Data Safety
RatooTown app (Android, iOS and web) · Developer: Little Ratoons Private Ltd. · Last updated: 25 September 2026
This page summarises what data the RatooTown app collects and shares, why, and how it is protected. It also explains how to delete your account and data. For full details, see our Privacy Policy.
At a glance
- Encrypted in transit All data is sent over HTTPS.
- You can request deletion Delete your account and data at any time.
- No data sold We never sell personal data.
- No third-party ads The app has no advertising SDKs and does not use your advertising ID.
- Guest mode Browse and search without giving any personal data.
1. Data collected
“Collected” means the data leaves your device and is sent to us or to a service provider working for us. Data that stays only on your device (saved listings, recent searches, your settings) is not collected.
| Data type | What exactly | Purpose | Required? | Notes |
|---|---|---|---|---|
| Personal info Phone number |
Your mobile number | Account management; app functionality (login by SMS OTP); fraud prevention and security | Optional Needed only to log in; guests can browse without it |
Recorded with a Call/WhatsApp action only if you choose “Allow” in the “Share your contact?” prompt |
| Personal info Name |
Your name, if you add it to your profile | Account management; personalisation | Optional | Not shared |
| Location Approximate location Precise location |
Your current location, about 100 m accuracy, while you use the app | App functionality (nearby results and distance) | Optional Only with your permission |
Processed ephemerally: used to sort results, not stored, and not sent to analytics |
| App activity App interactions |
Screens viewed; listing views, calls, WhatsApp taps, directions, saves and shares | App functionality (listing engagement counts); analytics | Optional Analytics can be turned off |
Engagement records are deleted after 90 days; only anonymous totals are kept |
| App activity In-app search history |
Search terms, shortened, with anything like a phone number or email removed | Analytics (improving search) | Optional | Not linked to your phone number or name |
| App info and performance Crash logs Diagnostics |
App errors, and failed or slow network requests, with personal data removed | Analytics (reliability and bug fixing) | Optional | Android and iOS apps only |
| Device or other IDs | A random analytics device ID and session ID | Analytics | Optional | Not your advertising ID, IMEI or any hardware ID. IP address collection is turned off for analytics. |
2. Data shared
“Shared” means passed to a third party other than a service provider working on our behalf.
| Data type | Shared with | Why | When |
|---|---|---|---|
| Phone number | The business or vendor you contact | So the business can follow up with you (app functionality) | Only if you choose “Allow” when the app asks “Share your contact?” before a Call or WhatsApp. If you choose “Don't Allow”, it is not shared. |
We also use service providers to run the app. They process data only on our instructions: AWS (hosting, Mumbai region), MSG91 (SMS OTP), Amplitude (analytics), Typesense (search), Cloudinary (listing photos) and Netlify (website hosting). These are listed in the Privacy Policy. Google Play does not count this as “sharing”.
3. Data not collected
The RatooTown app does not collect: email address, contacts, photos or videos, audio, files and documents, calendar events, SMS or call logs, messages, health or fitness data, financial or payment information, web browsing history, installed apps, race, religion, political or sexual orientation data, or government ID numbers.
4. Security practices
- Encrypted in transit. All communication between the app and our servers uses HTTPS (TLS).
- Encrypted at rest. Our database is hosted on AWS with encryption at rest.
- Secure login. We log you in with a one-time password sent by SMS, never with a stored password. Your session is kept in the device's secure storage (Android Keystore / iOS Keychain) and expires after 30 days.
- Abuse protection. OTP requests and wrong attempts are limited.
- Limited access. Only authorised staff can access personal data, and only when they need to.
- Automatic expiry. Contact and engagement records, including any consented phone number, are deleted automatically after 90 days.
5. Your choices
- Use guest mode. Browse and search without logging in or giving any personal data.
- Location. Allow or deny it when asked, or change it later in your phone's settings.
- Contact sharing. Choose “Don't Allow” in the “Share your contact?” prompt to keep your number from being recorded with contact actions.
- Analytics. In the app, go to Profile → “Share anonymous usage data” and switch it off. The app then stops sending analytics.
- Log out. Profile → Logout removes your session from the device, and you return to guest mode.
- Delete your account. See below.
6. Delete your account and data
You can ask Little Ratoons Private Ltd., the developer of the RatooTown app, to delete your RatooTown account and the personal data linked to it. You do not need to have the app installed.
How to request deletion
- Send an email to care@ratooapp.com with the subject “Delete my RatooTown account”.
- Include the mobile number you use to log in to RatooTown.
- To confirm the account is yours, we may send an OTP to that mobile number or call you on it. Please reply with the OTP when asked.
- We will confirm once your account has been deleted, within 30 days of verifying your request.
What is deleted
- Your account and mobile number
- Your profile details (name, town, language)
- Contact and engagement records that include your mobile number
- Your analytics data held by Amplitude, if any
What is kept, and for how long
- Anonymous totals (for example, a listing's total number of views). These contain no personal data and are kept.
- Records the law requires us to keep (for example, for legal claims or requests from authorities), only as long as the law requires.
- Backups and logs may briefly contain your data until they expire, within 90 days.
Delete some data without deleting your account
- Analytics data: switch off “Share anonymous usage data” in Profile. To also delete analytics already collected, email us.
- Contact records: email us to delete records of businesses you contacted. Otherwise they are deleted automatically after 90 days.
- Saved listings and recent searches are stored only on your phone. Clear them by clearing the app's data or uninstalling the app.
7. Contact
Little Ratoons Private Ltd. (Developer of RatooTown) · CIN: U47912TN2025PTC184743
Grievance Officer: M. Hariharan
Address: Door No. 99E, Keelaratha Street, Thiruppuvanam, Sivagangai – 630611, Tamil Nadu, India
Email: care@ratooapp.com
Full details are in our Privacy Policy.