Privacy policy

Last updated: 15 September 2026

What we collect

When you sign in with Google, we receive and store:

• Your Google account ID (a stable identifier called sub).
• Your email address.
• A per-device identifier you generate the first time you open the app.

When you lock a gata, we record: the gata identifier, the village name and district/tehsil/halka/fasal codes, the timestamp, the reporting device, and the matching credit-ledger entry. This is the audit trail behind per-lock charges. We also store basic device information (manufacturer, Android version, and app version) to diagnose reliability issues, and — if entered at sign-in — an optional referral code. We do NOT send your eKhasra portal password or Bearer token to our servers, and we do not store survey-response contents there. If you enable “Remember my password”, the password is stored only on your phone in Android Keystore-backed secure storage until you forget it or sign out. In the AgriStack auto-verification feature, your phone number, password, CAPTCHA, OTP, portal session, survey details, images, and filters stay inside the embedded UP DCS AgriStack portal. For billing and duplicate-charge prevention, our server receives only a one-way, per-account hash representing the approved survey, the approval timestamp, and the reporting device; it cannot use that hash to read the survey or identify the farmer.

Why we collect it

To sync your credit balance across the phones you use, to bill at the same per-unit rate for each successfully locked gata or approved AgriStack survey, and to detect duplicate reports from multiple devices (so you are never charged twice for the same action).

Who we share with

We do not sell your data. Service providers process limited data only to operate features you request: Google verifies sign-in; Cloudflare hosts the app, API, database and logs; Expo delivers app updates; the UP eKhasra portal receives the survey actions you submit; the UP DCS AgriStack portal receives the image reviews and survey approvals you authorize; and WhatsApp or your UPI/payment app receives information only when you choose to open those services.

Retention

Your account stays until you delete it. Tap Settings → Delete account in the app to soft-delete your user record. Billing audit rows for gata locks and AgriStack approvals are retained for legal/audit purposes; future versions of the app will support full hard-deletion after a retention window.

Your rights under the DPDP Act, 2023

You can:

• See what data we have on you (email us — see below).
• Correct inaccurate information.
• Delete your account (in-app, immediate soft-delete).
• Withdraw consent (delete your account; future sign-ins will create a new record).

Grievance contact

For any privacy concerns, contact the operator at sugamgyan@gmail.com. We aim to respond within 7 days.