NextBrick · Legal

NextBrick Privacy Policy

Effective 5 October 2026

This Privacy Policy explains how V4 DevLabs OPC Pvt Ltd, Thiruvananthapuram (Trivandrum), Kerala, India ("NextBrick", "we", "us", "our") collects, uses, shares and protects personal information when you use the NextBrick mobile application and related services (the "App"). NextBrick is an independent construction oversight service: we help homeowners, supervisors and builders document, verify and track construction projects.

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), NextBrick is the data fiduciary for the personal information described here. By creating an account or using the App you acknowledge this Policy. If you do not agree, please do not use the App.

Privacy questions and requests: privacy@v4nextbrick.com · General support: support@v4nextbrick.com · Last updated: 5 October 2026

Who uses the App

The App serves three kinds of users, and what we collect depends on your role:

  • Homeowners (including NRI and overseas owners) view project progress, reports, photos, issues, documents and builder information.
  • Supervisors perform site inspections and capture photo, video, voice and location evidence.
  • Builders manage a profile and portfolio, respond to issues, and upload documents and evidence.

How accounts are created

Accounts for supervisors and builders are created or approved by NextBrick. Homeowners may sign up themselves.

Information we collect

Information you give us

  • Account details: name, email address, phone number, password (held by our authentication provider as a salted hash, never in readable form) and your role.
  • Profile details: profile photo, the address or location of your property or business and, for builders and staff, business or professional details such as company name, experience, qualifications, licences, service areas, portfolio items and contact details.
  • Project information: property and project details, requirements, budgets, preferences, milestone and payment records, comments, issue reports, approvals and sign-offs.
  • Documents: files you upload, such as drawings, estimates, agreements, permits, invoices and receipts.
  • Communications: messages, notes, bug reports and feedback you send through the App or to our support team.

Information captured through your device (only with your permission)

You can withhold or withdraw any of these permissions in your device settings. Some features, such as site capture, will not work without them.

  • Camera and photo library: photos and videos of construction sites, materials and work, and photos you attach, such as screenshots in a bug report.
  • Microphone: voice notes and audio recorded in the App, for example during inspections.
  • Location: when a supervisor captures monitoring photos or videos, the App tags them with the device's location so our office can verify where each was taken. We do not track your location in the background.
  • Notifications: a push-notification token so we can send project alerts to your device.

Information collected automatically

  • Device and usage data: device model, operating system and version, App version, language, and the screens and features you use. If you choose "Include device info" when reporting a bug, the App version and operating system are sent with the report.
  • Diagnostics and performance data: crash reports and performance traces, collected through Firebase Crashlytics and Firebase Performance Monitoring, to find and fix bugs.
  • Identifiers: a Firebase installation ID and push-notification token.

Information we create

We do not collect payment card or bank details in the App. We do not use advertising identifiers and we do not sell personal information to advertisers or anyone else.

  • Reports and records: project reports, inspection findings, builder assessments, quality-audit results, ratings and performance reviews, audit trails of who did what and when, and the permanent digital project archive.

How we use information

We use personal information to:

  • Create and manage your account and verify your identity and role.
  • Deliver the service: project tracking, inspections, milestone and payment verification, issue management, reports and the digital archive.
  • Show you the right project data and notify you of updates, approvals, issues and deadlines.
  • Verify that evidence (photos, videos, location, timestamps) is genuine and traceable.
  • Evaluate and rate builders, supervisors and staff on quality and performance, as described in section 5.
  • Provide customer support and respond to your requests and bug reports.
  • Keep the App secure, prevent fraud and misuse, and troubleshoot and improve performance.
  • Comply with legal obligations and enforce our Terms of Use.

Lawful basis

We process personal information with your consent (for example, device permissions and push notifications) and for the "legitimate uses" the DPDP Act recognises, including performing our service for you, complying with the law, and keeping the service secure. Where the GDPR or a similar law applies to you, we rely on performance of our contract with you, your consent, our legitimate interests in running and securing the service, and compliance with legal obligations.

Who can see your information

Information is visible according to role and project assignment:

  • Homeowners see their own projects, and the reports, evidence, issues, documents and builder details we make visible to them on those projects.
  • Builders see information about projects they are assigned to, issues raised against their work, and their own profile and ratings. Builder profiles and portfolios may be visible to homeowners browsing builders.
  • Supervisors see the projects they are assigned to.
  • NextBrick staff (administrators, operations and project managers, verification officers) see project and user information as needed to do their jobs.

