Privacy Policy

We collect information that you voluntarily provide when registering, completing your profile, or using community features.

When you create an account or update your profile, we collect:

• Full name (first name, middle name, surname)
• Date of birth, gender, and blood group
• Marital status
• Profile photograph
• Community member ID and membership type
• Mobile number (primary and alternate)
• Email address and WhatsApp number

To maintain the community directory, we store:

• Membership status (active, pending, suspended)
• Community role (member, committee, president, etc.)
• Joining date and membership type (regular, life, honorary, associate)
• Native village, taluka, district, and state
• Education qualifications and occupation details
• Community identifiers (atak)

We collect family information to build the community family directory:

• Father's name, mother's name, grandfather's name
• Spouse name
• Children details (name, age, gender)
• Family relationships and family ID within the community

Family information is visible only to verified community members and subject to your privacy settings.

Purpose: To capture profile photographs directly from your device camera.

Usage: Only activated when you explicitly tap the camera icon to update your profile picture. We do not access the camera in the background or for any other purpose.

Storage: Captured photos are uploaded to secure cloud storage and displayed as your profile image.

Purpose: To allow selection of existing photos from your device gallery for use as a profile picture.

Usage: Accessed only when you explicitly choose to pick a photo from your gallery. We do not scan, index, or access other files on your device.

Scope: Read-only access limited to user-selected images.

Purpose: To deliver community announcements, event reminders, and important updates.

Types of notifications:

• Community notices and announcements
• Event reminders and RSVPs
• Membership approval status updates
• Emergency community alerts

You can disable notifications at any time through your device settings or the app's notification preferences.

Purpose: Required for all core app functionality.

Usage:

• User authentication and session management
• Syncing profile data with cloud servers
• Loading member directory and family data
• Fetching community events, notices, and polls
• Uploading profile photographs

All network communication uses HTTPS/TLS encryption.

We may collect limited device information for service reliability:

• Device type and operating system version (for compatibility)
• App version number (for update notifications)
• Network connectivity status (to provide offline indicators)

We do not collect device identifiers (IMEI, advertising ID) or location data.

We collect anonymized usage analytics to improve the app:

• Feature usage patterns (which sections are most visited)
• App crash reports and error logs
• Session duration and navigation patterns

Analytics data is aggregated and cannot be used to identify individual users. We do not use third-party advertising trackers.

We implement industry-standard security measures to protect your data:

• Encryption in transit: All API communication over HTTPS/TLS 1.3
• Encryption at rest: Database encryption for stored personal data
• Authentication: JWT-based secure tokens stored in device secure storage
• Password protection: Bcrypt hashing with salt rounds
• Access control: Role-based permissions (member, admin, super admin)
• Infrastructure: Hosted on SOC 2 compliant cloud providers
• Monitoring: Regular security audits and vulnerability scanning

We do not sell, rent, or trade your personal data. Information may be shared in these limited cases:

• Within the community: Your profile is visible to verified members per your privacy settings
• Administrators: Community admins can view member data for management purposes
• Service providers: Cloud hosting (Supabase, Render, Vercel) under strict data processing agreements
• Legal requirements: When required by law, court order, or government regulation

We do not share data with advertisers or marketing companies.

• Active accounts: Data retained for the lifetime of the account
• After deletion request: Personal data permanently deleted within 30 days
• Backup systems: Purged within 90 days of deletion
• Legal holds: Data required for legal compliance retained as mandated
• Anonymized data: Aggregate statistics may be retained indefinitely

You can delete your account and all associated data:

• In-app: Profile → Account Settings → Delete Account
• Via email: Send request to privacy@sathvaracommunity.org

Upon deletion, all personal data is permanently and irreversibly removed. See our Data Deletion Policy for full details.

You have the following rights regarding your personal data:

• Right to Access: Request a copy of all data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data via your profile
• Right to Erasure: Request permanent deletion of your data
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Revoke consent at any time without affecting prior processing

To exercise any of these rights, contact us at the email below.

Our application is intended for users aged 13 and above. We do not knowingly collect data from children under 13. If we learn we have inadvertently collected such data, we will delete it promptly.

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Material changes will be communicated via app notification. Continued use after changes constitutes acceptance.