Privacy Policy

1. Introduction

Ixora Corporate Services Private Limited ("LooCafe," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website loocafe.com, the LooCafe mobile app (com.loocafe.toiletfinder), or our smart public toilet facilities.

By using our website or facilities, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We may collect information you voluntarily provide, including:

• Contact Information: Name, email address, phone number when you submit inquiries
• Business Information: Organization name, designation, project details for partnership inquiries
• Communication Records: Records of your correspondence with us

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, time spent, referring URL
• IP Address: For security and analytics purposes
• Cookies: Small data files stored on your device (see Cookie Policy below)

2.3 Facility Usage Data

Our smart toilet facilities use IoT sensors to collect anonymous, aggregate data for operational purposes:

• Usage frequency and patterns (foot traffic)
• Cleanliness levels and maintenance needs
• Water and energy consumption
• Air quality and environmental conditions

Important: Our IoT sensors do NOT collect personal identification data, images, audio, or any information that could identify individual users. All facility data is anonymous and aggregated.

3. How We Use Your Information

LooCafe mobile app

The app helps people find facilities and enables authorised staff to manage facility operations. Depending on the features you choose, we process:

• Accounts and profiles: Name, email, account and staff identifiers, profile photo, and an optional phone number you provide, for authentication, account management and support.
• Foreground location: Approximate or precise location, with device permission, for nearby facilities and staff attendance, visits and operational evidence. The app does not request background location access.
• Photos and attachments: Camera photos and individual photos you select through Android system pickers, for profiles, reports and supported operational features. The app does not request broad access to your photo or video library. Staff evidence features may require a newly captured photo.
• Reports and operational records: Feedback, issue descriptions, attachments, reviews, visits, maintenance and payment or rent records entered by authorised staff. Records are associated with the submitting account and relevant facility.
• Device and usage data: Device and notification identifiers, app interactions, crash logs and performance diagnostics, for notifications, reliability, security and service improvement.

Firebase (Google) processes authentication, app records and uploads, notifications, crash and performance data. Google Maps provides maps and location-related services. PostHog processes app interaction events and account identifiers for operational usage analytics. Data is transmitted using encrypted connections. We do not sell mobile-app personal data or use it for advertising.

You can decline or revoke camera, location and notification permissions in device settings; related features may then be unavailable. System pickers grant access only to the media you choose. You can request account and associated-data deletion using the app's account-deletion option or the LooCafe account deletion page, without signing in. Verified requests are normally completed within 30 days. Operational, financial, safety or legal records may be retained where required, as explained on that page.

We use collected information to:

• Respond to your inquiries and provide requested services
• Process partnership and business proposals
• Improve our website, facilities, and services
• Send relevant updates about our services (with your consent)
• Analyze website traffic and user behavior
• Ensure security and prevent fraud
• Comply with legal obligations

4. Legal Basis for Processing (GDPR Compliance)

For visitors from the European Economic Area (EEA), we process personal data based on:

• Consent: When you submit forms or subscribe to communications
• Legitimate Interests: For website analytics, security, and service improvement
• Contractual Necessity: To fulfill partnership agreements and business relationships
• Legal Obligations: To comply with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties who assist in hosting, authentication, data storage, maps, notifications and analytics, including Firebase/Google and PostHog for the mobile app
• Business Partners: Municipal corporations and government bodies for PPP projects (aggregate data only)
• Legal Authorities: When required by law or to protect our rights
• Affiliated Companies: Ixora Group entities for business purposes

We do NOT sell your personal information to third parties.

6. International Data Transfers

Our primary operations are in India. If you access our website from outside India, your information may be transferred to, stored, and processed in India. By using our services, you consent to such transfers.

For EEA residents, we ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses where applicable.

7. Data Retention

We retain your information for as long as necessary to:

• Fulfill the purposes described in this Privacy Policy
• Comply with legal obligations
• Resolve disputes and enforce agreements

Contact form submissions are retained for up to 3 years unless you request deletion. Mobile app records are retained while needed for the purposes described above, subject to account-deletion requests and necessary operational or legal retention. Analytics and diagnostic retention also depends on the settings of the service providers used; contact us for information about your records.

8. Your Rights

8.1 For All Users

You have the right to:

• Request access to your personal information
• Request correction of inaccurate data
• Request deletion of your data
• Opt-out of marketing communications
• Lodge a complaint with relevant authorities

8.2 Additional Rights for EEA Residents (GDPR)

If you are in the European Economic Area, you also have the right to:

• Data portability (receive your data in a structured format)
• Restrict processing of your data
• Object to processing based on legitimate interests
• Withdraw consent at any time

8.3 Exercising Your Rights

To exercise any of these rights, please contact us athello@loocafe.com. We will respond to your request within 30 days.

9. Cookie Policy

Our website uses cookies to enhance your experience:

9.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Preference Cookies: Remember your settings and preferences

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. Most browsers allow you to:

• View what cookies are stored
• Delete all or specific cookies
• Block cookies from specific sites
• Block all cookies

10. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• SSL/TLS encryption for data transmission
• Secure hosting on Cloudflare Pages
• Access controls and authentication
• Regular security assessments

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes may be communicated through our website.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

By using LooCafe's website and facilities, you acknowledge that you have read and understood this Privacy Policy.