Privacy Policy
Last updated: 5 October 2026
This policy explains what ChaloGarba (chalogarba.app), operated by [Operator legal name], collects, why, and what you can do about it. We collect as little as we can.
What we collect
| Data | When | Why |
|---|---|---|
| A random device ID | When you first RSVP, add a venue or share | Your login, with no password needed |
| Display name, Instagram handle (optional) | When you create a profile | Shown on venue pages, cards and lists |
| Google account email and ID (optional) | Only if you link Google | To restore your profile on another phone |
| RSVPs, check-ins, reports, shares, badges | When you use those features | To run the app, show counts and award badges |
| Your location at check-in | Only when you tap Check in | To confirm you're at the venue. We don't track you in the background |
| Venues, edits and ideas you submit | When you submit them | To build the city map and credit you |
| Name, email and message | When you use the contact form | To reply to you |
| Payment order ID, payment ID and amount | When you make a support payment | Receipts, accounting and supporter badges |
We don't collect your phone number or contacts, and we don't sell your data.
What's public
Your display name, Instagram handle (if you add one), the venues you're going to, the venues and edits you contribute, your badges and titles, and your leaderboard rank can be seen by other users.
Cookies and storage
We use a first-party cookie and your browser's local storage to keep you signed in on your device. We also use a cookie that remembers the referral link you arrived from. We don't use advertising cookies. Our analytics are self-hosted (Umami), cookie-free, and only show aggregate numbers.
Service providers
- Cloudflare: content delivery, security and bot checks (Turnstile)
- Razorpay: payment processing, which handles your payment details directly
- Resend: sending emails such as receipts and contact replies
- Google: optional sign-in to back up your profile
- Oracle Cloud: server hosting in India
Each provider handles data under its own privacy policy. They only receive what they need to do their job.
How long we keep it
We keep your data for as long as your profile exists. Event logs can be kept for up to 2 years for statistics and abuse prevention. Payment records are kept for as long as tax law requires.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask to see, correct or delete your personal data, or withdraw your consent. Write to hello@chalogarba.app from the email you want us to reply to, and include your display name and referral code (from your profile page). We'll respond within 30 days. Deleting your profile removes your stamps, badges and contributions credits.
Grievance officer
[Operator legal name] · [Registered address, City, State, PIN] · hello@chalogarba.app
Changes
If this policy changes, we'll update the date above. If the changes are significant, we'll also show a notice in the app.