1. Who we are
Dring is a mobile app that connects people who need an urgent home repair with independent tradespeople nearby. The data controller is [COMPANY LEGAL NAME], [REGISTERED ADDRESS], company number [COMPANY NUMBER / VAT] (“Dring”, “we”).
Contact for anything privacy-related: [email protected]. Data protection officer: [DPO NAME AND CONTACT, if appointed]. Person in charge of the protection of personal information (Québec): [NAME AND TITLE].
2. What this policy covers
This policy covers the Dring app for Android and iOS and the website heydring.com. It applies to clients (people who post requests) and pros (tradespeople who accept them).
3. The data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Email address, password (stored only in hashed form by our authentication provider), account type (client or pro), full name, phone number and the date it was verified (we check your number with a code sent by SMS when you sign up or change it), preferred language. | You |
| Phone verification | Each time you ask for a code or enter one: your account, the phone number and the time. We use this to limit attempts. | You, our servers |
| Pro profile | Trade, company name (optional), service radius, property types covered, description, availability, completed jobs, ratings, reliability score, no-shows and any suspension. | You, and your activity |
| Requests | Trade, description of the problem, urgency, property type, address and access details (floor, door code…), the address's map position, name and phone number for the job, how long the request stays open, status and timestamps, cancellation reason. | You |
| Location | Clients: your device's position, only if you tap “Use my current location” to fill in the address. Pros: your precise position while you're available for jobs, including in the background, to match you with nearby requests and to show it to the client during a job they confirmed you for. We store your latest position only, not a history. Your position when you enter a client's PIN (proof of presence). | Your device, with your permission |
| Messages | The in-app conversation between a client and a pro about a job. | You and the other user |
| Ratings and reviews | Star ratings and comments, from clients about pros and from pros about clients. | Users |
| Leads and payments (pros) | Lead balance and history (purchases, use, refunds), Stripe customer and payment session identifiers, amounts. Your card details are handled by Stripe and never reach us. | You, Stripe |
| Levels and challenges (pros) | XP, level, badges, daily challenges, leaderboard rankings, sign-in streak, free leads received as rewards. | Your activity |
| Notifications | Push notification token, notifications sent to you and delivery logs. | Your device, our servers |
| Technical | Crash reports and performance data (device model, operating system and app versions, error details); server logs kept by our hosting provider (IP address, time, request). | Your device, our servers |
| Support | The emails you send us and our replies. | You |
Website. heydring.com does not use cookies, analytics or advertising trackers. Our hosting provider processes your IP address and technical request data to deliver the site and protect it from abuse.
4. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account; send your request to available pros nearby; alerts, confirmation, live tracking, PIN check, chat, ratings. | Performance of our contract with you (art. 6(1)(b)). |
| Checking your phone number by SMS when you sign up or change it, so clients and pros can reach each other; one account per number; limiting code requests and attempts. | Contract; our legitimate interest in preventing fake accounts and abuse (art. 6(1)(f)). |
| Pros' location in the background while available. | Contract, together with the permission you give on your phone. You can withdraw it at any time in your phone settings; you'll then stop receiving nearby jobs. |
| Selling lead packs, invoicing and accounting. | Contract; legal obligation for accounting and tax records (art. 6(1)(c)). |
| Safety and fraud prevention: PIN attempt limits, reliability scores, suspensions, handling reports. | Our legitimate interest in a safe, trustworthy service (art. 6(1)(f)). |
| Levels, badges, challenges and leaderboard. | Contract (part of the pro features). |
| Crash reports and fixing bugs. | Our legitimate interest in an app that works. |
| Answering your messages. | Contract, or our legitimate interest in helping you. |
| Complying with the law and answering authorities. | Legal obligation. |
We don't sell your data, we don't use it for advertising, and we don't build advertising profiles. Requests are matched with pros automatically, based on trade, distance, availability and property type; this doesn't produce legal effects on you, and you always choose which pro to confirm.
5. Who sees your data
Other users
- When you post a request, pros nearby who do that trade see the trade, the property type (home, commercial or industrial), your description, how urgent it is, your town and the distance in whole kilometres. They don't get your name, exact address, access details or phone number before you confirm one of them.
- When a pro accepts your request, you see their name, company, phone number, average rating and number of reviews, number of completed jobs, reliability score, level and badges, as well as the trade, description, service radius and XP on their profile, until the job ends. You can message each other; message notifications show the sender's first name. The pro still sees only your town.
- Once you confirm the pro, they also see your name, phone number, exact address and access details, until the job ends. After that, the address goes back to showing your town only. From your confirmation until the job ends, you can see the pro's live position, shown on a map while they're on their way.
- Ratings. The rating and comment a client and a pro give each other after a job are visible to both of them. Other clients see a pro's average rating and number of reviews, not the comments.
- Leaderboard. Any signed-in user can see the weekly and monthly leaderboard of the top pros: full name, company, rank, XP, number of completed jobs and average rating. In the app, it's shown to pros.
Authorities
We disclose data to authorities only when the law requires it, or to protect someone's safety.
Business transfer
If Dring is sold or merged, your data may be transferred to the new owner, who will remain bound by this policy.
