Privacy Policy

About this policy

whozyo is the app behind WhoIsYourMechanic. It helps people in Nepal find a trusted mechanic or other local provider, agree the work in a chat, attach photographic evidence, record what was paid, and leave a review. This policy covers the WhoIsYourMechanic mobile app and this website.

This policy describes the app as it is built today, not as it is intended to become. Where something is not built, or is built but switched off, the policy says so. whozyo is in a testing phase in Nepal, and this page is revised whenever the software changes what it does with your information.

What whozyo stores

• Your sign-in. The app has two doors and you use one. With the email door, whozyo stores your email address and a scrambled form of your password — never the password itself. With the phone door, whozyo stores your phone number as the record of which account is yours. Sign-in with Google or Apple is not available.
• Your profile. The display name you choose and an optional handle. whozyo has no profile photo and no field for your address, your area, or your date of birth.
• Things you register. Details you type about a vehicle or other item — such as make, model, year, or plate — and a photo if you attach one.
• Messages and evidence. The messages you send in a job thread, and the photographs and voice notes you attach to it. whozyo accepts images and audio only; it does not accept video or document files.
• Jobs, quotes, bills, and payment records. The quotes, bills, line items, tabs, and payments that you and the other person record, and the receipt once a payment is confirmed.
• Reviews and ratings. The rating and comment you leave after a job, and those left about you.

What whozyo does not collect

• Your location. The app asks for no location permission, contains no map or GPS feature, and there is no field anywhere in whozyo that records where you are. See the note on photographs below, which is the one real exception.
• Your contacts. whozyo never reads your address book. It asks for no contacts permission.
• Advertising identifiers. whozyo carries no advertising software, no attribution or install-tracking tool, and no social-media tracking pixel. Your information is not sold and is not used for advertising.
• Your keystrokes or screen. whozyo does not record your screen, does not replay your sessions, and does not automatically capture what you tap or type.

The permissions the app does request are camera, microphone, and access to a photo you pick — each asked for at the moment you use it, and each used only for that purpose.

Photographs and voice notes carry information of their own

A photograph taken on a phone can carry hidden details inside the image file itself — most importantly the GPS coordinates of where it was taken, along with the time and the camera model. A voice note can carry the same: some Android recorders write the location of the recording straight into the audio file.

whozyo removes this information on its servers, before the file is stored. Every photograph and every voice note the app accepts is rewritten with those hidden details stripped out, and the stripped version is the only one kept — no untouched original is held anywhere, so what is served is what was cleaned. Nothing is accepted that cannot be cleaned: file types whose hidden details cannot be reliably removed — iPhone HEIC photographs, and Ogg or WebM recordings — are refused at upload rather than stored as they arrived.

Be clear about what that does and does not reach. Stripping removes the information wrapped around a recording, never what is inside it: the words spoken in a voice note, and whatever is visible in the photograph itself, are untouched — a photograph of your house is still a photograph of your house, and anyone entitled to view it may recognise the place. A recording’s length, and the technical settings a player needs in order to open it, also remain.

One more limit worth stating: this is recent. Photographs uploaded before 11 August 2026, and voice notes uploaded before 12 August 2026, were stored as they arrived, and those older files have not been cleaned up retrospectively.

Who can see what

This is the most important section on the page, because whozyo is a trust product: a reputation only means something if other people can see it. Nothing on whozyo is readable by the open internet — every part of the app requires an account — but “visible” means visible to any signed-in whozyo user, not only to people you have dealt with.

Visible to any signed-in user

• Your display name and handle.
• Your star rating, your number of reviews, your number of completed jobs, and whether your account is verified.
• Anything you list as a service, including its prices and photos.
• The reviews written about you, with the full text and the name of the person who wrote each one. Reviews on whozyo are never anonymous, in either direction: you can see who rated you, and anyone can see what you wrote about someone else.

Visible only to the other person in a job

• Your messages, your photographs and voice notes, and the quotes, bills, and payment records for that job. These are limited to the people in that thread and are not readable by anyone else.

Hiding your name, and what that does not cover

whozyo has a setting that replaces your name with its first and last letter, so “Alok Regmi” reads “A***i”. It is off by default: unless you turn it on, your full name is shown to every signed-in user.

Being straight about its limits, because a half-working privacy setting is worse than none: the setting does not currently apply to search results, to the trust card on your profile, or to reviews you have written — in those three places your full name is still shown. It does not hide your rating, your job count, your verified badge, or your handle, which stay visible by design. This gap is known and is being closed.

Share links

If you send someone a claim or receipt link, that single link opens without a whozyo account and shows the shop name, its rating, the staff name, the amount, and any photograph attached. Treat such a link as readable by whoever receives it.

Analytics and crash reporting

Both are switched off in the app being released. The app contains a product-analytics component and a crash-reporting component, and each is turned on only by a setting supplied when the app is built. Neither setting is supplied. With them unset, no analytics tool starts, no crash reporter starts, and nothing is sent anywhere.

If analytics is ever switched on, this is what the software permits it to send, because these limits are built into the code rather than promised in prose:

• Nothing from your conversations. There is no measurement of messages at all — not their content, not their number.
• No name and no phone number. An account is identified only by its random internal reference, and the code refuses any identifier that is not one.
• No exact money figures. Amounts are only ever recorded as broad ranges.
• A fixed, short list of nine events — the app opening, a screen being viewed, how long a screen took to load, a search being opened or used or abandoned, which kind of service was opened, and a step being refused together with the machine reason code for it. Anything the app tries to record beyond that list is discarded rather than sent.
• No screen or item names. A screen address has every identifying part removed before it is recorded, so a specific job, person, or vehicle cannot be picked out of it.

