गोपनीयता नीति (Privacy Policy) - Web & Google Play Store | श्री श्याम जनसेवा ट्रस्ट

1. Who We Are

Shri Shyam Jansewa Trust ("We", "Us", "Our", or "Trust") is a registered, non-profit public charitable trust established under its registered Trust Deed dated June 2026 (Lucknow, Uttar Pradesh). The Trust operates across India to provide humanitarian aid, healthcare assistance, educational support, cow protection (Gausewa), and disaster relief to underprivileged individuals and communities.

This Privacy Policy applies to all users of our digital platforms, including our official website (https://ssjtrust.com) and our official Android application "Shri Shyam Jansewa Trust" published on the Google Play Store.

2. App & Website Overview

Our mobile application and website serve as a transparent bridge between compassionate donors and verified beneficiaries in urgent need. Through the platform:

Citizens can register for a free community membership.
Members can submit verified Help and Financial Assistance Requests for medical treatments, education, or emergency relief.
The Trust evaluates and verifies submitted requests through internal administrative reviews.
Approved causes are published as charitable campaigns/fundraisers to solicit voluntary public donations.
Donors can contribute securely via RBI-authorized payment gateways and download receipts.

3. Information We Collect

We collect information only when reasonably necessary to provide our charitable services, maintain security, and fulfill legal requirements. Collected data includes:

A. Account Information

When creating an account or logging in, we collect your Full Name, Mobile Number, Email Address (optional), Profile Photograph (optional), and City/District.

B. Membership Information

When enrolling in free Trust membership, we record membership registration date, member identification number, volunteer preferences, and state/region of residence.

C. Volunteer Registration Information

Volunteer information (Full Name, Mobile Number, and City/District) is collected to process volunteer registration, contact volunteers regarding Trust activities, coordinate community events and service drives, and maintain official volunteer records.

D. Help / Financial Assistance Request Information

When a member requests assistance, we collect detailed information regarding the beneficiary: beneficiary name, age, relationship to member, emergency category (medical, education, relief), story/background, target funding requirement, hospital/institution name, and contact details.

D. Medical Information & Documents

For healthcare assistance requests, applicants provide medical diagnosis reports, doctor prescriptions, hospital admission records, estimated treatment bills, and discharge summaries. These documents are strictly used for verification purposes and are kept confidential as detailed in Section 7 & 8.

E. Government Identification Documents

To prevent fraud and satisfy Know Your Beneficiary (KYB) standards, we may collect government ID proofs (Aadhaar Card, Voter ID, Ration Card, or PAN Card). Government IDs are stored with AES-256 encryption, accessed only by authorized Trust verification staff, and are NEVER displayed publicly or shared with donors.

F. Donation & Transaction Information

When you make a donation, we collect the donor name, email address, phone number, contribution amount, chosen campaign/cause, payment reference ID generated by the payment gateway, and PAN number (where required by the donor for Section 80G tax exemption certificates).

G. Device, Technical & Diagnostic Data

Device model, Android OS version, IP address, network carrier, crash traces via Firebase Crashlytics, and app performance metrics to detect bugs and ensure platform stability.

4. Mobile Verification via SMS Intent (Privacy-Preserving & Zero Permissions)

✦ Transparent Mobile Verification via Native Messaging App Intent

Our mobile app verifies the ownership of your mobile number in a completely transparent and privacy-friendly manner using Standard Android SMS Intents (sms: URI).

Zero Background SMS or Telephony Access: The application does not require any SMS permissions. The app cannot send SMS messages silently in the background, nor does it read, inspect, monitor, or access your personal text messages.

How the Verification Works:

When you tap "Verify SIM via SMS", the app requests a single-use, time-limited verification token from our secure server.
The app then opens your device's official default SMS messaging application via an Android system intent, pre-filling our verified gateway receiving number and the one-time code (e.g., TRUST VERIFY <TOKEN>).
User Control: You have full visibility and control. You manually review the recipient number and message text, and tap the send button in your messaging app.
Our gateway server receives the verification SMS, matches the originating phone number and token, and marks the registration as verified.

Token Expiry & Retention: The verification token expires automatically after 150 seconds (2.5 minutes) and can only be used once. Once verification is completed (or expired), temporary tokens are automatically purged.

Carrier SMS Charges: Because the verification SMS is sent from your carrier SIM via your default messaging app, standard SMS charges as per your mobile operator's plan may apply.