6. Service providers
We use these providers to run Dring. They process data on our instructions, under a data processing agreement [TO BE CONFIRMED FOR EACH PROVIDER].
| Provider | What for | Data involved | Location |
|---|---|---|---|
| Supabase | Database, authentication and sign-in emails, server functions. | All app data described above. | United States (us-east-1) |
| Stripe | Card payments for lead packs. Stripe also acts as an independent controller for its own legal and anti-fraud obligations. | Pros' payment data, email, amounts. | EU and United States |
| Expo (650 Industries) | Delivering push notifications, through Apple Push Notification service and Google Firebase Cloud Messaging. | Push token, notification content. | United States |
| Twilio (Twilio Inc.) | Sending the SMS code that verifies your phone number, and checking the code you enter (Twilio Verify). | Your phone number and its country, the language of the SMS, the code you enter, the delivery status. | United States |
| Google (Maps Platform) | Address suggestions (Places API, through our server) and the tracking map image (Static Maps API, from your phone). | The address text you type; the positions shown on the map; your phone's IP address for the map. | United States and others |
| OpenStreetMap services: Photon (komoot) and Nominatim (OpenStreetMap Foundation) | Backup address search when Google has no result. | The address text you type, sent from our server. | European Union / United Kingdom |
| Sentry (Functional Software) | Crash reports and performance monitoring. No name, email or address is sent with them. | Technical data about the error and your device. | European Union (Germany) |
| Cloudflare | Hosting heydring.com and forwarding emails sent to our addresses. | IP address, request data, emails you send us. | Global network |
| Apple and Google | App distribution; on your phone, turning your position into an address when you use your current location. | Your position, under their own privacy policies. | — |
7. International transfers
Our database is hosted in the United States, and several providers are based there. When data leaves the European Economic Area, we rely on [THE EU–US DATA PRIVACY FRAMEWORK CERTIFICATION OF THE PROVIDER AND/OR THE EUROPEAN COMMISSION’S STANDARD CONTRACTUAL CLAUSES — TO BE CONFIRMED FOR EACH PROVIDER]. You can ask us for a copy of these safeguards at [email protected]. For users in Canada, your information may be stored and processed outside your province and outside Canada [PRIVACY IMPACT ASSESSMENT REFERENCE, Québec Law 25].
8. How long we keep it
| Data | Retention |
|---|---|
| Account and profile | While your account is open. Deleted immediately when you delete your account (see Delete your account). |
| Requests, messages, ratings | While your account is open, or [RETENTION PERIOD] after the job, whichever comes first. If you were the pro, the job stays in the client's history while their account is open (see what may be kept). |
| Phone verification attempts | Kept 7 days to limit abuse, even if you delete your account, then deleted. Twilio keeps its own verification records for [TWILIO RETENTION]. |
| Pros' location | Only the latest position is stored, replaced at each update. Position at PIN entry: kept with the job record. |
| Payment and accounting records | [ACCOUNTING RETENTION PERIOD required by law] |
| Notification logs | [RETENTION PERIOD] |
| Crash reports | Deleted automatically after 30 days. |
| Backups and server logs | [BACKUP AND LOG RETENTION PERIOD] |
| Support emails | [RETENTION PERIOD] |
9. Your rights
If you are in the European Union (including Belgium and France), you have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time. In France, you can also give instructions about what happens to your data after your death.
You can edit your details and delete your account in the app. For anything else, write to [email protected]. We answer within one month, and may ask you to prove your identity.
You can also complain to a data protection authority: in Belgium, the Data Protection Authority; in France, the CNIL; or the authority where you live or work.
10. Canada and the United States
Canada. Under federal law (PIPEDA) and Québec's Law 25, you can access and correct your personal information, withdraw your consent and, in Québec, ask for your information in a portable format. You can complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d'accès à l'information.
United States. We don't sell your personal information or share it for cross-context behavioural advertising. Depending on your state (for example California), you may have the right to know, access, correct and delete your personal information; we won't treat you differently for using these rights. Write to [email protected].
11. Security
Data travels encrypted (HTTPS). Database access rules make sure each user only reaches the data they're allowed to see. A client's exact address stays hidden until they confirm a pro. PIN attempts are limited, then locked. Card data is handled by Stripe. No system is perfectly secure; if a breach puts your rights at risk, we'll tell you and the authorities as the law requires.
12. Phone permissions
- Location while using the app: optional for clients (to fill in the address); needed for pros to receive nearby jobs.
- Location in the background (pros): from the moment you go online until you go offline. It lets you keep receiving nearby jobs when the app is closed. It also keeps running during a job you accepted, even though you don't receive new jobs then, so the client can see you on the map once they've confirmed you. Go offline and it stops. Your phone shows when it's in use: a notification on Android, the location indicator on iPhone.
- Notifications: to tell you about your requests, jobs and messages. For pros, a new job arrives as a high-priority notification with Accept and Decline buttons.
These are the only permissions Dring asks you for. On Android, the app also uses standard permissions that don't need your approval. They let it:
- connect to the internet and check that you have a connection;
- receive notifications, vibrate, play the job alert sound and show a number on the app icon;
- keep the phone awake for a moment so an alert gets through;
- run in the background while you're online, with a notification that shows your location is in use, and keep working after your phone restarts;
- ask Android not to limit Dring to save battery. When you're online as a pro, the app may ask you to let Dring run in the background without battery limits, so job alerts still arrive when the app is closed. You can say no, and change it at any time in your phone settings.
Built-in components. Some software components built into the app bring permissions that Dring doesn't use. On Android, the permission list on Google Play may show “Play Install Referrer API”, which lets an app see which link it was installed from; Dring never reads it. On iPhone, the app includes the standard request text for the microphone, but Dring has no feature that uses it and never asks for it, so it stays off.
You can change these permissions at any time in your phone settings.
13. Children
Dring is not intended for people under [MINIMUM AGE]. We don't knowingly collect data from children. If you think a child has given us data, contact us and we'll delete it.
14. Changes to this policy
We'll update this page when our practices change and tell you in the app or by email before any important change takes effect.
15. Contact
[COMPANY LEGAL NAME], [REGISTERED ADDRESS]. Email: [email protected].