GujjuGarba

 # Privacy Policy for GujjuGarba

**Effective Date:** April 28, 2026  
**Last Updated:** April 28, 2026

---

## 1. Introduction

Welcome to **GujjuGarba** ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, store, and share your personal information.

This Privacy Policy explains:
- What data we collect and why
- How we use your data
- Your rights and choices
- How we protect your information
- How to contact us

By using the GujjuGarba mobile application (the "App"), you agree to the collection and use of information in accordance with this policy.

---

## 2. Information We Collect

### 2.1 Information You Provide Directly

**Account Information:**
- Name
- Mobile phone number
- Email address (optional)
- Profile photo (optional)
- Date of birth (for age verification)

**Booking & Event Information:**
- Event bookings and pass purchases
- Payment transaction details (processed securely through Razorpay)
- Booking preferences and history

**Garba Class Information (for Class Owners):**
- Business name and details
- Branch locations and contact information
- Employee information (names, roles, contact details)
- Class schedules and pricing

**User-Generated Content:**
- Garba reels and competition videos you upload
- Comments and interactions on content
- Chat messages with other users
- Photos and videos you share

### 2.2 Information Collected Automatically

**Device Information:**
- Device model and operating system version
- Unique device identifiers
- Mobile network information
- Device settings and preferences

**Usage Information:**
- App features you use and how you interact with them
- Time spent on different screens
- Search queries within the app
- Error logs and performance data

**Location Information:**
- **Precise Location (GPS):** We collect your precise location when you:
  - Search for nearby Garba events or classes
  - Book events based on location
  - Use location-based features
  - *Note:* Location access is requested only when needed (foreground use) and you can deny or revoke this permission at any time through your device settings.

**Camera & Media Access:**
- Camera access for:
  - QR code scanning (for pass validation)
  - Uploading profile photos
  - Recording and uploading Garba reels/videos
- Photo library access for selecting existing photos/videos to upload

### 2.3 Information from Third-Party Services

**Social Login Information:**
- When you sign in with **Google**: We receive your name, email address, and profile picture from Google
- When you sign in with **Truecaller**: We receive your phone number, name, and profile information from Truecaller

**Payment Information:**
- Payment transactions are processed by **Razorpay Payment Gateway**
- We do NOT store your complete credit/debit card numbers or CVV
- We receive transaction status, payment ID, and order details from Razorpay

**Firebase Services:**
- We use Firebase for push notifications and authentication
- Firebase may collect analytics data including app usage patterns
- Push notification tokens for sending event updates and booking confirmations

---

## 3. How We Use Your Information

We use the collected information for the following purposes:

### 3.1 Core App Functionality
- Create and manage your user account
- Process event bookings and pass purchases
- Validate QR code passes at event gates
- Enable Garba class owners to manage their businesses
- Facilitate communication between users through chat features
- Display personalized content and recommendations

### 3.2 Location-Based Services
- Show nearby Garba events and classes
- Calculate distance to event venues
- Provide location-based search results
- Help you find branches of Garba classes near you

### 3.3 Communication
- Send booking confirmations and pass details
- Send push notifications about:
  - Event updates and reminders
  - Payment confirmations
  - New messages in chat
  - Competition results
- Respond to your support requests

### 3.4 Business Operations
- Process payments securely through Razorpay
- Prevent fraud and ensure security
- Comply with legal obligations
- Resolve disputes and enforce our terms

### 3.5 App Improvement
- Analyze app usage to improve features
- Fix bugs and technical issues
- Develop new features based on user behavior
- Optimize app performance

### 3.6 Marketing (With Your Consent)
- Send promotional offers about upcoming events
- Notify you about new Garba classes in your area
- Share updates about competitions and special features

---

## 4. How We Share Your Information

We do NOT sell your personal information to third parties. We share your information only in the following circumstances:

### 4.1 Service Providers
- **Razorpay:** Payment processing
- **Firebase/Google:** Authentication, push notifications, and cloud messaging
- **Truecaller:** Phone number verification and authentication
- **Cloud hosting providers:** For secure data storage

### 4.2 Garba Class Owners & Event Organizers
- When you book an event or enroll in a class, we share necessary information (name, contact details, booking details) with the respective organizers

### 4.3 Other Users
- Your profile information (name, profile photo) is visible to other users
- Your uploaded reels and competition videos are publicly visible within the app
- Your chat messages are visible to the recipients

