Mobile App Privacy Policy
This privacy statement applies to the Darkhost mobile staff application (intake specialists, drivers, workshop crew, and managers).
Last updated: August 29, 2026
Target Audience
Darkhost is an operational workplace tool for dry cleaner and laundry staff: intake workers, drivers, cleaners, packagers, and managers. Accounts are provisioned by employers. Consumers do not register in this app — customer details are entered by staff during order creation.
Data Collected by the App
Only data strictly required for task execution is handled. Nothing beyond operational needs is requested or transmitted.
- Employee phone number for SMS OTP authentication.
- Employee name and role, alongside work shifts, logged hours, and task allocations.
- Garment photos captured during intake and packaging to document condition and resolve damage claims.
- Customer digital signature at delivery confirming order handover.
- Customer contact data entered for delivery: recipient name, phone, pickup, and delivery addresses.
- Push notification token to deliver dispatch alerts and route assignments.
- Device identifier and irreversible hash of quick-login PIN stored in system secure keystore.
- Audit event log: records of order modifications to ensure transparency and dispute resolution.
What the App Does NOT Do
A concise and verifiable list — no such functionality exists in our code:
- No persistent background location tracking. The app does not track your location in the background.
- No third-party advertising or analytics SDKs. Your activities are never tracked for advertising.
- No scanning of device contacts, SMS history, or personal photos.
- No audio or microphone recording.
- Zero selling or sharing of personal data with data brokers or marketing networks.
Device Permissions
Permissions are requested just-in-time only when required for a specific task:
- Camera — capturing garment condition photos during intake and dispatch.
- Photo gallery — attaching existing inspection photos if preferred.
- Push notifications — alerts about new dispatches and critical operational updates.
- Network status — detecting offline mode and queuing actions until connectivity is restored.
Data Retention
Business records (orders, receipts, item photos, audit trails) are maintained while the tenant operates with Darkhost for legal and tax compliance. Personal account credentials are retained until profile deletion. OTP codes expire in minutes.
Account Deletion
Available in-app via Settings → Account → Delete Account. Login credentials and local tokens are wiped immediately. See our Account Deletion page for full details.
Inquiries
Email info@darkhost.tj from your registered account address. We respond within three business days.

