Privacy policy

What we collect

• Account details: your name, and your email or phone number, and a password (stored scrambled, never readable). If you use Sign in with Apple or Continue with Google, we receive your name and email address from them (Apple may give us a private relay address) and nothing else.
• Booking details: what you booked, the dates, the contact name and phone you give at checkout, the number of adults, children and infants for room bookings, and your delivery address if you ask for delivery.
• Payment slips: if you pay by bank transfer, the slip image you upload. We never see or store card numbers.
• Messages: the messages you send to a hotel in the app chat, and the messages you receive. Phone numbers, emails and links are not allowed in chat. If you report a message, we keep a copy of it for review.
• Reviews: the stars and feedback you write. Other customers see your first name and the first letter of your last name.
• Phone alerts: if you allow notifications, a push token that lets us send you booking alerts.
• Location: the app can use your phone's location to show the route to a pickup point. This stays on your phone and is not sent to us.

How we use it

To make and manage your bookings, let vendors serve you, send booking alerts, show reviews, keep the service safe, and handle support requests. We do not sell your data and we do not show third-party ads.

AI assistant and translation

A hotel can switch on an AI assistant that answers guests' questions in chat from the hotel's own information, and chat messages can be translated so each side reads them in their own language. When either is on, the text of your chat messages is sent to Google (Gemini) so it can write the answer or the translation. It is used only for that, and we do not send your name, email, phone number or payment details. The assistant is clearly labelled, and you can always ask the hotel to answer instead. Hotels have it switched off unless they turn it on.

Who sees it

• The vendor you book with sees your name, phone, booking details and guest numbers, so they can serve you, and the messages you exchange with them.
• Our service providers process data for us: cloud hosting and database, photo storage, the push notification service, Apple and Google for sign-in, and Google for the AI assistant and translation when a hotel uses them. They may only use it to run Thoddoo App.
• Authorities, if the law requires us to share something.

How long we keep it

Your account stays until you delete it. Booking records are kept after that for accounting and dispute purposes, but your name is replaced with "Deleted customer" and your phone and email are removed from them.

Your choices

• Delete your account in the app: Profile, then Delete my account. You can only do this when you have no booking in progress.
• Report or block anyone in chat: open the chat, tap the three dots for the options, or press and hold a message to report only that message.
• Turn off alerts any time in your phone's settings.
• Ask us to correct or give you a copy of your data by emailing us.

Children

Thoddoo App is for adults. Children can be listed as guests on a room booking by the adult who makes it, but they do not have accounts.

Contact

Questions or requests: info@invowmaldives.com.