Nezdoo
Security and privacy

Your data, kept to what’s needed.

A PG app knows where people live and what they pay. Here is how Nezdoo is built so that only the right people see it — in plain words. The Privacy Policy is the full statement.

Every row checked by the database

Who may read or change each record is decided by row-level security in the database itself. An owner sees only their PGs; a resident only their own stay.

Phone numbers shown only with a reason

Someone else’s profile shows only a name, a photo and — while you share a stay or a request — a phone number. Never an email address.

Aadhaar, kept to the minimum

We check UIDAI’s signature on the Secure QR and keep the name, date of birth, gender, photo and last four digits. Never the full number or the address. Owners see it only while there is a live reason, and it is deleted after 12 months with nothing open.

No card or bank details

There is no payment gateway, so Nezdoo never asks for card or bank details and never holds your money.

Team permissions on the server

What a manager or warden may do is checked by the database for every action, not just hidden in the app.

Delete your account in the app

Profile → Privacy & Security → Delete my account, in both apps. An owner’s rent records survive a resident deleting their account; the resident’s profile does not.

Signed app updates

App updates are signed with our own key, and phones refuse any update it did not sign.

Limits against abuse

Sign-up and sign-in are protected by a CAPTCHA, and anything that costs money or could be spammed is rate-limited in the database.

Found something?

Tell us, and we’ll fix it.

If you think you have found a security problem in Nezdoo, write to us with what you found and how to see it. Please don’t access other people’s data to prove it.

Run your PG on Nezdoo Owner.

Leave your number and a founder calls you back, shows you the app and sets up your PG with you.