Privacy Policy

1.1 Account Information (via Google Sign-In)

When you sign in with Google, we receive your Google account name, email address, and profile photo URL. We use this to create and identify your account. We do not store your Google password.

1.2 Location Data

The app uses your device's GPS to display your position on the map, discover nearby Durga Puja pandals within your area, and record pandal check-ins when you are physically present. Location data is processed on-device and only the check-in event (pandal ID + timestamp) is stored on our servers. We do not continuously track or store your GPS coordinates.

1.3 Profile & Activity Data

We store your in-app profile including: display name, experience points (XP), level, coins, badges, visited pandal history, daily login streak, avatar selection, and owned avatar IDs. This data powers your leaderboard ranking, achievements, and personalized experience.

1.4 Chat & Social Data

Messages sent through the in-app friend chat are transmitted via an encrypted Socket.io connection and stored in our Supabase database. Friend relationships (sent/accepted requests) are also stored. We do not read or share your private messages.

1.5 Push Notification Tokens

When you grant notification permission, your Expo push notification token is stored to deliver friend request alerts, chat notifications, and pandal event reminders. You can disable notifications at any time in Settings.

1.6 Device Preferences

Your in-app settings (music, sound effects, haptic feedback, notification preferences) are stored locally on your device using AsyncStorage and are never sent to our servers.

2.1 Core App Functionality

Your data enables core features: finding nearby pandals, tracking pandal visits, awarding coins and XP, computing your level and leaderboard rank, and displaying your personalized avatar across the app.

2.2 Social Features

Your display name, avatar, level, and pandal visit count are visible to other users on the leaderboard and friend profiles. Your email address is never publicly displayed.

2.3 Notifications

We use your push token exclusively to send: (a) friend request alerts, (b) chat message notifications, and (c) daily login reminders. We do not send promotional or third-party marketing messages.

2.4 Analytics & Improvement

We may use aggregated, anonymised usage patterns (e.g., most-visited pandals, feature usage counts) to improve the app. This data cannot be used to identify individual users.

3.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to any third party under any circumstances.

3.2 Service Providers

We share data with the following sub-processors solely to operate the app: • Supabase (database & authentication backend) — stores your profile, messages, and activity. • Google (authentication) — processes your Google Sign-In. • Expo (push notifications) — routes notification delivery. • MapLibre / OpenStreetMap — provides map tiles; no personal data is shared. • OpenRouteService — provides navigation directions between two geographic points.

3.3 Legal Requirements

We may disclose data if required by applicable law, court order, or to protect the safety of our users or the public.

4.1 Account Deletion

You may delete your account at any time from Settings → Delete Account. Upon confirmation, your profile data (name, XP, coins, pandal history, avatars, chat messages, friend list) is permanently erased from our servers within 30 days.

4.2 Inactive Accounts

Accounts that have been inactive for more than 24 months may be automatically archived. You will be notified by email before any archival action.

5.1 Encryption

All communication between the app and our servers uses TLS encryption. Your Google ID token is never stored; it is used once for authentication and discarded.

5.2 Access Controls

Our Supabase database uses Row Level Security (RLS) policies so each user can only read and modify their own data. Administrative access is restricted and logged.

6.1 Age Requirement

Durga Puja Bhromon is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account promptly.

7.1 Access & Correction

You can view and edit your display name in Settings → Edit Display Name. Your profile data (XP, coins, pandals visited) is visible in your in-app profile.

7.2 Data Export

To request a copy of all personal data we hold about you, contact us. We will respond within 30 days.

7.3 Opt-Out

You can disable push notifications in Settings at any time. You can revoke Google sign-in access from your Google account settings.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you in-app. Continued use of the app after changes constitutes acceptance of the updated policy.

For any privacy-related questions or requests, please contact us through the app. App: Durga Puja Bhromon