5. Android Device Permissions & Explicit Usage

Our Android application requests only permissions essential for core functionalities. Each permission serves a specific purpose:

✦ No SMS or Telephony Permissions Required:

Our application does not request, declare, or access any SMS, call log, or telephony permissions. Mobile number verification is handled exclusively through system-standard SMS Intents via the user's default messaging app.

📷 Camera (`android.permission.CAMERA`)

Used solely when an applicant chooses to capture physical medical reports, prescriptions, or identity cards directly from within the app.

📁 Media & Images (`READ_MEDIA_IMAGES` / `READ_EXTERNAL_STORAGE`)

Used to allow users to select and attach existing PDF/JPG files of hospital bills, diagnostic summaries, and profile photos from device storage.

🌐 Internet & Network (`INTERNET`, `ACCESS_NETWORK_STATE`)

Required to connect securely via encrypted HTTPS to load campaigns, download receipts, and communicate with backend APIs.

🔔 Push Notifications (`POST_NOTIFICATIONS`)

Used on Android 13+ to send real-time alerts regarding donation receipts, verification status, and emergency medical appeals.

Users can manage or revoke these permissions at any time via Android Settings > Apps > Shri Shyam Jansewa Trust > Permissions.

6. Membership Policy

✦ Clear Membership Disclosure:

Free Membership: Membership is 100% free of charge. No payment is required or mandatory to become a member.
No Guaranteed Financial Benefit: Membership does NOT guarantee financial assistance, employment, monetary aid, or grant approvals.
Right to Request: Registered members in need may submit charitable assistance requests, which are subject to administrative review.

The App may provide a free membership facility for eligible users. Membership does not require the user to make any payment and does not guarantee financial assistance, donation, employment, benefits, or any other monetary support from the Trust.

Membership allows community members to participate in volunteer drives, receive trust bulletins, and submit support requests for themselves or eligible family members. Payment of any fee is never a prerequisite for submitting a charitable request.

7. Help & Financial Assistance Requests (Data Handling Workflow)

When a registered member requires charitable help (for medical treatment, educational fees, or emergency assistance), the request follows a strict, audited verification workflow:

Standard Request Workflow:

Registered Member Submits Request → Trust Administrative & Document Verification → On-Ground / Hospital Verification (if needed) → Admin Approval / Rejection → Public Campaign Publication → Donor Contributions Facilitated

Submission Does Not Equal Approval: Submission of an assistance request does not guarantee that the request will be approved or that funds will be disbursed. The Trust reserves the sole right to approve, reject, modify, or cancel any request based on verification findings, resource availability, and trust guidelines.

Confidential vs. Public Information: We maintain strict data separation between what is displayed to prospective donors and what remains strictly confidential within Trust archives:

Publicly Visible Information (With User Consent): Beneficiary name, approximate age, city/district, general assistance category, narrative story, verified hospital name, campaign target amount, and raised funds.
Strictly Confidential (Never Publicly Displayed): Full residential address, personal phone numbers, Aadhaar/Voter ID numbers, raw medical prescriptions, detailed diagnostic lab reports, and bank account details. These are accessible only to authorized Trust verification officers.

8. Fundraising & Public Posts

Approved fundraising requests may be published within the App and on our website to allow compassionate citizens to donate.

By submitting a request for public fundraising, the applicant (or the parent/legal guardian in the case of minors) provides explicit consent for the publication of the beneficiary's name, general story, approved campaign photos, and verified funding target.

Withdrawal of Consent: An applicant may request the removal or closure of an active public fundraiser at any time by contacting our Grievance Officer. Upon receiving such a request, the campaign will be closed to new donations within 48 business hours.

9. Donations, 80G Receipts and Tax Compliance

Users may make charitable donations through the App or website for the Trust's charitable activities or for an approved support request.

80G Eligibility & Optionality: Where applicable and where the donation qualifies under the applicable provisions of the Income Tax Act, 1961, eligible donors may request or receive the applicable donation certificate/receipt for claiming a deduction under Section 80G. Eligible donations may qualify for an applicable Section 80G donation certificate/receipt, subject to the Trust's eligibility, applicable law, and statutory requirements.

An 80G donation certificate or tax benefit is not automatically available for every transaction. Eligibility depends on the nature of the donation, the Trust's applicable approval/status under Section 80G, the payment method, the applicable law, and other statutory requirements.

A donor who does not require an 80G certificate may choose not to request one where the App or website provides such an option. Choosing not to request an 80G certificate does not by itself change the charitable purpose of the donation.

Where an 80G certificate is applicable, the Trust may collect the information required under applicable law for issuing and reporting the donation certificate, including donor identification (such as valid PAN) and donation details (for statutory Form 10BE filing with the Income Tax Department).

