Dahuuk, Privacy Policy, Effective Date: July 19, 2026, Platform Covered: Android App, iOS & Web Marketplace

Dahuuk is an on-demand digital marketplace connecting Customers with verified Vendors for local services. Dahuuk does not itself provide the services listed on the Platform; it acts as a technology intermediary that facilitates discovery, booking, communication, and payment between Customers and Vendors.

We collect the following categories of information, depending on whether you register as a Customer or a Vendor:

Customers:

• Full name

• Mobile phone number (used for OTP-based verification and login)

• Saved delivery/service address(es)

Vendors:

• Full name and mobile phone number

• National Identity Card (NID) image or equivalent government-issued document, submitted for mandatory identity verification

• Work-related information: skills, service categories, pricing, and portfolio images

• Permanent and present address details submitted during verification

Vendor identity documents are manually reviewed by our administrative team before an account is approved to offer services on the Platform.

Dahuuk collects device location data to:

• Match Customers with nearby available Vendors

• Calculate accurate distance and service-area eligibility

• Confirm a Vendor's or Customer's arrival at the agreed service location, using a distance-based verification check

Location is accessed only while the app is open and in active use (foreground). We do not track your location in the background or when the app is closed.

To help Customers and Vendors coordinate a service visit (for example, finding an exact address or shop location) without exchanging personal phone numbers, Dahuuk provides an in-app voice calling feature powered by a third-party real-time communication provider (Agora).

When you use this feature, your voice is transmitted through Agora's infrastructure to connect you with the other party. Dahuuk does not record or store the audio content of these calls. We retain only call metadata — such as the order it relates to, call duration, and timestamps — for service quality, dispute resolution, and billing purposes.

Voice calling is only available during specific stages of an active order (for example, while a Vendor is en route or has arrived) and is automatically disabled once it is no longer needed

Dahuuk supports a hybrid payment model. Currently, Cash on Delivery (COD) is the primary payment method upon service completion. The Platform is also built to support integrated digital payment gateways (such as SSLCommerz) and Mobile Financial Services (such as bKash and Nagad) as these integrations are activated.

Dahuuk does not directly collect, store, or process your card numbers, bank account numbers, or MFS PINs. Card and mobile-payment transactions are handled directly by our licensed payment gateway partners. We retain only transaction metadata necessary for bookkeeping — such as order amount, payment status, and commission or withdrawal records.

Camera & Photo Gallery: Accessed only when you choose to upload a profile photo, NID image, or (for Vendors) portfolio/work-sample images. Dahuuk never accesses your camera or gallery without your explicit action.

Notifications: Used to deliver order updates, incoming-call alerts, and account-related messages. You may disable notifications at any time through your device settings, though this may affect your ability to receive timely order or call alerts.

Dahuuk uses the following third-party services to operate and improve the Platform:

• Firebase Cloud Messaging — for delivering push notifications, including order updates and incoming-call alerts

• Firebase Crashlytics — for automated crash and error diagnostics to help us fix technical issues

• Firebase/Google Analytics — for aggregated, anonymized usage insights (e.g., popular categories) to improve user experience

• Agora — for real-time voice call transmission (see Article 5)

• Bulk SMS providers — for delivering OTP verification codes

These providers process data solely to deliver the stated functionality and are contractually restricted from using your data for their own independent purposes.

Our website may use standard browser cookies and local storage to maintain your login session, remember preferences, and improve page-load performance. You can control cookie behavior through your browser settings.

Once an order is confirmed, Dahuuk shares limited contact details — name, phone number, and the service address — between the assigned Customer and Vendor, solely to enable coordination and completion of the booked service. This is the minimum information necessary for the two parties to complete the transaction.

We encourage using the in-app voice calling feature (Article 5) where available, as an additional privacy-preserving option for day-of coordination.

We do not sell, rent, or trade your personal data to third parties for marketing purposes. Beyond the Customer-Vendor exchange described in Article 10, we disclose personal data only:

• To our service providers (payment gateways, cloud hosting, SMS/push notification providers) strictly to operate the Platform

• When required by a valid legal process, court order, or statutory requirement under the laws of Bangladesh.

We retain personal data only for as long as necessary to provide the Platform's services, or as required for legitimate business, accounting, and legal purposes.

Specifically:

• Order, payment, and transaction records are retained for accounting and tax-compliance purposes even after an account is closed, in accordance with standard financial record-keeping practices.

• Vendor identity verification documents (such as NID images) may be retained for a limited period after account closure where necessary for fraud prevention or legal compliance.

• Where an account is subject to an active dispute, safety investigation, or legal hold, the associated data may be retained beyond the standard period until the matter is resolved.

You may request deletion of your account at any time — either from within the app's account settings, or through our dedicated web-based deletion form, which does not require the app to be installed.

Deleting your account will:

• Immediately begin a grace period (currently 30 days), during which you may log in and cancel the deletion request if you change your mind

• After the grace period, permanently remove your personal profile information (such as your name and phone number) from active use

Certain records — such as completed order history, payment/transaction logs, and (for Vendors) identity verification records — may be retained in a de-identified form for the periods described in Article 12, as permitted under applicable law. Deletion requests may be temporarily delayed where an account is subject to an active legal hold, as described in Article 12.

You may, at any time:

• Review and update your profile information from within the app

• Control notification permissions through your device settings

• Request account deletion as described in Article 13

• Contact us with any privacy-related question or concern (Article 19)

Dahuuk is intended exclusively for individuals who are at least 18 years of age and legally capable of entering into binding contracts. We do not knowingly collect, use, or process personal information from anyone under the age of 18.

Our services use a phone number and One-Time Password (OTP) based registration and login system. Phone number verification helps authenticate users but does not independently verify a user's age.

If we become aware that a person under the age of 18 has created an account or provided personal information, we will take reasonable steps to deactivate the account and delete the associated personal data, unless retention is required by applicable law.

If you believe that a minor has provided us with personal information, please contact us so that we can investigate and take appropriate action.

We apply reasonable administrative, technical, and physical safeguards to protect your information, including encrypted data transmission and restricted internal access to sensitive records such as identity verification documents. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Dahuuk currently operates within Bangladesh, and user data is stored on secure servers accessible within this operational scope. Should the Platform expand internationally in the future, any cross-border data transfer will be protected using industry-standard security and encryption practices.

We may update this Privacy Policy from time to time to reflect new features, legal requirements, or platform changes. Material changes will be posted on this page with an updated "Effective Date." Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

For questions, concerns, or requests related to this Privacy Policy or your personal data — including manual assistance with account deletion — please contact us:

Platform: Dahuuk

Email: dahuuk4u@gmail.com

Website: www.dahuuk.com

Operational Region: Bangladesh