Who we are
HomeHub (the "App") is owned and operated by 42 Wall Private Limited, a company incorporated in India under the Companies Act, 2013 (CIN U74999KA2020PTC131926), with its registered office at A No. 184, K No. 2308, Vibuthipura, K R Puram, Bengaluru 560037 ("HomeHub", "we", "us", "our"). We also operate BrickEZ (brickez.com), the web platform used by banks and housing finance companies to review loan-related information submitted through the App.
This policy is published under the Digital Personal Data Protection Act, 2023 and the rules made under it (together, the "DPDP Law"), the Information Technology Act, 2000 and the rules made under it. In this policy, "you" means the individual using the App.
Scope and our role
This policy covers personal data processed through the HomeHub Android app, the homehub.global website, and communications we send you. Our role depends on the feature you use:
| Feature | Who decides how data is used |
|---|---|
| Construction loan tracking | Your lender (the bank or housing finance company that sanctioned your loan) decides why and how your loan and construction-progress data is processed. HomeHub processes this data on behalf of your lender, under our agreement with them. Your lender's own privacy policy also applies. |
| Your HomeHub account and profile, Spend Book (expense tracker), contractor profiles, floor plans, calculators, Knowledge Center and enquiry forms | HomeHub decides how this data is processed and is responsible for it as a Data Fiduciary under the DPDP Law. |
If you have a question about how your lender uses your loan data, you may contact your lender directly, or write to us and we will help route your request.
Data we collect
Information you give us
| Category | Examples |
|---|---|
| Account | Mobile number (verified by one-time password), whether you are a home owner or contractor, preferred language. |
| Profile | First and last name, email address, alternate number, profile photo, and address details (locality, district, state, pincode). |
| Contractor profile | Company name, services offered, work experience, website, office email, social media links (such as LinkedIn, Instagram, Facebook), and projects with descriptions, budgets, timelines and photos. This information is intended to be shown to other users. |
| Construction progress | Photos and videos of your construction site, the date and time they were taken, and the location where they were taken. |
| Disbursement requests | Requests to your lender for the next loan instalment, the stage of construction claimed, your declarations, and OTP confirmation. |
| Spend Book (expense tracker) | Names and phone numbers of contractors or suppliers you add, transaction amounts, categories, notes, dates and receipt images. |
| Enquiries | Details you submit in a floor-plan or home-loan enquiry form, such as name, mobile number, address, plot size, employment type, income and loan requirement. Where an enquiry form asks for a PAN or Aadhaar number, providing it is optional, and we use it only to process that enquiry. |
| Support | Messages and information you send when you contact us. |
Information we receive from your lender
If you have a construction loan with one of our lender partners, your lender shares loan information with us so that the App can show it to you. This may include your name, mobile number and email, loan number, sanctioned amount and date, disbursement history, branch, property address and location, property and construction details, and the construction plan. We link your App account to your loan by matching your verified mobile number with the number registered with your lender.
Information collected automatically
- Device information: device model, operating system version, app version, a device identifier, and push notification token. On Android 9 and earlier, the device identifier may be your device's IMEI. On newer versions, it is the Android ID.
- Network information: IP address and connection type.
- Location: your device location when you capture or upload progress media, use maps or fill address fields, and when the App is opened or refreshes its notification registration. See Device permissions.
- Usage and diagnostics: screens viewed, features used, app performance and crash reports, collected through Google Firebase Analytics and Crashlytics.
- Session information: login times and session records, kept for security and audit purposes.
We do not collect your bank account, card or UPI details, and the App does not process payments.
Device permissions
The App asks for permissions only when they are needed. You can change them anytime in your device settings. Some features will not work without them.
| Permission | Why we ask for it |
|---|---|
| Location (precise and approximate) | To confirm you are at your property when uploading progress photos and videos, to tag uploads with location, to show maps, and to help fill in address fields. |
| Camera and microphone | To take progress photos and record progress videos (the microphone records the video's audio), and to photograph receipts. |
| Photos, videos and media location | To select and upload existing photos, videos and receipts, including the location stored in them. |
| Contacts | To let you pick a contractor or supplier from your contacts in Spend Book. Your contact list is read on your device only. Only the contacts you select (name and phone number) are saved to our servers. |
| Phone (make calls, phone state) | To let you call a contractor or supplier from Spend Book, and to read a device identifier used to secure your login. |
| Notifications | To send you loan updates, task reminders and service messages. |
| Background upload | To keep uploading large photos and videos if you leave the App. |
How we use your data
- Provide the App: create and secure your account, verify your mobile number, show your loan information, and run Spend Book, calculators, floor plans and other features.