### 4.4 Legal Requirements
- To comply with legal obligations, court orders, or government requests
- To protect our rights, property, or safety, or that of our users
- To prevent fraud, security issues, or illegal activities

### 4.5 Business Transfers
- In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity

---

## 5. Data Retention

We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations (e.g., tax records, transaction history)
- Resolve disputes and enforce agreements

**Specific Retention Periods:**
- **Account data:** Until you delete your account, plus 90 days for backup purposes
- **Booking & payment records:** 7 years (for legal and tax compliance)
- **Chat messages:** Until deleted by users, or 1 year of inactivity
- **Uploaded videos/reels:** Until deleted by the user or account closure
- **Location data:** Not stored permanently; used only for active sessions

---

## 6. Your Rights and Choices

### 6.1 Access and Update
- You can access and update your profile information within the App settings
- Request a copy of your personal data by contacting us

### 6.2 Delete Your Account
- You can delete your account through App settings or by contacting us
- Upon deletion, we will remove your personal information within 90 days (except data we're legally required to retain)

### 6.3 Manage Permissions
You can control the following permissions through your device settings:
- **Location:** Deny or allow location access
- **Camera:** Deny or allow camera access for QR scanning and video recording
- **Photo Library:** Deny or allow access to your photos
- **Notifications:** Disable push notifications
- **Phone State:** Required for Truecaller login (can be denied if not using Truecaller)

### 6.4 Marketing Communications
- Opt out of promotional notifications through App settings
- You will still receive transactional notifications (booking confirmations, payment updates)

### 6.5 Data Portability
- Request a copy of your data in a machine-readable format

### 6.6 Withdraw Consent
- You can withdraw consent for data processing at any time by:
  - Revoking app permissions in device settings
  - Deleting your account
  - Contacting us directly

---

## 7. Data Security

We implement industry-standard security measures to protect your information:

### 7.1 Technical Safeguards
- **Encryption:** Data transmitted between your device and our servers is encrypted using HTTPS/TLS
- **Secure Storage:** Sensitive data is encrypted at rest
- **Authentication:** Secure login mechanisms including OTP verification
- **Payment Security:** PCI-DSS compliant payment processing through Razorpay

### 7.2 Organizational Safeguards
- Access to personal data is restricted to authorized personnel only
- Regular security audits and vulnerability assessments
- Employee training on data protection practices

### 7.3 Your Responsibility
- Keep your login credentials confidential
- Use strong passwords
- Log out from shared devices
- Report any suspicious activity immediately

**Note:** While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

---

## 8. Children's Privacy

GujjuGarba is intended for users aged **13 years and older**. We do not knowingly collect personal information from children under 13.

**Age Verification:**
- We require users to provide their date of birth during registration
- Users under 13 are not permitted to create accounts

**Dating/Matchmaking Features:**
- Our App does NOT include dating or matchmaking features
- Social interactions (chat, comments) are limited to Garba-related activities

If we discover that we have collected information from a child under 13, we will delete it immediately. If you believe a child has provided us with personal information, please contact us.

---

## 9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer your data internationally, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses
- Adequate data protection frameworks
- Encryption and security measures

---

## 10. Third-Party Services and Links

### 10.1 Third-Party SDKs
Our App uses the following third-party services:
- **Firebase (Google):** Authentication, push notifications, cloud messaging
- **Razorpay:** Payment processing
- **Truecaller SDK:** Phone verification and authentication
- **Google Sign-In:** Social login

Each third-party service has its own privacy policy:
- Firebase: https://firebase.google.com/support/privacy
- Razorpay: https://razorpay.com/privacy/
- Truecaller: https://www.truecaller.com/privacy-policy
- Google: https://policies.google.com/privacy

### 10.2 External Links
Our App may contain links to external websites or services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any information.

---

## 11. Permissions Explained

### 11.1 Location Permissions (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION)
- **Why we need it:** To show nearby Garba events and classes, calculate distances, and provide location-based search
- **When we access it:** Only when you actively use location features (foreground use)
- **How to control it:** You can deny or revoke location permission in your device settings at any time
- **Alternative:** You can manually search for events by city/area name without granting location access

**Important:** We do NOT use background location tracking. Location is accessed only when you're actively using the app.

### 11.2 Camera Permission (CAMERA)
- **Why we need it:** 
  - To scan QR codes for pass validation
  - To take profile photos
  - To record Garba reels and competition videos
- **When we access it:** Only when you explicitly tap on camera-related features
- **How to control it:** Deny or revoke camera permission in device settings

