Sign InSign InContact SalesContact Sales

Privacy Policy

Kathmandu Living Labs Consult Private Limited

Updated: 6th June 2023

Your privacy is important! This privacy notice for Kathmandu Living Labs Consult (hereafter “KLLC” doing business as Baato Maps) (‘Baato’, 'Baato Maps', 'we', 'us', or 'our'), describes how and why we might collect, store, use, and/or share ('process') your information when you use our services ('Services'), such as when you:

  • Visit our website at https://baato.io, or any website of ours that links to this privacy notice
  • Use our Suite of Application Programming Interfaces (APIs)
  • Software Development Kits (SDKs)
  • Download and use our mobile application (Baato Maps), our Facebook application (Baato Maps), or any other application of ours that links to this privacy notice
  • Engage with us in other related ways, including any sales, marketing, or events

We will not use or share your information with anyone except as described in this Privacy Policy. You agree to the terms (hereafter “Terms”) of this policy if you use any of our applications, websites, APKs, SDKs, or other Services.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@baato.io.

WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

  • Names
  • Phone numbers
  • Email addresses
  • Usernames
  • Contact or authentication data
  • Mailing addresses
  • Contact preferences

Sensitive Information

When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

  • User location data
  • Personal & professional address

Account Information

If you sign up for or authenticate into an account with us, we may collect information that you provide to us in connection with setting up the account, such as your username, name, email address, and, for an account you authenticate into, role. Further, while using your account, you may provide us with additional information through your communications with us.

Payment Information

Payment is required for some of our Services, and we may ask you to provide certain information, including your name, address, email, credit card, or other electronic payment provider information in connection with processing your transactions. You may update your Payment Information through your account.

Application Data

If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:

  • Geolocation Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. If you wish to change our access or permissions, you may do so in your device's settings.

  • Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's camera, sensors, microphone, storage, always-on location tracking, and other features. If you wish to change our access or permissions, you may do so in your device's settings.

  • Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our application(s) you accessed.

  • Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.

This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:

  • Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called 'crash dumps'), and hardware settings).

  • API Technical Data. We automatically collect certain technical information whenever requests are made to our APIs, including (a) IP address, (b) device and browser information, (c) operating system, (d) the content of the request, (e) the date and time of the request, and (f) limited location and usage data. In addition, when a mobile application uses SDKs to access our APIs, it may send us certain limited location and usage data along with an ID.

  • Device Data We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

  • Location Data We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

  • Mobile Device Access Data We may request access or permission to certain features from your mobile device, including your mobile device's camera, sensors, storage, and other features. If you wish to change our access or permissions, you may do so in your device's settings.

Information collected when you use our Facebook application(s). We by default access your Facebook basic account information, including your name, email, gender, birthday, current city, and profile picture URL, as well as other information that you choose to make public. We may also request access to other permissions related to your account, such as friends, check-ins, and likes, and you may choose to grant or deny us access to each individual permission. For more information regarding Facebook permissions, refer to the Facebook Permissions Reference page.

Feedback

You and/or your end users may provide us with feedback regarding our Services (e.g., in the form of email, suggestions for how to improve our maps, etc).

Hosted data

In using your account, you may upload data to us via different sources so that we can host it for you as part of providing our Services.

HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
  • To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
  • To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
  • To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
  • To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
  • To deliver targeted advertising to you. We may process your information to develop and display personalised content and advertising tailored to your interests, location, and more.
  • To post testimonials. We post testimonials on our Services that may contain personal information.
  • To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
  • To administer prize draws and competitions. We may process your information to administer prize draws and competitions.
  • To evaluate and improve our Services, products, marketing, and your experience. We may process your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.
  • To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
  • To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
  • To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

Contact and Payment Info. We use the account information we collect to provide our Services to you, to maintain your accounts, and to process your transactions. We also may use certain information, such as your email address, to help you by informing you about our new products or features that may be of interest to you, and by providing you with examples of how products and services can be used. We use payment information for billing purposes.

Usage Data. a) We use the information we get from Google Analytics to improve our Services Google Analytics helps us to measure and optimize user engagement with our Services including but not limited to, understanding the number of users, their characteristics, where they come from, what actions they are taking when using our Services, measuring user’s in-app payments and revenue, visualizing user navigation paths, and customizing reports specific to our business. Google’s ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Use. b) We use the data collected through our APIs and SDKs (1) for internal diagnostic and analytic purposes (2) to improve our mapping products and services (3) to provide our Services to end users of our customers and (4) to generate aggregated and anonymized usage statistics. We have a legitimate interest in improving our Services and certain data collection is necessary in order to provide the Services.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ('third parties') who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The third parties we may share personal information with are as follows:

