Privacy Policy

1. Who we are

UtsavMitra is operated by Rajat Mishra, an individual based in Surat, Gujarat, India. For anything concerning your personal information, write to privacy@utsavmitra.co.in.

2. What we collect

Your sign-in account

You sign in to UtsavMitra with your Google, Apple or Facebook account. From the provider you choose we receive only your basic profile — name, email address and profile photo (where the provider shares one) — which we use to pre-fill your UtsavMitra profile for you to review and edit. We never see your password, your contacts, your posts, or anything else from that account. With Sign in with Apple you can hide your real email; the private relay address Apple gives us works exactly the same.

Your account details

• Mobile number — verified once with a one-time password when you register. It is not your login: we ask for it because committees invite members and record chanda by mobile number, so it is how the groups you already deal with find you
• Name — so the members of your groups know who recorded what
• Email address — from your sign-in provider, shown on your profile
• Profile photo — optional, shown to your groups if you add one

We do not ask for your date of birth, your bank details, government identity documents or passwords — and we will never ask you for your OTP.

Your committee's records

Whatever your groups choose to keep in UtsavMitra: memberships and roles, festivals, tasks, chanda entries, expenses, collection targets, group messages, and any photos or receipts members attach. Every one of these exists because a member of your committee entered it.

Details of people you invite or record

To help you invite members or record chanda, the app can show your phone's contact book (with your permission). That list is read on your device so you can pick from it — the only contacts that reach our servers are the ones you actually select or record: their name, their number, and, for collection entries, whatever address or note the collector chooses to write down. Section 4 covers how this information is treated.

Your location — only when you ask, never stored

When creating a group or a collection entry, you can tap “use my location” to fill in the address fields. Your position is read once, turned into address text on your device, and shown to you to edit. The coordinates themselves are never saved and never sent to our servers — only the address text you choose to keep is stored, as part of the group or entry you created.

Technical data

The app contains no advertising software and no analytics trackers used for marketing. It does use Firebase Crashlytics to collect anonymised crash and performance reports — device model, OS version, and technical details of what went wrong — so we can find and fix bugs. These reports never include your name, phone number, or the contents of your messages or ledger entries. You can turn this off anytime in Profile → Settings; the change takes effect on your next app launch. Like any online service, the providers that run our infrastructure (Section 5) process standard connection details — such as your IP address and basic device information — in the course of delivering the service and protecting it from abuse.

3. How we use it

• To run the app: sign-in, groups, festivals, tasks, and the ledger itself
• To connect invites — when someone registers with a number a committee invited, we attach them to that group automatically
• To send notifications about things that concern you: a task assigned to you, chanda recorded in your group, an expense awaiting approval
• To keep the service secure and to fix bugs

We do not sell or rent your information, use it for advertising, or build marketing profiles from it. There are no ads in UtsavMitra.

4. Information about people who don't use the app

Committees write down donors' names — that is what a chanda register is. When a member records a contribution from someone who has no UtsavMitra account, that person's name (and number, if entered) sits in the group's ledger, visible to the group's members, and is used for nothing else.

If your details appear in UtsavMitra and you want them removed, email privacy@utsavmitra.co.in — you do not need an account to make that request, and we will act on it.

5. Who sees your information

• Members of your groups — that is the point of the app. Your name, photo, role and the records you create are visible to the people you plan festivals with. Group organisers decide who joins
• Your sign-in provider — when you sign in with Google, Apple or Facebook, that provider knows you used their sign-in with UtsavMitra, under its own privacy policy. Information flows one way: they give us your basic profile; we send them nothing about what you do in the app
• Our service providers — UtsavMitra runs on Google Firebase, which handles sign-in and verifies your mobile number, and Supabase, which hosts our database and file storage in India (Mumbai region). They process this data to provide their services to us, under their published security and data-protection commitments — we do not permit them to use it for advertising
• The law — we disclose information where a valid Indian legal process requires it

Nobody else. No advertisers, no data brokers, no analytics resellers.

6. Deletion, and what stays

We keep your data for as long as your account exists. When you delete your account — from Profile → Delete Account in the app (immediate), or via utsavmitra.co.in/delete-account if you no longer have it installed — here is exactly what happens:

Removed

• Your profile: name, mobile number, email and photo
• Your login identity — the account can never be signed in to again
• Your notification inbox and any pending invites sent to your number
• Your mobile number is freed, so you could register afresh later

Retained

• Chanda and expense entries in your committees' ledgers, exactly as recorded at the time, including the name and number the collector wrote down. These records belong to the committee — like a page in its paper register — and are kept so its accounts stay complete and auditable
• Messages you sent in group chats, shown as coming from “Deleted User”

Committees can also delete their own records — groups, festivals, entries — through the app, subject to the roles their organiser has set.

Routine encrypted backups of our database may hold a copy of deleted data for a short period before being purged on schedule. Backups exist only for disaster recovery — we never use them to restore something you asked us to delete.

7. How we protect it

• Sign-in is through your Google, Apple or Facebook account — UtsavMitra never sees or stores a password. Your mobile number is proven once with a one-time password; after that, no OTP is ever needed to log in
• Data travels encrypted (TLS). Database records are protected by per-group access rules on the server: members of one group cannot read another group's records
• Photos and files you upload are stored at unlisted, practically unguessable addresses. Treat anything you upload as visible to your group, and don't upload documents more sensitive than festival work needs
• We ourselves access personal data only to operate the service, fix problems, or act on your requests

No system is perfectly secure. If a breach ever puts your personal data at real risk, we will tell you what happened and what we are doing about it.

8. Your choices and rights

• See and correct your details any time at Profile → Edit Profile
• Delete your account as described in Section 6
• Ask us — for a copy of your personal data, a correction, or removal of details entered about you — at privacy@utsavmitra.co.in. We aim to respond within 7 days

These rights sit alongside those in India's Digital Personal Data Protection Act, 2023. The grievance contact for anything in this policy is the same address: privacy@utsavmitra.co.in.

9. Children

UtsavMitra accounts are for adults — you must be 18 or older, the same rule as our Terms of Service. We do not knowingly collect personal information from anyone under 18; if you believe we have, tell us and we will delete it.

10. Changes to this policy

The date at the top always shows the current version. If a change materially affects how your information is handled, we will say so in the app before it takes effect.

11. Getting in touch

• Privacy, data and deletion requests — privacy@utsavmitra.co.in
• General and support — support@utsavmitra.co.in