Privacy policy

1. Who we are

GateChecker is a gate-security and community-management platform for housing societies, owned and operated by Twocompo Technologies Private Limited ("Twocompo", "we", "us"), a company incorporated in India and based in Ahmedabad, Gujarat. The product is managed by MVPChecker.

Contact: info@gatechecker.in · +91 98248 34704

2. Who controls your data

This matters, so it comes early.

Your society is in charge of its own records. When a society uses GateChecker, the society (through its committee) decides who is a resident, which flat they belong to, which vehicles are approved and what the gate records. In the language of India's Digital Personal Data Protection Act, 2023, the society is the Data Fiduciary for that information.

We are the processor. Twocompo stores and processes that data on the society's instructions, to run the service. We do not decide who gets approved, and we do not use society data for our own purposes.

For a small set of information — your account, your support messages, enquiries you send through this website — we are the fiduciary ourselves, because we decide how that is used.

Practically: if you want your flat's records changed, ask your committee. If you want your account deleted or you have a complaint about how we handle data, write to us.

3. What we collect

We collect only what the gate and the committee actually need.

What	Examples	Why
Account	Name, mobile number, optional email, optional profile photo, optional password	To sign you in and to show the gate who is approving a visitor
Society membership	Society, block, flat or house number, whether you are owner, tenant or family, your committee designation and permissions	To route visitor requests to the right home and to decide what you may see
Vehicles	Registration number, type, make, model, colour, sticker code, insurance and PUC dates, uploaded documents	To issue a gate sticker and let the office verify a vehicle
Visitors	Visitor name, mobile number, photograph taken at the gate, company, purpose, vehicle number, number of people	To ask the resident for approval and to keep the society's entry register
Gate activity	Entry and exit times, direction, method (scan or manual), the guard on duty, approvals and declines, pass usage	To maintain an auditable register and show who is inside
Community activity	Notices you read, complaints you raise, SOS alerts you send	To run those features and route a complaint to the right committee member
Device and technical	Push notification token, app version, device model and operating system, IP address, error logs	To deliver notifications, keep the apps working and investigate faults

What we do not collect: we do not track your location in the background, we do not read your contacts or messages, we do not use advertising identifiers, and we do not build advertising profiles. There are no third-party advertising or analytics trackers inside the apps; if an app crashes, a crash report is sent to Google Firebase Crashlytics (see who we share it with).

Visitors who are not our users

A visitor at the gate is usually not a GateChecker user. Their name, phone number and photograph are recorded by the guard on the society's behalf, to complete the entry the society asks for. Guards are instructed to tell visitors that a photograph is being taken for the society's register. A visitor may ask the society to remove their record, or write to us and we will pass it on.

4. App permissions

Each permission is asked for at the moment it is needed, and the app keeps working, with that feature unavailable, if you say no.

Permission	Used for	Who is asked
Camera	Scanning a QR sticker and photographing a visitor at the gate; reading an appliance invoice to fill in a form (the invoice is read on the phone)	Guards; residents
Photos / storage	Uploading a vehicle document or a profile photo	Residents, committee
Notifications	Telling you a visitor is at the gate; alerts and notices	Everyone
Microphone	Speaking a visitor's name instead of typing it, on the gate screen only, using the phone's speech recognition. The permission is requested only when this is used.	Guards

We do not request precise or background location.

5. Why we use it

• To let a resident approve or decline a visitor, and to tell the guard the answer.
• To keep the society's entry and exit register and show who is currently inside.
• To issue and check vehicle stickers and passes.
• To deliver notices, complaints and emergency alerts to the right people.
• To show the committee dashboards and reports about its own society.
• To provide support when you contact us, and to investigate faults and abuse.
• To meet legal obligations, and to establish or defend a legal claim where necessary.

We do not sell personal data. We do not share it with advertisers. We do not use society data to train models for anyone.

6. What a guard can see

This is the limit we are most often asked about, so it is written down.

When a guard scans a sticker or looks up a pass, the system returns only: the resident's name, contact number, unit number, the vehicle's number, type and photo, and whether the pass is valid.

A guard is never shown rent agreements, RC books, ownership papers, driving licences, ID proofs, email addresses, your other units or your other vehicles. Those are visible to the society office and to you. The restriction is applied on our servers before the data leaves them, not merely hidden in the app.

7. Who we share it with

Inside your society. Your committee sees what its permissions allow. Guards see the limited view above. Other residents see only what a notice board shows — not your visitor log.

Service providers who help us run the platform, under contract and only for that purpose:

• Hosting and storage — cloud hosting providers, under contract and with appropriate safeguards.
• Push notifications — Google Firebase Cloud Messaging, to deliver alerts to your phone.
• Crash reporting — Google Firebase Crashlytics, which receives a report when an app crashes (the error, app version and device model), so we can fix it.
• SMS — an Indian SMS provider, to send your one-time sign-in code.