Ratings, assessments and evaluations

Builders, supervisors and staff may be assessed on quality and performance (for example inspection results, audit outcomes and a rating out of 5). These evaluations are based on recorded project evidence and are used for service quality, builder suitability decisions and internal staffing. Homeowners may see a builder's evaluation summary where the project makes it visible.

If you are evaluated and believe a record is inaccurate, contact us (section 10) and we will review it.

How we share information

We do not sell your personal information. We share it only with:

  • Service providers that process data on our behalf under contract, including Google Firebase and Google Cloud (authentication, database, file storage, push messaging, crash reporting and performance monitoring). Data may be stored and processed on servers outside your country.
  • Other users on the same project, as described in section 4.
  • Professional advisers, auditors and authorities where required by law, regulation or legal process, or to protect rights, safety and property.
  • A successor entity in a merger, acquisition or sale of assets, with notice to you where required.

Aggregated information

Aggregated or de-identified information that cannot reasonably identify you may be used for analytics and service improvement.

International transfers

Our providers operate globally, so your information may be transferred to and stored in countries other than where you live, including countries whose data-protection laws differ from yours. We transfer personal information only where the DPDP Act and other applicable law permit, and where required we use contractual or other safeguards.

Retention

  • Account data is kept while your account is active.
  • Project records, reports, evidence and the digital archive are kept for the life of the project and afterwards for the archive period in your agreement or, if none is stated, up to 7 years after the project closes. A permanent, verifiable record of construction is a core purpose of the service. Sealed archive records may be amended only by adding new entries, not by deleting history.
  • Diagnostics data is kept for a limited period set by the provider.
  • After retention periods end, or after a valid deletion request, we delete or anonymise information unless the law requires us to keep it.

Security

We use reasonable security safeguards, including encrypted connections (HTTPS/TLS), role-based access controls, authenticated access to stored files and audit logging. No system is completely secure. Please keep your password confidential and tell us promptly if you suspect unauthorised access to your account. If a personal data breach affects you, we will notify you and the relevant authority as the law requires.

Your rights and choices

Under the DPDP Act, and under the GDPR or similar laws where they apply to you, you may have the right to:

  • access a summary of the personal information we hold about you and how it is used;
  • correct inaccurate or incomplete information, and update or erase information that is no longer needed;
  • request deletion of your information or account;
  • withdraw consent at any time, without affecting processing already carried out;
  • object to or restrict certain processing, and request a portable copy;
  • nominate another person to exercise your rights if you die or become incapacitated;
  • have your grievance addressed and complain to the Data Protection Board of India or another data-protection authority.

Exercising your rights

To exercise these rights, email privacy@v4nextbrick.com from your registered address. For general help with the App, write to support@v4nextbrick.com. We may need to verify your identity, and we will respond within the period required by law. Some project records (for example sealed archive documents and audit trails) may need to be retained for legal or contractual reasons; where we cannot delete them, we will tell you why.

Device controls: you can turn off camera, microphone, location and notification permissions at any time in your device settings.

Deleting your account

Homeowners (including prospective clients) can delete their account themselves in the App: open Profile → Account → Delete account (prospective clients: "Delete my account" on the home screen), read what will be removed, and confirm with your password. You can also ask us to do it by emailing privacy@v4nextbrick.com from your registered address, which is the route to use if you no longer have the App installed. Supervisor and builder accounts are managed by NextBrick, so they are deleted on request through the same email. Full instructions: www.v4devlabs.com/nextbrick/delete-account

What is removed: your sign-in, name, email address, phone number and profile photo; your project brief and preferences; your notifications, push-notification registration and app settings. Your email address and phone number are released, so you may register again later if you wish.

What is kept: records of completed or cancelled projects, such as reports, evidence, payment verification records and the digital project archive, are kept as business and legal records for the periods in section 8. After deletion they are no longer linked to your name or contact details; they show only as belonging to a "Deleted user".

When deletion is not yet possible: if you have a project that is still in progress or on hold, we cannot delete the account in the App until that project is completed or cancelled. Contact privacy@v4nextbrick.com and we will help.

Deletion is permanent and cannot be undone. We aim to complete requests made by email within 30 days.

Children

The App is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. We will post the new version in the App or on our website and update the "Last updated" date. For material changes we will notify you in the App or by email. Continued use after the effective date means you accept the update.

Contact and grievances

For questions, requests or complaints about privacy, contact our Grievance and Data Protection contact:

Response times

We aim to acknowledge complaints promptly and resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.