### 11.3 Storage Permissions (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE)
- **Why we need it:** 
  - To download event passes as PDF files
  - To select photos/videos from your gallery for upload
  - To export branch data (for Garba class owners)
- **When we access it:** Only when you choose to download files or select media
- **Android 13+:** We use scoped storage and photo picker for better privacy

### 11.4 Phone State Permission (READ_PHONE_STATE, READ_CALL_LOG, ANSWER_PHONE_CALLS)
- **Why we need it:** Required by Truecaller SDK for phone number verification
- **When we access it:** Only if you choose to sign in with Truecaller
- **How to control it:** You can skip Truecaller login and use OTP-based login instead
- **Important:** We do NOT read your call logs or answer calls. These permissions are required by Truecaller SDK but not actively used by our app

### 11.5 Internet Permission (INTERNET)
- **Why we need it:** To connect to our servers, load content, and sync data
- **Always required:** This is essential for the app to function

### 11.6 Notification Permission
- **Why we need it:** To send booking confirmations, event reminders, and chat notifications
- **How to control it:** You can disable notifications in device settings or app settings

---

## 12. Google Play Policy Compliance

### 12.1 Data Safety Declaration
We have accurately declared all data collection practices in the Google Play Store Data Safety section, including:
- Types of data collected
- How data is used
- Whether data is shared with third parties
- Security practices

### 12.2 Sensitive Permissions
- We request sensitive permissions (location, camera, storage, phone state) only when necessary for core app functionality
- We provide clear explanations before requesting permissions
- We use the minimum scope necessary (e.g., foreground location only, no background location)

### 12.3 Location Policy Compliance
- We do NOT use geofencing features
- We use foreground location access only
- We provide a clear "location button" option for users to grant temporary location access
- We do NOT track users' location in the background

### 12.4 Contacts Policy Compliance
- We do NOT request broad access to users' contacts
- We do NOT use READ_CONTACTS or WRITE_CONTACTS permissions
- If we add contact features in the future, we will use the Android Contact Picker

### 12.5 User Consent
- We obtain explicit user consent before collecting personal or sensitive data
- Consent dialogs require affirmative action (tapping "Accept" or checking a checkbox)
- Navigating away or dismissing a dialog does NOT count as consent
- Users can withdraw consent at any time

---

## 13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- Legal or regulatory requirements
- New features or services

**How we notify you:**
- We will update the "Last Updated" date at the top of this policy
- For material changes, we will notify you through:
  - In-app notification
  - Email (if you provided one)
  - Prominent notice in the app

**Your continued use of the App after changes constitutes acceptance of the updated policy.**

---

## 14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Email:** support@gujjugarba.com  
**Phone:** +91-XXXXXXXXXX  
**Address:** [Your Company Address]  
**Website:** https://www.gujjugarba.com

**Data Protection Officer (if applicable):**  
Email: privacy@gujjugarba.com

**Response Time:** We aim to respond to all privacy-related inquiries within 7 business days.

---

## 15. Legal Basis for Processing (for EU/EEA Users)

If you are located in the European Union or European Economic Area, we process your personal data based on the following legal grounds:

- **Contract Performance:** To provide services you've requested (bookings, passes, etc.)
- **Consent:** For marketing communications and optional features
- **Legitimate Interests:** To improve our services, prevent fraud, and ensure security
- **Legal Obligations:** To comply with applicable laws and regulations

---

## 16. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

- **Right to Know:** Request information about data we collect and how we use it
- **Right to Delete:** Request deletion of your personal information
- **Right to Opt-Out:** Opt-out of the sale of personal information (Note: We do NOT sell personal information)
- **Right to Non-Discrimination:** We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@gujjugarba.com

---

## 17. Data Protection Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection authority.

---

## 18. Glossary

- **Personal Information:** Information that identifies you as an individual (name, email, phone number, etc.)
- **Sensitive Data:** Location data, payment information, biometric data, health data
- **Processing:** Any operation performed on personal data (collection, storage, use, sharing, deletion)
- **Third Party:** Any entity other than you and us
- **Device Information:** Technical information about your mobile device

---

## 19. Acceptance of This Policy

By using the GujjuGarba app, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you do not agree with this policy, please do not use our App.

---

**Thank you for trusting GujjuGarba with your information. We are committed to protecting your privacy and providing a safe, enjoyable experience.**

---

*This Privacy Policy is compliant with Google Play Store policies as of April 2026, including the latest updates to Location Permissions, Contacts Permissions, and Data Safety requirements.*