1. Introduction Karwaan Technologies ("we", "us", or "our") operates the Karwaan mobile application ("App"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our App. By using the App, you consent to the practices described in this Policy. This Policy is compliant with India's Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.
2. Information We Collect 2.1 Information you provide directly: • Full name • Mobile phone number (verified via OTP) • Email address • District and village • Profile photo / avatar • Aadhaar Card number and a scanned copy (for KYC verification only) • Orchard details (for Growers): orchard name, area, tree count, apple variety • Professional details: trade, skills, experience, rates, bio 2.2 Information collected automatically: • Device information (device model, OS version) • Push notification tokens • App usage data and logs 2.3 Location information: We collect your geographic location (latitude/longitude) only when you explicitly choose to use the "Use my current location" feature. We do not track your location in the background.
3. How We Use Your Information We use the information we collect to: • Create and manage your account. • Verify your identity and process KYC. • Connect Growers, Professionals, and Clients on the platform. • Send push notifications about job updates, bookings, and platform alerts. • Improve the App's features and user experience. • Comply with legal obligations. • Detect and prevent fraud or misuse of the platform.
4. Sensitive Personal Data We treat the following as Sensitive Personal Data (SPDI) under Indian law: • Aadhaar Card number and copy • Financial information (if applicable in future payment features) Sensitive Personal Data is: • Collected only with your explicit consent. • Stored with encryption at rest. • Accessible only to authorised personnel on a need-to-know basis. • Never sold or shared with third parties for marketing purposes. • Retained only as long as necessary for the purpose it was collected, or as required by law.
5. Third-Party Services We use the following third-party services which may process your data: Firebase (Google LLC): Used for phone number authentication via OTP and push notifications. Governed by Google's Privacy Policy. Google Sign-In: If you choose to sign in with Google, we receive your Google account name and email address. We do not receive your Google password. Render (cloud hosting): Our API servers are hosted on Render's infrastructure. Data is stored in encrypted databases. We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.
6. Data Storage and Security Your data is stored on secure servers. We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include: • Encrypted connections (HTTPS/TLS) for all data in transit. • Encrypted storage for sensitive documents. • Access controls limiting who can view personal data. • Regular security reviews. No system is 100% secure. If you suspect a security breach, contact us immediately at [email protected].
7. Data Retention We retain your personal data for as long as your account is active, or as long as necessary to provide our services. KYC documents are retained for the minimum period required by applicable law. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law.
8. Your Rights Under applicable Indian law, you have the right to: • Access — Request a copy of the personal data we hold about you. • Correction — Request correction of inaccurate or incomplete data. • Deletion — Request deletion of your personal data (subject to legal obligations). • Withdraw consent — Withdraw consent for processing of sensitive personal data at any time. To exercise these rights, contact us at [email protected]. We will respond within 30 days.
9. Children's Privacy The App is not intended for children under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a child under 18 has provided us personal data, we will delete it promptly. If you believe a minor has used our App, please contact us at [email protected].
10. Cookies and Tracking The App itself does not use browser cookies. The App may use anonymous analytics to understand app usage patterns. No personally identifiable information is used for tracking or advertising purposes.
11. Push Notifications We send push notifications to inform you about job updates, bookings, messages, and platform announcements. Notification tokens (device identifiers) are stored on our servers and shared with Firebase solely to deliver notifications. You can disable notifications at any time from the App's notification settings or your device settings.
12. Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any material changes through the App or via email. Your continued use of the App after such notification constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.
13. Grievance Officer In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are: Karwaan Technologies Email: [email protected] The Grievance Officer shall acknowledge the complaint within 24 hours and resolve it within 15 days of receipt.
14. Contact Us For any questions, concerns, or requests regarding this Privacy Policy, please reach us at: Karwaan Technologies Email: [email protected]