Privacy Policy

Who is responsible for your data

The data fiduciary is Zynapte Technologies Pvt Ltd, P-30, Lake Gardens, Kolkata – 700045, West Bengal, India.

Grievance Officer / privacy contact: Grievance Officer, Zynapte Technologies Pvt Ltd, [email protected].

General support: [email protected].

Information you provide

Phone number: used only to sign you in over WhatsApp OTP and to identify you inside groups you join. We do not sell, rent or share it with third parties.

Profile name / display name (optional): shown to other members of groups you join.

Profile photo (optional): stored for your account and shown to group members.

UPI ID / VPA (optional): if you add one, it is used only to build a payment link for the person who owes you money in a shared-expenses group. It is shown to that person only, never to the whole group, and never to us for any other purpose.

Pandal submissions and issue reports (optional): the text, location and photos you choose to send for moderation.

Messages you send to support: your email or message content, kept only to answer you.

Being added to a group by phone number

A member of a group can add you to it using your mobile number. If you do not yet have an account, a minimal placeholder is created holding only that number, marked "pending" until you sign in. Group members can see that a pending invite exists; only the group owner (and you) can see the masked number. When you first sign in with that number you take over the placeholder and inherit the membership; you can leave the group at any time, and the group owner can remove you. Unclaimed placeholders are deleted automatically after a short period.

Information collected automatically

Approximate or precise device location: used on-device to show nearby pandals, metro stations and toilets. When you are signed in, your latest position is also stored on our servers as a single point (no location history) so the app and support team can help you find your way; it is overwritten each time and removed when you delete your account.

Live location in a group: only while you switch it on, your latest point is shared with that group. It is stored as one point (no history) and expires automatically.

Device and diagnostic data: app version, OS version, coarse device model, and crash and error logs, used to keep the app stable. Crash diagnostics may be processed by Google Play services.

Approximate region: inferred from your IP address by our server to route requests and prevent abuse. We do not build advertising or behavioural profiles and the app contains no advertising ID or ad SDK.

Health and Physical Activity Data Disclosure

Access and Collection of Health & Fitness Data: When you opt into the Sharad Padatik festive step tracker, Agamoni requests access to your device's physical activity sensors and hardware pedometer step detector (via the standard Android Physical Activity / ACTIVITY_RECOGNITION runtime permission, or Apple Health / Core Motion on iOS). We collect daily step counts, walking duration, estimated walking distance in kilometers, and estimated active calorie expenditure.

How We Use Health Data: Your physical activity and step data is used solely to provide user-facing festive walking features within the app: displaying your daily Durga Puja parikrama walking progress, calculating distance milestones, and awarding non-monetary festive commemorative medals and achievements (Sharad Padatik badges). We do NOT use health or physical activity data for medical diagnosis, health assessment, clinical evaluation, treatment, health insurance pricing, advertising, marketing, or behavioral profiling.

Storage, Security and Third-Party Sharing: Your health and fitness data is processed and stored locally on your device, and if signed in, synced securely over encrypted connections (HTTPS / TLS 1.3) to your private user account. We NEVER sell, rent, lease, or monetize your health and physical activity data. We do NOT share health data with third-party advertisers, ad networks, commercial data brokers, or analytics partners. If you join an optional private parikrama group, only your aggregate step total is visible to fellow group members on the group leaderboard.

User Control, Retention and Deletion: You can grant or revoke physical activity sensor permissions at any time through your device system settings. You can reset your step counts or permanently delete all your health records and account data at any time directly in the app (Settings → Profile → Delete Account) or by requesting deletion at [email protected] / https://www.agamoni.in/account-deletion. All health data is permanently purged immediately upon deletion.

Why we process your data (purpose & legal basis)

We process personal data only for these purposes: to authenticate you (WhatsApp OTP); to run groups, group expenses and opt-in live location; to sync pedometer achievements; to accept and moderate community submissions; to answer support requests; to keep the service secure, prevent abuse and debug crashes; and to comply with law.

Legal basis: for most processing we rely on your consent, given when you sign in or switch on a specific feature. Where the DPDP Act permits, we also rely on the "legitimate use" of the purpose for which you voluntarily gave the data, and on legal obligation for records we must keep. You can withdraw consent at any time (see "Your choices and rights").

We do not use your data for advertising, we do not run third-party ad networks, and we do not carry out any solely-automated decision-making that produces legal or similarly significant effects on you.

Data sharing

Group members see your display name, walking steps, pandal check-ins, shared expenses, and, if you enable it, your live location. The person who owes you in a shared-expenses group also sees your UPI ID if you set one.

A verified pujo committee can see aggregated, non-identifying analytics for their own pandal (visitor counts, broad visitor areas, share counts). Slices that could identify a single visitor are withheld.

WhatsApp (Meta) is used to deliver your one-time login code.

Map tiles are served by the OpenStreetMap Foundation; base map data is © OpenStreetMap contributors (ODbL).

Google Play services / Firebase Cloud Messaging deliver push notifications and crash diagnostics.

Our hosting and database providers process data on our instructions under contract.

We may disclose data if required by a valid legal request, or to protect the rights, safety and security of users, the public or Agamoni. We do not otherwise share personal data and we never sell it.

Where your data is processed

Agamoni's servers and databases are operated in India. If any processor is located outside India, transfers are made only to countries that are not restricted by the Central Government of India, and under contractual safeguards. See the DPDP Notice for details.

Retention and deletion

We keep personal data only as long as needed for the purpose it was collected, or until you withdraw consent or delete your account, whichever is earlier — unless a law requires us to keep a record for longer.

Live location points expire on their own. You can leave any group to stop sharing immediately. You can delete your account from the app (Settings → your profile → Delete account), which permanently removes your profile, phone number, step logs, group memberships and shared location from our servers.

If you no longer have the app, email [email protected] from your registered number's address or use the account deletion page linked below. We action verified requests within 30 days. Security and abuse-prevention logs that do not identify you may be retained for up to 90 days.

Security

Data in transit is encrypted with HTTPS / TLS 1.3. Access to production data is restricted, logged and granted on a need-to-know basis. We follow data minimisation — we ask for the least data a feature needs and store single points rather than histories where possible.

No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required by law.

Children

Agamoni is not directed at children. We do not knowingly collect data from a child (under 18) without verifiable consent of a parent or lawful guardian, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us data, contact [email protected] and we will delete it.

Cookies and local storage

The website uses a small number of essential cookies and, only with your consent, Google Analytics 4 in privacy-preserving Consent Mode. Full details, and how to change your choice, are in the Cookie Policy at /cookie-policy. The mobile app does not use cookies; it stores data locally in an on-device SQLite database, a secure token store and app preferences.

Your choices and rights

You can: revoke a permission in your device settings; leave a group; turn off live location; withdraw consent; and delete your account. Withdrawing consent is as easy as giving it and does not affect processing already carried out.

Under the DPDP Act you also have the right to access a summary of your data, to correction and erasure, to grievance redressal, and to nominate another person to exercise your rights. How to use these rights, and how to reach the Grievance Officer and the Data Protection Board, is set out in the DPDP Notice at /dpdp.

Changes

We may update this policy; the effective date and version will change and material updates will be announced in the app. Continued use after an update means you accept the revised policy.