- Construction monitoring for your lender: receive, location-verify and deliver your progress media and disbursement requests to your lender, so they can assess construction progress and decide disbursements.
- Communicate with you: send OTPs, notifications, service messages and replies to your requests, by SMS, email, push notification or phone.
- Respond to enquiries: follow up on floor-plan or home-loan enquiries you submit.
- Safety and fraud prevention: prevent misuse, detect fake or manipulated uploads, protect accounts, and keep audit records.
- Improve the App: understand usage, fix crashes and improve features, using aggregated or de-identified data where possible.
- Legal compliance: meet legal and regulatory obligations, respond to lawful requests from authorities, and establish or defend legal claims.
We do not sell your personal data. We do not use it for third-party advertising, and we do not use it for any purpose unrelated to those described here without telling you and, where required, asking for your consent.
Consent and legal basis
We process your personal data on the basis of:
- Your consent, which you give when you sign up and agree to this policy, when you grant a device permission, or when you submit a form. You can withdraw consent at any time (see Your rights). Withdrawal does not affect processing that already took place. Some features, or loan monitoring by your lender, may stop working once consent is withdrawn.
- Legitimate uses permitted by the DPDP Law, such as data you voluntarily provide for a specific purpose, compliance with law or court orders, and responding to emergencies.
- Your lender's instructions, where we process loan data on your lender's behalf. Your lender is responsible for having a valid basis for that processing.
Where data is stored
Your personal data is stored on servers located in India (Amazon Web Services, Mumbai region). Some service providers, such as Google Firebase, may process limited data, like crash reports, analytics and notification tokens, on servers outside India. Where data is transferred outside India, we do so only as permitted under the DPDP Law, and not to any country restricted by the Government of India.
How long we keep data
We keep personal data only for as long as needed for the purposes in this policy, or as required by law.
| Data | How long |
|---|---|
| Account and profile | While your account is active. Deleted within 90 days of an account deletion request, except where we must keep it by law. |
| Loan data, progress media and disbursement requests | For as long as your lender instructs, usually for the life of the loan plus the record-keeping period your lender must follow under law and banking regulations. After that, it is deleted or returned to the lender. |
| Spend Book records | Until you delete them or your account. |
| Enquiry forms | Up to 12 months after submission, unless the enquiry leads to an ongoing relationship. |
| Logs, session and security records | At least 1 year, as required by the DPDP Law, and generally not more than 3 years. |
| Support communications | Up to 3 years after the issue is resolved. |
Security
We take reasonable security safeguards to protect personal data. These include encrypted connections between the App and our servers, access controls that limit lender staff to their own loans, restricted administrative access, and logging and monitoring of access. No system is completely secure, and we cannot guarantee absolute security.
If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by the DPDP Law. We will explain what happened, its likely impact, and the steps we are taking and you can take.
Please keep your phone and OTPs safe. HomeHub staff will never ask you for your OTP.
Your rights
Under the DPDP Law, you have the right to:
- Access a summary of the personal data we process about you, the processing activities, and the people we have shared it with.
- Correct, complete or update inaccurate or incomplete data. You can edit most profile details directly in the App.
- Erase your personal data when it is no longer needed, unless we must keep it by law.
- Withdraw consent at any time, as easily as you gave it.
- Grievance redressal, by writing to our Grievance Officer.
- Nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any right, email hello@homehub.global from your registered email, or include your registered mobile number. We may verify your identity before acting. For loan data, we will act together with your lender. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Deleting your account
You can ask us to delete your HomeHub account and associated data at any time. See Delete your HomeHub account for steps and details of what is deleted and what we must keep.
Children
The App is meant for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will post the updated version on this page with a new effective date. If the changes are significant, we will also notify you in the App or by SMS or email before they take effect and, where required, ask for your consent again.
Grievance Officer and contact
For any questions, requests or complaints about this policy or your personal data, contact our Grievance Officer. We will acknowledge your complaint within 24 hours and resolve it within 15 days of receipt.