Privacy Policy

1. Who we are

Excaren ("we", "our", or "us") is a mobile application that connects excavator owners with contractors and renters globally. The app is operated by the Excaren team.

This Privacy Policy applies to the Excaren mobile application (iOS) and the Excaren website. By using our services you agree to the practices described here.

2. Data we collect

Information you provide directly

• Account details — name, email address, phone number, and company name when you sign up.
• Excavator listings — brand, model, year, weight, rates, attachments, and photos you upload when listing a machine.
• Rental requests — dates, machine selection, and any messages exchanged with an owner or renter.
• Ratings and reviews — feedback you leave after a completed rental.

Information collected automatically

• Location data — GPS coordinates when you open the map. See Section 5.
• Device identifiers — FCM token used to send push notifications.
• Usage data — screens viewed and error logs, collected via Firebase Analytics. Anonymised and aggregated.

Information from third parties

• Google Sign-In — if you sign in with Google, we receive your name, email address, and profile picture. We do not receive your Google password.

3. How we use your data

• Providing the service — creating and managing your account, displaying excavators, processing rentals.
• Notifications — alerting you to rental events via push and in-app notifications.
• Communication — enabling renters to contact owners via phone once authenticated.
• Improving the app — analysing aggregated, anonymised usage patterns.
• Safety and fraud prevention — verifying identities and detecting misuse.
• Legal compliance — meeting obligations under applicable law.

4. Data sharing

We do not sell your personal data. We share it only in the following limited circumstances:

Between users

When a rental request is made, the renter's name is shared with the owner. The owner's phone number is shared with the renter once confirmed.

Service providers

• Google Firebase — authentication, database, storage, analytics, and push messaging.
• Google Maps Platform — map rendering and reverse geocoding.

Legal requirements

We may disclose your information if required by law or court order.

5. Location data

Excaren requests access to your device's precise location for: centering the map on your position, auto-filling GPS coordinates of a listing, and determining your country to pre-fill the phone dial code.

Location is accessed only while the app is in use (foreground only). We do not request background location access.

6. Photos and media

Photos you upload to a listing are stored in Firebase Storage, publicly accessible to all app users (necessary to display machine photos). They are never used for any purpose other than displaying your listing. We request camera and media access only when you choose to add photos.

7. Push notifications

With your permission, we send push notifications via Firebase Cloud Messaging (FCM). Your FCM device token is stored in your Firestore user document and used only to deliver notifications relevant to your account. You can disable push notifications at any time in your device's system settings.

8. Data retention

• Account data — retained while your account is active.
• Rental records — retained for up to 3 years after completion.
• Excavator listings — deleted when you remove a listing or your account.
• Notifications — deleted from Firestore automatically after 90 days.
• Analytics data — aggregated, retained for up to 14 months per Google's Firebase Analytics policy.

9. Your rights

• Access — request a copy of the personal data we hold about you.
• Correction — update your name, phone, and company in the Profile screen at any time.
• Deletion — request deletion by contacting us at support@excaren.com.
• Portability — request an export of your data in a structured format.

We will respond within 30 days.

10. Children's privacy

Excaren is not directed at children under the age of 18. If you believe a minor has created an account, please contact us at support@excaren.com and we will delete the account promptly.

11. Security

• All data is transmitted over HTTPS/TLS.
• Firebase Security Rules restrict access so users can only read or write their own documents.
• Authentication is handled by Firebase Authentication — we never store your password in plain text.

If you discover a security vulnerability, please report it to support@excaren.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. For significant changes, we will notify you via in-app notification or email before the change takes effect.

13. Contact us

• Email: support@excaren.com
• Phone (UAE): +971 58 805 8069
• Phone: +91 70788 44007

We aim to respond within 30 days.