  • Advertising, Direct Marketing, and Lead Generation

Facebook Audience Network and Google AdSense

  • Allow Users to Connect to Their Third-Party Accounts

Google account

  • Cloud Computing Services

Google Cloud Platform

  • Communicate and Chat with users

Facebook Customer Chat

  • Content Optimisation

Google Site Search and Google Fonts

  • Functionality and Infrastructure Optimisation

DigitalOcean , Firebase Hosting , Firebase Realtime Database , Google App Engine , Google Cloud Storage and Netlify

  • Retargeting Platforms

Facebook Custom Audience, Facebook Remarketing, Google Ads Remarketing and Google Analytics Remarketing

  • Social Media Sharing and Advertising

Facebook advertising, Firebase Dynamic Links, YouTube social plugins, Facebook social plugins and Instagram advertising

  • User Account Registration and Authentication

Firebase Authentication and Google Sign-In

  • Web and Mobile Analytics

Facebook Ads conversion tracking, Facebook Analytics, Google Ads, Google Analytics, Google Analytics for Firebase, TestFlight and Google Tag Manager

  • Website Performance Monitoring

Firebase Crash Reporting and Firebase Performance Monitoring

  • Website Testing

Google Play Console

We also may need to share your personal information in the following situations:

  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

  • Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

  • Offer Wall. Our application(s) may display a third-party hosted 'offer wall'. Such an offer wall allows third-party advertisers to offer virtual currency, gifts, or other items to users in return for the acceptance and completion of an advertisement offer. Such an offer wall may appear in our application(s) and be displayed to you based on certain data, such as your geographic area or demographic information. When you click on an offer wall, you will be brought to an external website belonging to other persons and will leave our application(s). A unique identifier, such as your user ID, will be shared with the offer wall provider in order to prevent fraud and properly credit your account with the relevant reward.

Feedback. We may use the feedback that you provide for any purpose, including improving our Services. We have a legitimate interest in improving our Services for the benefit of all of our users.

Hosted data. We use hosted data to provide and improve our Services to you and is not shared with any third-party services or partners.

DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information.

  1. to preserve information so that you will not have to re-enter it during your visit or on subsequent visits to our site,
  2. to maintain sessions for authenticated users,
  3. to monitor metrics about our site such as the number of visitors and pages viewed
  4. to perform internal diagnostics and analytics
  5. to improve our website and the services we provide, and
  6. to market our Services to you.

We may combine this data with information we receive from other sources. We have a legitimate interest in improving and marketing our Services and certain data of which collection is necessary in order to provide the Services.

HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than twelve (12) months past the termination of the user's account.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

CONTROL OVER YOUR DATA

  1. You can request to have your data deleted or modified. This can be done by contacting us via email.
  2. Payment information is required. Changes can be made, but deletion of payment information will lead to the account being suspended or terminated.
  3. Transaction history cannot be deleted for tax purposes.
  4. Our service may also contain links to other sites/apps. If you click on a third-party link, you will be directed to that site/app. Note that we do not operate these external sites/apps. Therefore, we strongly advise you to review the Privacy Policy of these websites and apps. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites, apps or services.

CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ('DNT') feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognising and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

ONLINE PRIVACY POLICY ONLY

This online privacy policy applies only to information collected through our website and mobile application and does not apply to information collected offline.

TERMS AND CONDITIONS

Please also visit our Terms of Services section which explains the use, disclaimers, and limitations of liability governing the use of our Services.

DATA PROCESSING AND TRANSFER

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside Nepal and choose to provide information to us, please note that we transfer the data, including Personal Data, to Nepal and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

ACCOUNT SECURITY

We adopt and maintain reasonable (including organizational and technical) security measures in dealing with your data in order to protect against unauthorized or accidental access, loss, alteration, disclosure or destruction of such data, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

LAW ENFORCEMENT AND TRANSPARENCY

We believe that law enforcement should be able to conduct effective and efficient investigations. We believe that law enforcement should be able to conduct effective and efficient investigations. We will review and respond to properly served requests for user information in accordance with its privacy policy, terms of service, and applicable law. We may be legally required to disclose your information if such disclosure is (a) required by subpoena, law, or other legal process; (b) necessary to assist law enforcement officials or government enforcement agencies; (c) necessary to investigate violations of or otherwise enforce our legal terms; (d) necessary to protect us from legal action or claims from third parties, including you and/or other members; (e) necessary to protect the legal rights, personal/real property, or personal safety of our company, users, employees, and affiliates.

CHANGES TO OUR PRIVACY POLICY

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this Page.

CONTACTING US

If there are any questions regarding this privacy policy you may contact us using the information below:

  • Email: support@baato.io
  • Address: Kathmandu Living Labs Consult Pvt. Ltd., 1474 Lamtangin Marg, Chundevi, Kathmandu, Nepal, +01-6205000

REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT

You have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please visit: support@baato.io.