Project X
Privacy
Mobile APIs return only the fields a screen needs.
The phone signs in with Google. The session token lives in secure storage and is attached by the app, not typed into this website.
Customer and vendor APIs are allowlisted: storefronts expose what you need to call, chat, or navigate — not Aadhaar numbers, payout details, other users’ email, or device tokens. Helper matches (name, distance, phone, help tags) appear only after a valid help request.
Staff who operate the console use a separate username. Theme and catalog caches are public-ish and versioned; personal help tickets and live ads are not long-lived cache.