ThorOne — Heavy Equipment Platform
ThorOne is a mobile application operated by Vanrock Heavy Industry that connects licensed heavy equipment operators (Backhoe Loader drivers) with contractors who need to hire them for construction work.
By downloading, installing, or using ThorOne, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please do not use the application.
We collect information in three ways: directly from you, automatically during app use, and from third-party services you connect to.
| Data | Purpose |
|---|---|
| Full Name | First and last name provided during registration for account identification. |
| Mobile Number | Used for OTP-based authentication and account identification. |
| Email Address | Account communication and optional social login linkage. |
| Profile Photo | Optional for Contractors. Required for Operators as part of KYC. |
| Login Method | Google Sign-In, Apple Sign-In, or Phone OTP — managed via Firebase Authentication. |
| Home / Business Address | Collected during registration to serve the correct city. |
| Data | Purpose |
|---|---|
| Date of Birth | Optional field collected during registration. |
| Construction Site Details | Site name, site address, vehicle type, and preferred working hours — provided when posting a job. |
| Site Location (Map) | Precise map pin for the construction site, chosen within the app. |
Operators undergo full KYC before accepting jobs. The following is collected:
| Data | How It Is Used |
|---|---|
| Precise GPS Location | Collected from Operators ONLY during an active, accepted job. Stops immediately when the job ends. Never collected in the background. |
| Device Information | Device model, OS version, and unique device identifiers as required by Firebase SDK. |
| IP Address | Collected automatically for security and fraud prevention. |
| App Usage Data | Screen events and interactions via Firebase Analytics to improve performance. |
| Crash & Diagnostics | Error logs collected via Firebase Crashlytics to diagnose and fix issues. |
| Service | Purpose |
|---|---|
| Firebase Authentication | OTP login, Google Sign-In, and Apple Sign-In session management. |
| Firebase Analytics | Aggregate app usage patterns. Not used for advertising targeting. |
| Firebase Cloud Messaging | Push notifications for job alerts, KYC status, and contract events. |
| Firebase Crashlytics | Crash reports and diagnostics to improve app stability. |
Firebase is a service of Google LLC. Data collected by Firebase is governed by Google's Privacy Policy at policies.google.com/privacy. We do not use any advertising SDKs, tracking SDKs, or analytics services beyond Firebase.
We use personal information only for purposes necessary to operate ThorOne. We do not use your data for advertising or cross-app profiling.
| Purpose | Detail |
|---|---|
| Account & Authentication | Create and maintain accounts, verify identity, and authenticate login sessions. |
| KYC Verification | Review, validate, and approve Operator identity and vehicle documents within 24–48 hours. |
| Job Matching | Display available operators near the contractor's chosen construction site. |
| Real-Time Location Tracking | Track Operator GPS only during an active, accepted job. Tracking stops when the job ends. |
| Push Notifications | Send Operators job alerts, KYC status updates, and contract confirmations. |
| Analytics & Improvement | Understand user interactions to improve features, fix bugs, and enhance usability. |
| Safety & Fraud Prevention | Detect and prevent fraud, unauthorised access, and platform misuse. |
| Legal Compliance | Comply with applicable Indian law and enforce Terms of Service. |
| Work Hours Reporting | Accurately record working hours and break times so contractors can verify hours worked. |
Precise GPS location is collected from Operators only — never from Contractors.
iOS: We request "While Using the App" permission only — not "Always" access.
Android: We request ACCESS_FINE_LOCATION during active job sessions only.
We collect government-issued identity documents (Aadhaar Card, Driving Licence) and vehicle regulatory documents exclusively from Operators as part of mandatory KYC. We treat this data with heightened care:
We use Firebase Cloud Messaging to send push notifications for the following purposes only:
You may manage notification preferences within the app settings or through your device's notification settings. Disabling notifications may affect your ability to receive timely job alerts.
We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:
| Recipient | What Is Shared & Why |
|---|---|
| Firebase (Google LLC) | Processes data on our behalf for authentication, analytics, messaging, and crash reporting. Acts as a data processor under agreement with Google. |
| ThorOne Verification Team | Our internal KYC team accesses Operator documents solely to verify identity and vehicle documents. Access is restricted and logged. |
| Contractor–Operator Match | When an Operator accepts a job, their name, profile photo, and live location are shared with the corresponding Contractor during the active job only. |
| Government / Legal Authorities | We may disclose data when required by applicable Indian law, court order, or lawful request from a government authority. |
| Business Transfer | If ThorOne is involved in a merger or acquisition, user data may be transferred. Users will be notified before such transfer. |
| Data Type | Retention Period |
|---|---|
| Account Data | Retained while account is active. Deleted within 30 days of a valid account deletion request. |
| KYC Documents | Retained for Operator's active period plus up to 5 years for regulatory compliance. |
| Location Data | Real-time location is not persistently stored. Job-duration logs deleted within 90 days of job completion. |
| Analytics & Crash Data | Aggregated and anonymised — may be retained longer as it cannot be linked to an individual user. |
| Job Records | Retained for 2 years to support dispute resolution and work-hours verification. |
Under applicable Indian law (including the Digital Personal Data Protection Act, 2023), you have the following rights:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your account and associated data, subject to legal retention requirements.
Withdraw consent for location tracking at any time by adjusting app permissions or contacting us.
Raise a concern with our Data Protection Officer. We respond within 30 days.
To exercise any right, email support@thorone.com. We may request identity verification before processing your request.
In compliance with Apple App Store Guideline 5.1.1(v) and Google Play policy, you can delete your account directly from within the app.
ThorOne requests only the permissions necessary to deliver its core functionality. Each is requested at the appropriate moment with a clear explanation.
Precise GPS during accepted, active jobs only. Not accessed in background or when no job is active. iOS: "While Using" only.
Job alerts, KYC status updates, and contract confirmations. Can be disabled in device settings.
Upload profile photo and KYC document images. Used only when you initiate an upload action.
Required to connect to ThorOne servers, authenticate your account, and sync job data.
We do not access your contacts, microphone, calendar, or any other device feature beyond those listed above.
ThorOne is a professional platform intended exclusively for adults aged 18 years and above. We do not knowingly collect personal data from anyone under the age of 18. The platform involves commercial vehicle operation and legally binding employment contracts — activities restricted to adults under Indian law.
If we become aware that a person under 18 has provided us with personal data, we will immediately delete that information. If you believe a minor has registered on ThorOne, please contact us at support@thorone.com.
We may update this Privacy Policy from time to time. When we make material changes, we will:
Your continued use of ThorOne after changes constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.
For any questions, concerns, or requests relating to your personal data, please contact our Data Protection Officer:
If you are unsatisfied with our response, you may lodge a complaint with the appropriate Indian data protection authority as established under the Digital Personal Data Protection Act, 2023.