Privacy Policy & Data Safety

1. Introduction

This Privacy Policy explains how Dhurmit ("we", "us", "our", or "the App") collects, uses, encrypts, and protects your information when you use our mobile application on Android and our associated web services.

By creating an account, onboarding as a committee organizer, or joining as a member, you agree to the practices outlined in this policy.

2. Google Play Store Data Safety Declaration

In compliance with Google Play Store User Data and Developer Program policies, we declare the following parameters regarding user data:

• Data Encrypted in Transit: Yes. All communications between your mobile device and our synchronization backend are protected using industry-standard TLS 1.3 encryption (HTTPS).
• Data Encrypted at Rest: Yes. Local databases on Android are secured using Android Keystore and platform-level sandboxing (AES-256).
• User Deletion Mechanism: Yes. Users can delete their account and associated data either directly in the app (Settings > Account & Security) or online via our dedicated web portal at /delete-account/.
• Zero Data Brokerage: We never sell, rent, monetize, or trade your personal or committee data to advertising networks or data brokers.

3. Information We Collect

A. Information You Directly Provide

• Organizer Account Information: When you register as an organizer, we collect your name, email address, and a securely salted and hashed password.
• Member Roster Information: Organizers input member names and optional mobile phone numbers so the committee ledger can differentiate individual obligations and generate WhatsApp statements.
• Ledger & Contribution Records: Numerical contribution amounts, cycle dates, payment status (Paid on Time, Paid Late, Overdue, Partial, Upcoming), and notes. All monetary values are recorded purely as administrative records. We never collect bank account login credentials, credit card numbers, debit card numbers, or CVVs.

B. Automatically Collected Information

• Device & Diagnostics: Android OS version, device model, app version (e.g. v1.0.0), and crash logs to troubleshoot synchronization issues and prevent crashes.
• Approximate Location (Country Selection): During onboarding, the app queries open geocoding services (such as OpenStreetMap Nominatim) to automatically set your local currency symbol, time zone, and regional calendar format. We do not track continuous GPS coordinates.

4. How We Use Your Information

We process your data strictly to fulfill core app functionality:

• To calculate accurate committee rotation pots, member balances, and FIFO arrears allocations with zero floating-point math errors.
• To synchronize committee changes between offline SQLite storage and our cloud ledger when you reconnect to the internet.
• To generate pre-formatted, organizer-approved WhatsApp and SMS payment receipts and upcoming due notices.
• To authenticate and safeguard your account against unauthorized access.

5. Operational Boundaries (Zero Custodial Liability)

Dhurmit is solely an administrative software utility. Dhurmit is not a bank, non-banking financial company (NBFC), escrow agent, or payment service provider. We do not handle fiat cash, custody savings pools, or conduct wire transfers. All financial settlement occurs peer-to-peer between committee participants outside of the software.

6. Third-Party Service Providers

We rely on trusted technical infrastructure partners who adhere to rigorous data protection standards:

• OpenStreetMap (Nominatim): Used for reverse geocoding during onboarding to detect regional currency and time zone formatting.
• Cloud Infrastructure: Secure cloud servers with SOC 2 / ISO 27001 certifications hosting encrypted PostgreSQL databases and API services.
• Google Play Services: Required for application distribution, secure updates, and optional crash telemetry.

7. Data Retention & Erasure

We retain personal data only for as long as your account remains active. When an account deletion is requested:

1. Your personal credentials, name, email, and device tokens are permanently purged.
2. In shared multi-party committees, historical transaction amounts are anonymized (e.g. marked as "Former Member") to prevent disrupting other participants' mathematical reconciliation.
3. Solo or private workspaces are erased completely.

8. Children's Privacy

Dhurmit is designed for adult financial coordinators and community organizers. We do not knowingly collect personal information from individuals under the age of 18 (or the applicable age of majority in your jurisdiction).

9. Changes to This Privacy Policy

We may update this policy periodically to reflect feature additions or regulatory revisions. Any material modifications will be announced through in-app notices or updated on this web page.

10. Contact Us & Grievance Redressal

If you have questions, feedback, or data privacy requests, please contact our Data Protection Officer: