Privacy Policy
Effective date: 1 August 2026
This Privacy Policy explains how Mavinarflow (“we”, “us”) collects, uses, and protects your information when you use the Mavinarflow mobile application (available on Google Play as io.mavinarflow.app), the web application at app.mavinarflow.io, and this website. Mavinarflow is a communication platform that connects small-business service providers with their customers and service providers.
1. Information we collect
Information you provide
- Account and profile data — your name, email address, mobile number, company name, and business address when you register or update your profile.
- Customer and contact records — names, company names, email addresses, phone numbers, and addresses of customers and service providers you add to your account. You are responsible for having the right to share this information with us.
- Job details — job descriptions, schedules, locations, statuses, and confirmations.
- Service evaluations — after a job, the customer may be invited by email to score the work from 1 to 5. This is an internal evaluation shared with the service provider who did the job. It is not a public star rating: Mavinarflow does not publish evaluations, does not display them to other users, and does not combine them into a public score or ranking.
- Messages and photos — the content of chat messages and any photos you attach. Photos are compressed on your device before upload.
- Billing records — records of payments between you and Mavinarflow for use of the platform (transaction amounts, currency, credits, and your account balance). Card details are entered directly with our payment processor and we never receive or store your full card number; we do keep the confirmation our processor returns for each payment, which identifies the card type and its last four digits. Mavinarflow does not process payments between service providers and their customers.
Information collected automatically
- Location data — see the dedicated section below.
- Device identifier — if you enable biometric sign-in, we store an identifier for that device so we can recognise it at your next sign-in. We do not collect your device model, operating system version, or advertising identifier.
- Usage and log data — basic technical logs (such as sign-in events and errors) that help us keep the service secure and reliable.
2. Location data and background location
Prominent disclosure: Mavinarflow collects precise location data, including in the background, only while you have live job tracking switched on. This is used to show your real-time position on a map to the customer of the active job, so they can see when you will arrive. While tracking is active, a persistent notification is shown on your device. Tracking stops when you end it, when the job completes, or automatically after a period of no movement to preserve battery. Location is never collected when tracking is off.
- Location sharing is always opt-in and initiated by you, per job.
- Your position is visible only to the customer of the job being tracked, and only while it is current — the app stops showing it 15 minutes after the last update. It is not visible to any other user, and not to the public.
- We keep only your most recent position for each job; each new update overwrites the previous one, so no history of your movements is built up.
- You can revoke location permission at any time in your device settings; the app remains usable without it (live tracking will simply be unavailable).
3. Camera and photos
With your permission, the app uses your camera and photo library so you can attach photos to job messages (for example, photos of completed work). Photos are only uploaded when you choose to send them, and are shared only with the participants of that conversation.
4. Biometric sign-in
You may optionally enable fingerprint or face unlock to sign in. Biometric verification is performed entirely by your device's operating system; your biometric data never leaves your device and is never transmitted to or stored on our servers. We store sign-in credentials in your device's secure storage to support this feature.
5. Notifications and multi-factor authentication
We send notifications about job activity (new messages, requests, confirmations) via in-app and device notifications, and — according to your preferences — by email or SMS. If you enable multi-factor authentication, we use your email address to deliver a one-time verification code. You can adjust notification preferences in your account settings.
6. How we use your information
- To provide the service: creating and tracking jobs, delivering messages and photos, showing live location during tracked jobs, processing requests and invitations, and maintaining billing records.
- To secure your account: authentication, multi-factor verification, and fraud or abuse prevention (including block/report features).
- To communicate with you: service notifications and, where you have opted in, email or SMS updates.
- To improve the app: diagnosing errors and understanding aggregate usage.
We do not sell your personal information, and we do not use your data for third-party advertising.
7. How your information is shared
| Shared with | What and why |
|---|---|
| Other participants on your jobs | Your name, company name and contact details, your messages, photos and job details are visible to the other people on that job — its customer, and anyone assigned to one of its tasks. During active tracking, your current location is visible to the customer of that job only. Your service evaluations are shared only with the provider who did the job. |
| Payment processor | Square processes payments you make to Mavinarflow. Your card details go to Square directly; we receive back a confirmation record for each payment. |
| Service providers | Trusted infrastructure providers (hosting, email/SMS delivery) that process data on our behalf under confidentiality obligations. |
| Address lookup | When a job is given an address, that address alone is sent to the OpenStreetMap Nominatim service to look up its map coordinates, so the app can show where the job is. Nothing else about the job, the customer or your account is sent with it, and the coordinates we get back are stored against the job. See the OpenStreetMap Foundation privacy policy. |
| Legal requirements | If required by law, regulation, or valid legal process, or to protect the rights and safety of our users and service. |
8. Data retention and deletion
We retain your information while your account is active and as needed to provide the service, comply with legal obligations, and resolve disputes.
You can delete your account from within the app, or by contacting us at the address below. Deletion takes effect after a short delay (currently 24 hours), so that an account closed by mistake can still be recovered. After that it cannot be undone.
When deletion runs, we erase:
- your name, email address, mobile number, company name, business address and password;
- your saved settings, your notifications, and any device identifier stored for biometric sign-in;
- your stored location for every job you ran;
- the invitations you sent, including the contact details they held for the people you invited;
- any job on which you were the only participant, together with its tasks, messages and photos — including the underlying image files.
Some information is kept, and we want to be plain about why:
- Jobs you shared with someone else, and the messages and photos in them. A job on Mavinarflow has two or more parties, and the other party's record of work they did or paid for is their information as much as yours — deleting it would erase their history, not just yours. These records stay, but your name and contact details are removed from them: you appear only as "Deleted user".
- Records of payments you made to Mavinarflow. We are required to keep business and tax records for a period set by Australian law. We keep the amount, currency, date and reference of each payment, still linked to your (now anonymous) account. We delete the payment confirmation details that describe you and your card.
- A record that your email address asked not to be contacted, if you had unsubscribed — we need to keep it in order to keep honouring that request.
- Backups. Deletion applies to our live systems. Encrypted backups are kept on a rolling schedule and your data may persist in them until those backups age out.
Where the law gives you a right to erasure that goes further than the above, contact us and we will deal with your request individually.
9. Security
Data is transmitted over encrypted connections (HTTPS/TLS). Passwords are stored only as a one-way hash, never in a readable form, and so are the single-use password-reset links we email. We offer optional multi-factor authentication by email, and device-level biometric sign-in.
Access to personal data through the app is limited to what the service needs to work. There is no administrator account in the app that can browse other people's data, and no user has a privileged view of another user. Every request is checked against the job it concerns: you can read a job's messages and photos only if you are the provider, the customer, or someone assigned to one of its tasks. Contact details are shown to the other people on a job you share; they are not searchable or listed to anyone else. Separately, a small number of our staff can access the systems that store this data in order to operate, support and back up the service.
No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.
10. Children's privacy
Mavinarflow is a business tool and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.
11. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below. You can also update most profile information directly in the app.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date above. Material changes will be communicated through the app or by email.
13. Contact us
Questions, requests, or concerns about privacy? Contact us at admin@mavinarflow.io.
14. Map data
Our maps, and the coordinates we look up from a job address, use data from OpenStreetMap contributors. That data is available under the Open Database License. Maps shown in the app carry the same credit.