StayKeep Privacy Policy

Last updated 28 September 2026

This policy is published by STAYKEEP (OPC) PRIVATE LIMITED ("StayKeep", "we", "us"), the controller of the personal data described below.

It covers the StayKeep app (guests), the StayKeep Manage app (hosts and staff), and the websites app.staykeep.com, manage.staykeep.com and owner sites on *.staykeep.com. It does not cover staykeep.com itself, which has its own, separate privacy policy.

1. What we collect and why

• Account. Your phone number (sign-in by a one-time code), name, date of birth and gender (asked when you set up your profile), and email (optional, for receipts and notices).
• Bookings and stays. Property, dates, rooms, guests, amounts and notes. The guest register - the names of everyone in the party, nationality and ID details, and photos of identity documents - is collected for the host, because hosts in India must keep a guest register and report foreign guests. ID photos are stored privately and shown only to that property's own staff.
• Location. Precise or approximate device location, only when you allow it. Guests use it to find nearby stays; hosts use it to place their property on the map. It is not kept in your profile.
• Photos and videos. Property photos (hosts), review photos and videos (guests - public with the review), and a profile photo if you set one.
• Audio. Voice notes you record in chat - the microphone is used only while you are recording one.
• Messages. Chat and service requests between guests and the property.
• Reviews. Public ratings and text, shown with the author's name and the month of the stay. Hosts can review guests; other hosts see those reviews without the property name attached.
• Hosts' forwarded OTA emails (Booking.com, Airbnb and similar). Read automatically to create bookings; they contain guest names and stay details. Raw emails are deleted after 180 days.
• Device and usage. Push-notification tokens, an app-generated device ID, and app usage analytics through Google Firebase Analytics, which may use the Android advertising ID for analytics only. We show no ads.
• Crash reports. Firebase Crashlytics, guest app only.
• Payments. The apps themselves take no payments. Hosts pay StayKeep subscriptions only on manage.staykeep.com, through Razorpay - StayKeep does not store card or UPI details. Guests pay the property directly.

2. Who we share it with

• Hosts and their staff - the details needed for your booking.
• Service providers that process data for us, including:
  • Google Cloud (hosting, India region);
  • Cloudflare (web hosting, media storage, email intake);
  • Google Firebase (push, analytics, crash reports) and Google Maps;
  • Meta WhatsApp (delivering sign-in codes);
  • Resend (email);
  • Razorpay (host subscription payments on the web).
• Authorities, when the law requires it.

We do not sell personal data.

3. Retention

We keep your data while your account is active. When we delete your account at your request (see /delete-account):

• Your profile and sign-in sessions are removed.
• Booking, guest-register and invoice records are kept as long as hosts and StayKeep must keep them by law.
• Raw OTA emails are kept for 180 days.

4. Your choices

• Delete your account in the app - Profile → Delete account; see /delete-account.
• Turn off location, camera and microphone in your phone's settings.
• Access or correct your data by emailing us.

5. Children

StayKeep is not directed to children under 16, and we do not knowingly collect their data. If you are under 18, use StayKeep only with the permission of your parent or guardian, who may need to give consent where the law requires it. A property may have its own rules for guests under 18. If we learn that we have collected personal data from a child without the required consent, we delete it: email [email protected].

6. Security

We use encryption in transit (HTTPS), private storage for ID documents with short-lived links, and access limited by role.

7. Changes to this policy

We'll post any changes to this policy on this page.