Privacy Policy

1. Account details

• Your name, email address and role, set up by an administrator.
• Your password, which is stored only in hashed form.

2. Sign-in and device information

Each time you sign in, we record:

• An app-generated device ID (a random value created on install — not your phone’s IMEI or hardware ID).
• Device make and model, platform (Android or iOS), OS version and app version.
• Your location at sign-in, if location access is allowed, and whether it came from a mock-location app.
• IP address, sign-in time, last activity and sign-out time.

3. Visit information

When you record a visit, we collect:

• Your precise location (latitude, longitude and accuracy), and your distance from the school or book store.
• Whether the location came from a mock-location app.
• A selfie taken with the front camera at that moment.
• Your notes, the time of the visit and the device details listed above.

4. Work records

• Schools and book stores you add or edit, including their contact details and location.
• Follow-ups you schedule and complete.
• Expense claims: date, type, amount, notes and linked visits, along with approval and payment status.

5. Permissions the app asks for

• Location — to record where sign-ins and visits happen, confirm you are at the visited place, and show schools and stores near you. Location is read only while you are using these features, never in the background.
• Camera — to take the visit selfie. Photos are taken only when you tap, are not saved to your gallery, and the app does not access your existing photos.

You can change these permissions at any time in your phone’s settings. Without them, recording visits will not work.

6. How we use your information

• To sign you in and keep your account secure.
• To verify attendance at schools and book stores, and to detect faked locations.
• To manage schools, book stores, follow-ups and visit history.
• To review, approve and pay expense claims.
• To produce reports for managers and administrators.

We do not use your information for advertising, and we do not sell it.

7. Who can see it

Your information is visible only to authorised Sahitya Kutir administrators and managers, according to their role. We do not share it with third parties, except when required by law, or with service providers such as our hosting provider who store it on our behalf.

8. How long we keep it

• Visit selfies are automatically deleted 30 days after the visit. The visit record itself is kept.
• Sign-in history, visits, work records and expense records are kept for as long as needed for business, accounting and legal purposes.
• On your phone, the app stores only your sign-in token, basic profile and device ID. Signing out removes the token.

9. Security

Data is sent to our servers over an encrypted (HTTPS) connection. Access requires a signed-in session, sessions expire daily, and administrators can revoke any session. Selfies are stored privately and can be viewed only by authorised administrators.

10. Your rights

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you may ask to access or correct your personal information, or raise a concern about how it is handled. Some records must be kept for business or legal reasons even after your account is deactivated.

11. Children

The app is meant for staff only and is not directed at children. We do not knowingly collect personal information from children through the app.

12. Changes to this policy

We may update this policy when the app changes. The date at the top shows when it was last updated.

13. Contact

For privacy questions or requests, contact your manager or the Sahitya Kutir office.