Privacy Policy

MR Bike Doctor (“we”, “us”, “our”) operates a two-wheeler service booking platform consisting of the MR Bike Doctor app used by customers to book bike servicing, repairs, and pickup & drop, and the MR Bike Doctor Partner app used by garage/service partners to manage bookings, service jobs, invoices, and payouts (together, the “Platform”).

This Privacy Policy explains what information we collect from users of the Customer App and the Partner App, how we use and protect that information, who we share it with, and the choices you have. By creating an account or using the Platform, you agree to the practices described in this Privacy Policy.

2.1 Account & Profile Information

• Mobile phone number (used to log in via OTP)
• Name, email address (optional), profile photo
• Address, city, state and pincode

2.2 Partner (Garage) Business Information

Service partners onboarding on the Partner App provide additional business and identity details required for verification and payouts:

• Shop/business name, shop contact number, shop address, locality, city, state and pincode
• Owner name, personal phone/email, alternate phone number
• GST number, Aadhaar number, PAN number
• Bank account details for receiving payouts (account number, IFSC, passbook image)
• Shop images and a face-verification photo captured during onboarding

2.3 Vehicle Information

To book a service, customers add their two-wheeler details, including bike name/brand, model, variant, engine capacity (CC), and registration/number plate.

2.4 Location Information

With your permission, we collect precise or approximate GPS location from your device, or an address/pincode you enter manually, to find nearby garages and to coordinate pickup & drop of your vehicle.

2.5 Booking, Service & Payment Information

Service selections, booking status, service date, pickup/drop address, kilometre reading at last service, service notes, invoices/bills, tax amounts, and payment/transaction records (amount, order ID, payment status).

2.6 Referral & Rewards Information

If the referral program is enabled, we store your referral code, codes you enter, and related reward/wallet credit transactions.

2.7 Support & Communication Data

Messages, attachments and ratings/feedback you submit through in-app support tickets or the in-app service assistant, and push-notification delivery status.

2.8 Device & Log Information

Device push-notification token, IP address, approximate location derived from IP, request timestamps, and standard server access logs generated automatically when you use the Platform.

We use the information described above to:

• Create and authenticate your account using OTP-based phone login
• Let customers discover nearby service partners and book bike servicing, repairs, or pickup & drop
• Enable partners to receive, accept, and fulfil bookings and generate invoices
• Process payments and, for partners, settle earnings/payouts
• Send booking, payment, and support-related push notifications
• Verify partner identity, business details and bank details before onboarding
• Provide customer support and respond to tickets and queries
• Operate referral/reward promotions where enabled
• Maintain the security, integrity and reliability of the Platform, and detect fraud or abuse
• Comply with applicable tax, accounting and legal obligations (e.g. retaining invoices)

We do not use your personal information for automated advertising profiling, and we do not sell your personal information to third parties.

Location data is central to how the Platform connects customers with nearby garages:

• The Customer App requests Location/GPS permission to detect your current position and show garages near you.
• We use the Google Maps Geocoding and Places Autocomplete APIs to convert an address you type into map coordinates and to suggest addresses as you type your pickup/drop location.
• Partners’ shop location (latitude/longitude) is stored so customers can find and get directions to the correct garage.
• Location data is used only to power search, pickup & drop coordination, and service-area logic. You can disable location permission from your device settings at any time, though some search and pickup features may not work without it.

Vehicle details (make, model, variant, engine CC, and registration number) are linked to your customer account and used to recommend the correct services, maintain a service history for each bike, and pre-fill details on future bookings. Registration numbers are also used to prevent duplicate/fraudulent bike records on the Platform.

When you create a booking we record the selected services, additional services, assigned partner, pickup & drop details, service date, status changes (e.g. pending, confirmed, completed, cancelled), and the resulting bill/invoice. Booking status changes are pushed to the Customer App and Partner App in real time (via WebSocket/Socket.IO connections and push notifications) so both sides stay updated on acceptance, rejection, pickup, and completion of a job. Completed bookings and their invoices form your service history, viewable in-app.

Payments on the Platform are processed through Razorpay and Cashfree Payments (including Cashfree UPI QR collections), both licensed and PCI-DSS compliant payment gateways in India.