Legal. We disclose data if the law requires it — a court order, or a lawful request from a police or government authority — and we tell the society unless we are forbidden from doing so.

Business transfer. If Twocompo is acquired or merged, data may transfer with the business. You would be told, and this policy would continue to apply until replaced by one no less protective.

Where data is processed. Data may be stored and processed in India or in other countries where our service providers operate, as permitted by applicable law. Wherever it is processed, we protect it as described in this policy.

8. How long we keep it

We keep personal data only for as long as it is needed for the purpose it was collected for, or as the law requires.

Data	Kept for
Your account and society membership	While your account or membership is active. After it ends, a record stays in the society's register for as long as the society needs it, or as the law requires.
Gate entry and exit records, visitor details and photographs	For as long as the society needs them for its register and to answer questions about earlier incidents, or as the law requires
Vehicles and vehicle documents	While the vehicle is registered to a unit, and after that for as long as the society needs the record, or as the law requires
Complaints and notices	For as long as the society needs them for its records
In-app notifications	Cleared automatically after a set period
One-time sign-in codes	Deleted automatically shortly after they are issued
Support messages and enquiries	For as long as needed to respond to you and deal with any follow-up
Backups	Overwritten in our normal backup cycle

A society may ask us to delete its records sooner, and you may ask us to erase your personal data — see your rights and how to delete your data. Where a law requires us to keep something longer, we keep only that, and only for as long as required. When a society's account is closed, we provide its data to the society on request and then delete or anonymise it within a reasonable period, except where the law requires us to keep it.

9. How we protect it

• Everything travels over HTTPS. Nothing about a visitor or a resident moves in the clear.
• Passwords are stored hashed. We cannot read them, and neither can anybody who steals the database file.
• Access to production data is limited to the few staff who need it, and it is logged.
• Every society's data is scoped by society at the database layer, so one society cannot read another's.
• Committee actions are recorded in an audit log the society can inspect.
• Regular backups, with restores tested.

No system is perfectly secure. If a breach affects your personal data, we will notify the affected societies and the Data Protection Board as the law requires, and tell you what happened and what to do.

10. Your rights

Under the Digital Personal Data Protection Act, 2023, you may:

• Know what personal data of yours we process and who it has been shared with.
• Correct anything inaccurate, incomplete or out of date.
• Erase your data where it is no longer needed for the purpose it was collected for, or for a legal obligation.
• Nominate another person to exercise these rights if you die or become incapable of doing so.
• Complain to our Grievance Officer, and then to the Data Protection Board of India if you are not satisfied.
• Withdraw consent at any time, for anything you consented to. Withdrawing it does not undo what was lawfully done before.

To exercise any of these, write to info@gatechecker.in from the email or phone number on your account, or see how to delete your data. We respond within the time required by applicable law.

If the request concerns records your society controls — your flat, your unit membership, an entry in the gate register — we will forward it to your society's committee and tell you we have done so.

11. Children

GateChecker is not meant for children. An account requires a mobile number and a society's approval, and we do not knowingly create accounts for anyone under 18. A committee may record a family member who is a minor as part of a household; that record is kept to the minimum and is visible only within the society. We do not knowingly track or profile children. If you believe a child's data is held in error, write to us and we will remove it.

12. Cookies

This website sets no cookies of its own. To understand how many people visit and which pages they read, it uses Google Analytics, which sets its own cookies (named _ga) in your browser and processes that visit data under Google's privacy policy. You can block these cookies in your browser settings or with Google's opt-out add-on, and the site works the same. We run no advertising or other tracking scripts.

Enquiry form. When you send the contact form on this site, what you type — your name, phone number, email address, society name, city, the number of homes and your message — is sent to GateChecker's servers and stored there, and a copy is emailed to our team. We use it only to reply to your enquiry and to arrange a demo, and we do not share it with anyone else. It is deleted when you ask us to (write to info@gatechecker.in) or when it is no longer needed to respond to you. If you choose WhatsApp or email instead, your message goes through that service and reaches us there.

The committee web panel uses a session cookie that is strictly necessary to keep you signed in. That is all it does.

13. Changes

We may update this policy from time to time, and we will update the date at the top when we do. Where a change materially affects your rights, we will inform societies and users as applicable law requires — for example by email or with a notice in the apps.

14. Grievance officer

In line with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023:

Grievance Officer
Twocompo Technologies Private Limited
Ahmedabad, Gujarat, India
Email: info@gatechecker.in
Phone: +91 98248 34704

We acknowledge and respond to grievances within the time required by applicable law. If you remain unsatisfied, you may complain to the Data Protection Board of India.