Skip to content
Darkhost online

Mobile App Privacy Policy

This privacy statement applies to the Darkhost mobile staff application (intake specialists, drivers, workshop crew, and managers).

Last updated: November 5, 2026

Target Audience

The Darkhost app has two parts. Dry-cleaning customers find a dry cleaner, place an order with pickup and delivery and track it; a customer creates their own account by entering a phone number and confirming it with an SMS code, and the dry-cleaner catalog is open without signing in. Dry-cleaner and laundry staff (intake workers, drivers, cleaners, packers and managers) run orders in it; their accounts are created by the employer.

Data Collected by the App

Only data strictly required for task execution is handled. Nothing beyond operational needs is requested or transmitted.

  • Phone number: customers and staff sign in with it via an SMS code.
  • Customers: a name, if you give one, and a password, if you choose to set one. The password is stored only as an irreversible hash.
  • Customers: saved addresses, meaning the address text, entrance, floor and a map pin if you place one.
  • Customers: the orders you place (dry cleaner, items, pickup day and time, comment), your decisions on a changed price, and ratings and reviews of completed orders.
  • Staff: name and role, plus work records such as shifts, hours worked and payouts. These are kept by the employer.
  • Photos of items taken by staff at intake and packing, to record an item's condition and settle damage disputes.
  • The customer's signature at handover, confirming the order was received.
  • Customer details staff enter when creating an order: name, phone number, pickup and delivery address.
  • Staff notification token, to send alerts about new orders or routes.
  • Device identifier and the staff quick-login PIN. The PIN itself never reaches the server: only an irreversible hash is stored, and on the phone it sits in the system's secure storage.
  • Activity log: who changed an order and when. The dry cleaner uses it to resolve disputes.

What the App Does NOT Do

A concise and verifiable list — no such functionality exists in our code:

  • No location tracking. The app asks for location only from customers, and only while they pick an address on the map, to open the map where they are. The point under the pin goes to our server to suggest the street and building, and is stored only if you save the address. Location is never read in the background, and it is never requested from staff.
  • No advertising or analytics SDKs. No data about your activity goes to third parties for advertising or statistics.
  • No access to contacts, messages or call history. The SMS code is filled in by Android's system mechanism; the app has no access to your messages.
  • No audio recording. The microphone is not used.
  • No selling or sharing of data with advertisers or data brokers.

Device Permissions

Permissions are requested just-in-time only when required for a specific task:

  • Location: customers only, and only while the app is in use, to open the address map at your home. You can refuse; the map then opens at the city centre and you find the address yourself.
  • Camera: staff, to photograph items at intake and packing.
  • Photo library: staff, to attach an existing photo instead of taking a new one.
  • Notifications: alerts about new orders, routes and events that need attention.
  • Internet and network state: talking to the server and knowing whether to work online or save an action until the connection returns.

Third-Party Data Processors

We share data only with those the app cannot work without, and only as much as they need. Data kept by a dry cleaner belongs to that dry cleaner.

  • The dry cleaner the customer chose receives the order: name, phone number, address and map pin, items and comment, and later the rating and review. Without this it cannot collect and return the items.
  • OpenStreetMap: the map loads images from OpenStreetMap servers, which see the phone's IP address and the area shown. Our server looks up the street and building under the pin with the OpenStreetMap geocoder (Nominatim), sending only the point's coordinates, with no name or phone number.
  • SMS operator Alif (smsgate.tj) receives phone numbers and one-time codes to deliver verification SMS.
  • The Expo notification service, and through it Apple and Google, receive the device token and the notification text.
  • Cloud storage keeps item photos and signatures.
  • The Darkhost analytics assistant answers a manager's questions about their own dry cleaner's data. Only owners and managers can use it.

Data Retention

A customer account (name, password, addresses) is kept until you delete it. A dry cleaner's business records (orders, including those customers place in the app, payments, reviews, item photos, the activity log) are kept while the company uses Darkhost, since it reports on them to customers and tax authorities. A staff account lives as long as it exists. SMS codes are kept for a few minutes and deleted after sign-in; the code itself is never stored in plain text.

Account Deletion

Right in the app. Customers: Profile tab → Delete account. Your name, password, saved addresses and all sessions are deleted immediately and permanently; orders and reviews stay with the dry cleaners as their business records. Staff: Settings → Account → Delete account. Access ends immediately, the PIN is wiped and devices are unlinked; orders and the activity log stay with the company. See our Account Deletion page for full details.

Inquiries

Email info@darkhost.tj from the phone number or email linked to your account. We reply within three business days. For questions about data a dry cleaner keeps, such as your orders with it, contact that dry cleaner: it controls that data, we only provide the software.