• We do not store your full card number, CVV, or UPI PIN — these are captured directly by the payment gateway.
• We store transaction-level records such as order ID, amount, payment status, and payment method, so we can reconcile bookings, generate invoices, and process refunds.
• Partner earnings are settled and tracked through a wallet ledger (credits, debits, and payout status), with payouts to partner bank accounts processed via Cashfree Payouts.

We use Firebase Cloud Messaging (FCM) to send push notifications to the Customer App and Partner App, such as booking confirmations, status updates, payment confirmations, support ticket replies, and (where enabled) offers and promotions. Your device’s push token is stored against your account so notifications can be delivered to your device. You can control notification delivery through your device’s notification settings; disabling the Notification permission will stop push notifications but will not affect your ability to view updates inside the app.

Photos and documents you choose to upload are used strictly for the purpose they were collected for:

Uploaded images and documents are stored securely in a private AWS S3 bucket. KYC documents (Aadhaar, PAN, bank passbook) submitted by partners are processed using Azure Form Recognizer (OCR) to automatically extract text such as name and document numbers, which speeds up admin verification — this extraction is used only for onboarding verification and is not used for any other purpose.

Camera and Gallery/Storage permissions are requested on your device only when you choose to take or select a photo (e.g. profile photo, shop photo, KYC document, or a support attachment) — we do not access your camera or photo library at any other time.

We share information only as necessary to operate the Platform:

• Between customers and partners: booking details, pickup address, contact number, and vehicle details are shared with the assigned service partner so they can carry out the service, and completed job details are shared back to the customer.
• Service providers we use to operate the Platform: Twilio (OTP/SMS delivery), Firebase/Google (push notifications and backend infrastructure), Google Maps (location and address search), Razorpay and Cashfree Payments (payment processing and partner payouts), AWS S3 (secure file storage), and Microsoft Azure (Form Recognizer OCR and Azure OpenAI for KYC document processing and the in-app service assistant).
• Legal & safety: where required to comply with law, enforce our terms, or protect the rights, property or safety of MR Bike Doctor, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy continuing to apply to your information.

We do not sell your personal information to third parties.

• All data in transit between the app and our servers is encrypted using HTTPS/TLS.
• Passwords, where used, are hashed; account access uses signed authentication tokens (JWT) with limited validity.
• Uploaded images and KYC documents are stored in access-controlled AWS S3 storage, not publicly listable.
• OTPs are time-limited, single-use, and verified using a cryptographically signed hash rather than being stored in plain text.
• Access to partner KYC and bank details is restricted to authorized admin roles for verification and payout purposes.

No method of transmission or storage is 100% secure; while we work to protect your information, we cannot guarantee absolute security.

We retain personal information for as long as your account is active and as needed to provide the Platform’s services. Booking records, invoices and payment transaction records are retained for the period required under applicable tax and accounting laws, even after account deletion. Partner KYC documents are retained for as long as the partner is onboarded on the Platform and for a reasonable period afterwards to meet compliance and dispute-resolution needs, after which they are securely deleted.

You may, at any time:

• Access and update your profile, vehicle, and address information from within the app
• Withdraw Location, Camera, Gallery/Storage or Notification permissions from your device settings
• Opt out of promotional push notifications while continuing to receive transactional ones (booking/payment updates)
• Request a copy of the personal information we hold about you
• Request correction of inaccurate information or deletion of your account, as described below

To exercise any of these rights, contact us at support@mrbikedoctor.com.

You can request deletion of your MR Bike Doctor customer or partner account by emailing support@mrbikedoctor.com from your registered email address or by contacting in-app support with your registered phone number. Once verified, we will delete your profile, saved vehicles, saved addresses and device tokens from active systems.

Certain records — such as completed booking history, invoices, payment transactions and partner KYC/payout records — may be retained for a limited period after deletion where required for tax, accounting, fraud-prevention or legal compliance purposes, after which they are permanently removed. See the full Account Deletion page for step-by-step instructions.

The Platform is intended for use by individuals who are at least 18 years old, as booking vehicle servicing requires vehicle ownership/registration details. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal requirements. When we make material changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out:

Email: support@mrbikedoctor.com · Or visit the Contact page.