertising networks.
• No analytics, no tracking pixels, no tracking cookies. In fact we set no cookies at all.
• We do not sell, rent or trade personal data. Not to anyone, for any price.
• We do not build profiles of you across other websites.
• We do not read conversations for any purpose of our own — not to profile you, not to train anything, not to sell anything. Only when somebody reports a problem with one.
• We do not read your WhatsApp. If you move a conversation there, it is between the two of you.

Who else is involved

Running a website means a few other companies necessarily touch some data. These are all of them:

• Supabase — hosts our database. Profiles and booking records are stored there.
• GitHub Pages — serves the website itself.
• Google Fonts — supplies one of the two typefaces the site uses, the serif in the headings. Your browser fetches it from Google, which means Google can see your IP address when a page loads. The main typeface is now served from our own site, so it no longer involves anybody else.
• WhatsApp (Meta) — carries your booking message. What you send through WhatsApp is covered by WhatsApp's own privacy policy, not ours.

How long we keep things

These are not intentions. A job runs once a day and deletes anything past its period without being asked.

• Your profile — until you delete it. Deletion is immediate and permanent, and takes the photo out of our image storage as well as out of the database.
• A customer account — until you delete it, from My profile in the menu. Same terms: immediate, permanent, nobody's permission needed.
• Booking records — up to 12 months, so we can look into a complaint, then removed.
• Rejected profiles — up to 90 days, so you can appeal or correct and resubmit, then removed.
• Records of who asked for a worker's number — 90 days, then removed. They exist only to stop bulk collection.
• Conversations and their messages — 12 months after the job finishes, then removed.
• Reviews — for as long as the profile exists, because that is the point of them. They go when the profile goes.
• Reports about a profile — until the matter is closed.

Deleting your account

Your rights

Under India's Digital Personal Data Protection Act, 2023, you may:

• Ask what we hold about you, and who we have shared it with.
• Correct anything wrong — you can edit most of it yourself in the app.
• Have it erased — the Delete button above, or ask us.
• Withdraw your consent at any time. For a worker profile, that means deleting it.
• Nominate someone to exercise these rights on your behalf if you are unable to.
• Complain — to our Grievance Officer first, and to the Data Protection Board of India if we do not resolve it.

Write to info@mysheher.com. We acknowledge within 24 hours and resolve within 15 days. If you are not satisfied with the outcome you may complain to the Data Protection Board of India.

The Act also asks something of you: the details you give us should be true, you should not register a profile in someone else's name, and you should not file a complaint you know to be false.

Keeping it safe

Traffic to the site is encrypted with HTTPS. PINs are stored only as bcrypt hashes. Private data — your email, your verification code, your PIN hash — sits in a table with no public read access, and the database is configured so that even a stolen public key cannot reach it. Profile changes are only accepted after your PIN is verified on the server.

We should be honest that no system is perfect. If we ever discover a breach affecting your data, we will tell you and the Data Protection Board, promptly and without being asked.

Children

MySheher is for adults. You must be 18 or older to create a worker profile or book a worker. We do not knowingly collect data from children, and we will delete it immediately if we find we have.

Changes to this policy

MySheher is on an experimental launch and will change as we grow. If we change this policy in a way that materially affects you, we will say so on the site rather than quietly editing the page. The date at the top always tells you when it last changed.

Back to MySheher