Privacy policy

Who we are

LineUp is a virtual queue service operated in India. Two different kinds of people use it, and the difference matters throughout this document:

• Businesses — a clinic, salon or counter that runs its queue with LineUp.
• Customers — someone holding a place in one of those queues.

For customer data, LineUp is the data fiduciary and the business is a recipient of the parts it needs to serve you. For a business's own staff and account data, LineUp is the fiduciary directly.

What we collect from customers

What	Why	Required?
Phone number	To prove a queue place belongs to you, and to sign you in	Yes
Name	So staff can call you by it instead of a number	No — a queue works with a token alone
Email	Only if you give one	No
Your queue activity	Which business, which queue, when you joined, when you were served	Created by using the service

We do not ask for your address, your date of birth, your ID, or any reason for your visit. A clinic knows why you are there; LineUp does not, and does not want to.

What we collect from businesses

Account and contact details for the business and its staff, the queues and stations they configure, and their billing history. Staff sign in with an email address and a password.

Who can see your data

The business you are visiting

They see your name if you gave one, your phone number, and your place in their queue. They see nothing about any other business you have used — not that you used one, not when.

Other customers

Nothing. A position in a queue is a count, never a list. When your phone says “3rd in line”, that number was calculated on our servers and only the number was sent. No other customer's name, number, or presence is ever sent to your device, and yours is never sent to theirs.

Service providers

We use a small number of third parties, and only for things we cannot do ourselves:

• An SMS provider, to send the one-time code that signs you in. They receive your phone number and the code.
• Hosting and analytics, which process technical logs — pages requested, error traces, timings.

We do not sell your data, we do not share it for advertising, and we do not run advertising trackers on the product.

How long we keep it

Your account lasts as long as you keep it. Queue records are kept so that a business can account for its own trading history — how many people it served, and when.

If you delete your account

Your account, your phone number, your name and your email are deleted. The record that a business served somebody on a given day remains, with your identity detached from it. This is deliberate rather than an oversight: a business must be able to account for its own day, and once your details are removed that record is no longer about you.

Your rights

Under the Digital Personal Data Protection Act 2023 you can ask us to:

• tell you what we hold about you, and who we have shared it with;
• correct anything that is wrong;
• delete your account and your personal details, subject to the section above;
• nominate someone to exercise these rights if you cannot.

Ask, and we will do it. We will not make you prove a reason, and we will not charge you for it.

Security

Sign-in uses a one-time code sent to your phone rather than a password you have to remember and reuse. Codes are short-lived, are stored only as a hash, and are destroyed after a small number of wrong attempts. Session credentials are held in cookies your browser will not let a page read.

The link to your ticket contains a secret. Treat it like a ticket — anyone you forward it to can see your place in the queue.

Children

LineUp is not intended for children. A parent or guardian holding a place on a child's behalf should use their own account.

Changes

If we change this policy in a way that affects what we collect or who sees it, we will say so on this page and date it. The date at the top is the version you are reading.