Privacy Policy

Shahar.city (Android and iOS apps, and web services)
Effective date: 01 January 2026

1) Who we are

Shahar.city (“Shahar”, “we”, “us”) is a CivicTech initiative providing technology-enabled civic reporting and governance workflows. This Policy applies to our mobile apps and website (collectively, the “Services”).

2) What we collect

We may collect the following categories of data depending on how you use the Services:

• Identity and contact data: your name and mobile number (as provided by you).
• Report content: civic issue details you submit, including descriptions, photos, videos, and optional notes.
• Location data: location you share for the purpose of tagging reports (GPS or user-selected location). You can control location permissions in your device settings.
• Device and usage data: app version, device type, OS version, basic diagnostics, and usage logs to improve stability and performance.
• Communications: messages you send to our support channels and any responses.

3) Why we collect it (purposes)

We use your data for the following purposes:

• To create and manage your account or user profile for civic reporting.
• To receive, process, and route civic reports to relevant workflows and stakeholders.
• To contact you about your submitted reports, clarifications, status updates, and resolution outcomes.
• To maintain the integrity of reporting, prevent misuse, and ensure accountable participation.
• To improve service quality, analytics, performance, and product features.
• To comply with applicable laws, lawful requests, and regulatory requirements.

4) Legal basis for processing

We process personal data in accordance with applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023 and related rules. Where required, we rely on your consent. In other cases, we may process data for legitimate uses permitted by law, and for compliance with legal obligations.

5) How we share your data

We do not sell your personal data. We may share data in the following limited circumstances:

• With government and civic stakeholders: to route and act on civic reports (only relevant fields needed for action and follow-up).
• With service providers: trusted vendors who help us operate the Services (hosting, analytics, crash reporting, notifications, customer support). They process data under confidentiality and security obligations.
• For legal compliance: if required by law, court order, or valid request from competent authorities.
• For safety and misuse prevention: to investigate suspected fraud, abuse, or security incidents, and to protect users and the public.

6) Data retention

We retain personal data only for as long as necessary for the purposes described above, including operational needs, auditability of civic reporting, and compliance with legal obligations. We may retain certain records longer if required to establish, exercise, or defend legal claims or for lawful purposes.

7) Security

We implement reasonable security safeguards designed to protect your data from unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, but we continuously improve our security practices.

8) Your choices and rights

Subject to applicable law, you may request:

• Access to the personal data we hold about you.
• Correction or updating of inaccurate data.
• Deletion or erasure of personal data, where permissible.
• Withdrawal of consent, where processing is based on consent (this may affect your ability to use certain features).
• Grievance redressal and complaint escalation.

To exercise these rights, contact: support@shahar.city. If you are using the Services through a partner government program, we may verify identity before acting on requests.

9) Children’s privacy

Our Services are intended for general civic reporting and are not designed for children to use independently. If we learn that we have collected personal data from a child without appropriate consent where required, we will take reasonable steps to delete it.

10) International transfers

Our systems may use cloud infrastructure or vendors that store or process data in India and, in some cases, other locations. Where transfers occur, we use appropriate safeguards and comply with applicable law.

11) Cookies and similar technologies (website)

Our website may use cookies or similar technologies for essential site functionality, analytics, and security. You can manage cookies through your browser settings.

12) Updates to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Effective date” above. Material changes may be communicated in-app or through other appropriate channels.