Privacy Policy

#1. Who we are

SAFAI is a doorstep waste-collection service operated by ECOSNAP Software Developer Private Limited ("SAFAI", "we", "us" or "our") in partnership with Municipal partner, if any. We run two mobile apps:

• SAFAI, for households that use the collection service ("residents").
• SAFAI Collector, for the waste-collection staff who visit those households ("collectors").

For the personal data described in this policy, ECOSNAP Software Developer Private Limited is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

By using our apps you agree to the practices described here. If you do not agree, please do not use the apps.

#2. Information we collect

We collect only what we need to run doorstep collection, credit points and keep the service safe.

A. Your account (residents)

• Mobile number: used to sign you in and to identify your account.
• Name, and optionally an avatar or a profile photo.
• Your relationship to the household (for example self, spouse or tenant), if you choose to add it.
• Preferences: app language (English or Hindi), pickup reminders, and whether your household appears on the leaderboard.

B. Your household and address

• Household name, emblem, type (family, shared flat, PG or hostel, or single) and the number of people.
• Address: house number, street, city and PIN code, and the ward and colony we match it to.
• Members and their roles (owner or member), the household's invite code, and requests to join.
• Areas where you asked to be told when SAFAI starts.

C. Pickup records

• Each collection: the date and time, the weight of plastic, organic and general waste, how well it was separated, and the collector who recorded it.
• Photos a collector takes as evidence of a pickup or of a missed stop, and the reason a stop was missed.
• Whether your household is "Ready for SAFAI", your points, and your leaderboard position.

D. Reports and address claims

• Issue reports you send (for example a missed pickup or a wrong weight), with any note and photo you add, and the replies from the ward team.
• If you report that a household was registered at your address by someone else, the claim, your reason and note, and the proof document you upload (a photo or PDF). Proof documents are kept in private storage and are seen only by authorised staff reviewing the claim.

E. Collectors

Collectors' accounts are created by authorised administrators. For collectors we hold:

• Employee ID, name, mobile number, ward, supervisor, shift timings and cart details.
• Shift start times and online or offline status.
• Pickups, missed stops, photos and the daily, weekly and monthly work log.
• Location at the moment a household is verified, if location permission is granted, to confirm the visit took place at the right place. The app does not track location in the background or between stops.

F. Device and technical information

• A push-notification token, so we can send you notifications.
• Device type, operating system and app version, which we check to keep the app compatible and secure.
• Sign-in session details, and server logs (such as IP address and request times) used for security, troubleshooting and preventing abuse.

What we do not collect

We do not collect payment card details, your contacts, background location, or health information. The apps contain no advertising and no advertising trackers.

#3. How we use your information

• To create and secure your account, and to sign you in with a one-time code.
• To check whether we serve your address and to place your household on the right ward and collection route.
• To let collectors verify your household at the door and to record each pickup accurately.
• To calculate points and show your household's history and leaderboard position.
• To send notifications about pickups, join requests, reports and service changes.
• To investigate and resolve reports, address claims and disputes about weights.
• To plan collection routes and measure the service's performance using combined, non-identifying statistics.
• To detect and prevent fraud, misuse and unauthorised access.
• To meet legal, regulatory and record-keeping obligations.

We use your information only for these purposes. We do not use it for advertising or sell it to anyone.

#4. App permissions

Each permission is requested only when the feature that needs it is used. You can change them at any time in your device settings, though some features will not work without them.

• Camera: collectors use it to scan household QR codes and take pickup photos. Residents can use it to photograph an issue, take a profile photo or capture a proof document.
• Photos and files: to attach an existing photo or PDF to a report, profile or address claim.
• Location (SAFAI Collector only): to record where a household was verified. Location is captured only at that moment.
• Notifications: to tell you about pickups, requests and updates.

#5. Who can see your information

Within the SAFAI service, information is shown only to the people who need it:

• Members of your household see each other's names, avatars or photos, roles and contribution to the household's total.
• A household owner sees the name, photo and mobile number of anyone who asks to join, so they can decide whether to approve the request.
• Your collector sees your household's name, address, collection status and readiness for pickup. Collectors do not see residents' mobile numbers.
• Other residents see your household's name, emblem and the weight collected on the leaderboard, unless you turn leaderboard visibility off in your profile.
• Authorised ward and SAFAI administrators can see the records needed to run the service, manage routes and resolve reports and claims.

#6. Service providers and legal disclosures

We share information outside SAFAI only in these cases:

• Service providers who run parts of the service for us, under contracts that require them to protect it and use it only on our instructions: cloud hosting and storage (Hosting provider), SMS delivery of one-time codes (SMS provider) and push notifications (Push provider, e.g. Firebase Cloud Messaging).
• Apple and Google, which distribute the apps and handle their downloads and updates under their own privacy policies.
• Authorities, when the law requires it, or when necessary to protect the rights, safety or property of our users, staff or the public.
• A successor organisation, if the service is transferred, under the same protections described in this policy.

We do not sell, rent or trade personal data.

#7. Where your data is stored and how we protect it

Your data is stored on servers located in Country / region of hosting, e.g. India. We protect it with measures that include:

• Encryption of all data travelling between the apps and our servers (HTTPS).
• Private storage for proof documents and photos, with access limited to authorised staff.
• Sign-in by one-time code, short-lived access tokens and sessions that expire. Signing in on a new device ends the session on the old one.
• Role-based access for administrators, and records of administrative actions.

No method of storage or transmission is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and the affected users as the DPDP Act requires.

#8. How long we keep your information

• Your account is kept while you use SAFAI.
• When you delete your account, we delete your profile and sign-in details and end all of your sessions. Pickup records stay with the household as part of its history, but are no longer linked to you.
• Reports and address claims, including proof documents, are kept for retention period, e.g. 12 months after they are resolved, so that decisions can be reviewed, and then deleted.
• Collector records are kept for as long as the employing organisation requires them for work and payroll records.
• Security and server logs are kept for up to log retention, e.g. 90 days.

We may keep information for longer where the law requires it.

#9. Your rights and choices

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how it is used.
• Correct or update inaccurate or incomplete information.
• Erase your data, subject to the record-keeping described above.
• Withdraw consent at any time. This does not affect anything done before you withdrew it, but you may no longer be able to use the service.
• Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied with our response.
• Nominate a person to exercise these rights on your behalf in the event of your death or incapacity.

You can do much of this yourself in the app: edit your profile, change your mobile number, turn off leaderboard visibility or notifications, or delete your account from Profile → Delete account. You can also request deletion on the web at Account deletion request URL, or write to our Grievance Officer (section 12). We respond within response time, e.g. 30 days.

#10. Children

SAFAI is intended for people aged 18 or over. A person under 18 may be added to a household only with the consent of a parent or lawful guardian, who is responsible for their use of the app. We do not knowingly collect personal data from children without that consent. If we learn that we have, we will delete it.

#11. Changes to this policy

We may update this policy when the service or the law changes. We will post the new version here with a new effective date and, for significant changes, notify you in the app before they take effect. Using the apps after a change means you accept the updated policy.

#12. Contact us and Grievance Officer

If you have a question, a request or a complaint about your personal data, please contact our Grievance Officer:

• Name: Grievance Officer name
• Email: [email protected]
• Phone: +91 97208 50888
• Address: ECOSNAP Software Developer Private Limited, 2/7 Judges Compound, Nehru Nagar, Agra, Uttar Pradesh 282002, India

We will acknowledge your request within acknowledgement time, e.g. 48 hours and respond within response time, e.g. 30 days.