Two things would be sent by the analytics software itself rather than by that list: the technical details of an error, and a check of whether analytics is meant to be running. Turning analytics on would also mean the company providing it could derive an approximate location from the internet connection the app is using, in the way any web service can. The app itself never sends a location.

Crash reporting, if switched on, sends the technical details of a crash: the error and where in the app it happened. It does not send your messages or your files. This policy is updated before either is turned on.

Where your information is kept, and what leaves the app

Your information is stored in whozyo's own database and its own file storage, on servers whozyo runs. It is not held by an outside service provider, and photographs and voice notes are served through whozyo rather than from a public file address — every request for one is checked against whether you are entitled to see it.

Today, nothing about you is sent to any outside company. There is no advertising network, no data broker, no analytics service receiving anything, and no third-party service that processes your photographs. The app is built so that this remains checkable rather than a matter of trust: the software has only three outside connections it is capable of making at all — file storage, analytics, and crash reporting — and the second and third are switched off.

Two things will change this, and this policy will be updated when they do. Sending a one-time code by SMS will require passing your phone number to an SMS company, and that is not connected yet — which is why a code does not currently arrive. Notifications sent to your phone are not built at all; whozyo has no push notifications today and stores no device token for them.

Payments do not pass through whozyo. A payment QR code is an image the provider uploaded of their own bank or wallet code; the payment happens directly between the two of you, and whozyo records that it was made. No bank, wallet, or card company receives anything from whozyo.

How long whozyo keeps it

Your information is kept for as long as your account exists. You can delete your account from Settings ▸ Leave whozyo in the app, or by writing to support@whozyo.com.

When you ask whozyo to delete your account, you are hidden from everyone immediately and signed out on every device, and the deletion itself runs 30 days later. Signing in again at any point within those 30 days cancels the deletion and restores your account. The app also offers an immediate deletion that skips the wait entirely. The 30-day period is fixed in the software and the deletion runs automatically. Deletion is refused only while money is still open between you and someone else — an unpaid bill, a held deposit, an unsettled tab, or an open dispute — and where that is the case the app names it before you ask. If you have already asked to leave and an obligation reopens, your request stands and the deletion runs once the last one closes, which can be later than 30 days.

Asking to leave signs you out on every device, so returning means signing in the ordinary way — and that sign-in is itself what cancels the deletion. Once the deletion has run, the account cannot be signed into again and cannot be restored.

Deletion removes your name, your handle, your sign-in, your payment QR codes, your listings, your private notes and lists, identifying details such as a plate or serial number, and the photographs you sent on chats that never became a completed job. What remains is what belongs to somebody else as much as to you: reviews you wrote about other people, settled receipts, evidence attached to a completed job, safety reports, blocks, and the messages already sitting in other people's chats. Deleting your account sets out the exact list and the reason for each item.

One thing that outlasts a deletion

This is stated because a policy that quietly omitted it would be wrong:

• A phone number that has ever requested a sign-in code is kept in a separate record used to stop that number being flooded with codes. Deleting your account does not remove it. It is not linked to your profile and is not used for anything else.

The photographs and voice notes of a deleted account are not on that list. They stop being served immediately, and the files themselves are deleted from storage — right away when you choose to delete now, and otherwise by the sweep that runs when the thirty days are up.

Keeping it safe

Passwords are stored using a slow, modern scrambling method and are never stored or written down in readable form. Sign-in tokens are stored only as a fingerprint on the server, and on your phone they are held in the Android secure keystore. Each part of the database enforces for itself who is allowed to read a row, so a mistake in one screen cannot expose another person's thread.

Two limits worth knowing. whozyo keeps a copy of recent screens on your phone so the app works without a signal; that copy contains names, amounts, and job details and is not separately encrypted, so protect your phone with a screen lock. And whozyo cannot yet verify that an email address belongs to the person entering it, so an email address alone should not be treated as proof of who someone is.

If a security problem affects your information, whozyo will say so on this site and by email where it can reach you.

Your choices

• See and correct your information. Your profile, your jobs, your receipts, and your reviews are all readable in the app, and your profile is editable there.
• Hide your name. The setting described above, with the limits described above.
• Take a break instead of deleting. This hides you from everyone and stops new work reaching you while keeping your record intact. It is reversible in one tap and is never refused.
• Delete your account. In the app, or by writing to support@whozyo.com. See Delete your account.
• Download your information. Not available. whozyo has no export feature, so your record can be read in the app but cannot be taken away as a file. This is stated plainly rather than left to be discovered after an account is deleted.
• Turn analytics off. There is no such setting, because there is nothing to turn off — analytics is not running. A control will be added before that changes.

whozyo also has no password-reset feature yet. If you sign in with an email address and forget the password, write to support@whozyo.com.

Children

WhoIsYourMechanic is not intended for children under 13, and whozyo does not knowingly collect information from them. If you believe a child has created an account, write to support@whozyo.com and it will be removed.

Changes to this policy

This policy changes when the app changes. The Last updated date above is revised each time. Where a change means whozyo starts collecting something it did not collect before — analytics, notifications, or SMS delivery among them — this page is updated before that change reaches you.

Contact

For any question or request about your information, write to support@whozyo.com.

whozyo · Lalitpur, Nepal. The app is launched in Nepal and the laws of Nepal apply.

Related: Delete your account · Terms of Service · Support