✦ Trust Statutory Registration & Tax Exemption Information:

• Trust PAN: ABOTS8629L

• Trust Registration No (Sub-Registrar): 67/2026

• Deed e-Stamp Certificate: IN-UP14291442149480Y

• Formation / Registration: 12 June 2026 (Lucknow, UP)

• NITI Aayog NGO Darpan Registration No - UP/2026/1125799

• 80G / 12A Status: Subject to statutory eligibility & applicable IT rules

Charitable Assistance and Manual Support

The Trust may, based on its charitable objectives, available resources, verification results, and administrative decisions, provide assistance directly to an individual or beneficiary in certain cases.

Such assistance may sometimes be provided through a manual or administrative process rather than through a public fundraising campaign. Approval of a support request does not guarantee that a particular amount of assistance will be provided.

Similarly, a donation or contribution made for a support request does not guarantee that the beneficiary will receive a particular amount, as applicable charges, payment processing, donor participation, verification, refunds, reversals, and other legitimate factors may affect the final settlement.

No Guaranteed 80G Benefit

The Trust does not guarantee that every payment made through the App will qualify for a deduction under Section 80G. Any tax deduction is subject to the applicable Income Tax laws, the eligibility of the Trust and the donation, statutory requirements, and the donor's individual tax circumstances. Donors should retain the applicable donation certificate/receipt and consult a qualified tax professional where necessary.

10. Donation Processing, Service or Administrative Charges (12%–16%)

In certain transactions or support arrangements, a separate service, administrative, platform, operational, or payment-processing charge may apply.

Where applicable, such charge may be up to 12%–16%, depending on the particular service, transaction, support arrangement, payment method, or operational requirements.

Any applicable charge will be separately identified to the user before confirmation wherever reasonably practicable. Such charge is separate from the charitable donation amount and is not represented as a donation to the beneficiary.

The applicable charge is not an additional fee for obtaining an 80G certificate and does not determine whether a donation is eligible for an 80G tax deduction.

Pre-Transaction Disclosure & Checkout Transparency Examples:

Where the App displays a donation amount and a separate applicable service or processing charge, the App may show the amounts separately before the user confirms the transaction:

Model A (Separate Processing Charge):
• Charitable Donation: ₹1,000
• Applicable Service/Processing Charge (e.g. 12%): ₹120
• Total Payable by Donor: ₹1,120
(80G receipt, if requested & eligible, applies to the ₹1,000 donation amount only)

Model B (Deduction for Operations):
• Gross Contribution: ₹1,000
• Disclosed Operating/Processing Charge: ₹120 – ₹160
• Net Amount Available for Cause: ₹840 – ₹880
(Clearly notified to user prior to transaction completion)

For comprehensive details on payment methods, fees, and refund rules, please refer to our separate Pricing & Fee Policy and Donation & Refund Policy.

11. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to advertisers or commercial brokers. We share personal information only with the following authorized entities:

Authorized Trust Staff & Trustees: Administrative officers who require access to verify applications, disburse relief, or answer member inquiries.
Payment Gateway Partners: RBI-licensed gateways (e.g., Razorpay) to process payments, handle refunds, and prevent payment fraud.
Cloud Infrastructure Providers: Secure ISO 27001 / SOC-2 certified cloud hosting providers for encrypted database storage and backups.
Analytics & Diagnostics Providers: Google Play Services, Firebase Analytics, and Firebase Crashlytics for app crash tracking and stability improvements.
Notification Providers: Firebase Cloud Messaging (FCM) to deliver push notifications and transaction receipts.
Legal & Regulatory Authorities: When required by Indian law, court subpoenas, Income Tax authorities (for 80G audits), or law enforcement agencies investigating fraud.
Authorized Donors & Supporters: Only the non-sensitive public details (Section 7) of approved campaigns are shown to donors. Sensitive personal documents are never disclosed.

12. Security & Technical Safeguards

We employ industry-standard technical and organizational security measures to protect your personal and financial information:

HTTPS / TLS 1.3 Encryption: All communications between the mobile app, web browsers, and our servers are encrypted in transit using 256-bit SSL/TLS.
Data at Rest Encryption: Government IDs and sensitive documents are encrypted in storage using AES-256 standards.
Zero Payment Credentials Storage: We never store credit/debit card numbers, CVV codes, UPI MPINs, or netbanking passwords on our servers.
Role-Based Access Control (RBAC): Administrative access to verification documents is strictly limited to authorized trust personnel via multi-factor authentication.

13. Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory legal, tax, accounting, and anti-fraud obligations:

Account Profile & Member Data: Retained while your account remains active. Upon an account deletion request, profile details are deleted within 30 days.
SMS Verification Tokens: Temporary verification codes and request tokens are held in volatile memory and purged immediately after 150 seconds or upon successful verification.
Statutory Financial Records: Donation transactions, 80G tax exemption records, payment references, and audited ledger entries must be retained for a mandatory statutory period (up to 7–8 years) in compliance with the Indian Income Tax Act, 1961 and FCRA/Trust laws. Such retained data is securely archived and will not be used for unrelated purposes.
Rejected Application Documents: Documents submitted for unapproved or withdrawn requests are permanently deleted after 90 days.

14. Account & Personal Data Deletion (Google Play Mandate)

How to Request Account & Data Deletion:

In accordance with Google Play's User Data & Account Deletion Policy, users can initiate complete deletion of their account and associated personal data at any time via:

Dedicated Web Deletion Portal: Submit an instant deletion request directly via our public web resource at https://ssjtrust.com/delete-account.
In-App Deletion Path: Inside the Android app, navigate to Profile > Settings > Delete Account to submit a request directly from your device.
Via Email Request: Send an email to shrishyamjansewatrust@gmail.com with the subject "Request Account Deletion" including your registered mobile number.

30-Day Grace Period & Immediate Session Revocation: Upon submitting a deletion request, all active device sessions are immediately revoked, and the account enters an official 30-day grace period (DELETION_REQUESTED).
Cancellation Option: During these 30 days, the user may cancel the deletion request and restore their account to ACTIVE status at any time via https://ssjtrust.com/delete-account.
Permanent Data Erasure: If not cancelled within 30 days, all personal profile data (name, profile photo, address, password hash, and personal preferences) is permanently anonymized and purged (DELETED).
What May Be Retained: Historical financial transaction ledgers, audit trails, and 80G tax-exemption receipts are retained strictly as required by Indian taxation and accounting laws for the mandatory statutory period.

Anti-Abuse Identity Hash Restriction: After final account deletion, an irreversible salted cryptographic hash (HMAC-SHA256) of the mobile number and email address is placed on a permanent fraud-prevention registration restriction list to prevent duplicate account creation. This restriction preserves no personal profile data, photos, addresses, or identifiers.

15. Children's Privacy (Google Play Families Policy)

Our services are not intended for independent use by children under the age of 13. We do not knowingly solicit or collect personal information directly from children under 13 years of age.

In cases where medical or educational fundraising is created for a child (e.g., pediatric cancer treatment or infant cardiac care), all information, medical documents, photographs, and legal consent must be provided exclusively by the child's lawful parent or court-appointed legal guardian.

16. User-Generated Content & Fraud Prevention

To protect our community, donors, and legitimate beneficiaries, we maintain a zero-tolerance policy towards fraudulent submissions:

Strictly Prohibited: Submitting fake medical certificates, forged hospital bills, altered identity cards, impersonating another person, or submitting false fundraising requests is strictly prohibited.
Trust Actions: The Trust reserves the right to immediately reject suspicious requests, remove active fundraisers, freeze or permanently ban associated user accounts, and blacklist fraudulent mobile numbers.
Reporting to Authorities: In cases of deliberate financial fraud, forgery, or cybercrime, the Trust will report the offender to cyber crime cells and relevant law enforcement authorities.

17. Cookies & Website Analytics

Our website (https://ssjtrust.com) uses standard session cookies to remember donor preferences, maintain login sessions, and optimize page load speeds. We do not use intrusive third-party cross-site tracking cookies. Users can manage or block cookies through their browser settings.

18. International & Third-Party Processing

Our primary servers and operations are located in the Republic of India. If you access our platform from outside India, your information will be processed and stored in India in compliance with Indian privacy laws (DPDP Act 2023) and international data transfer guidelines.

19. Non-Government Entity Disclaimer (Mandatory Public Notice)

DISCLAIMER & GOVERNMENT NON-AFFILIATION:

Independent Entity: Shri Shyam Jansewa Trust is an independent non-governmental registered charitable trust.
No Government Representation: This application and website DO NOT represent, and are NOT affiliated with, endorsed by, or operated by the Government of India, State Governments, or any municipal authority.
Our services are purely charitable and community-driven crowdfunding initiatives.

20. Grievance Redressal Officer

In compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act), the contact details of our Grievance Redressal Officer are as follows:

Designation: Data Protection & Grievance Redressal Officer

Entity: Shri Shyam Jansewa Trust

Address: कार्यालय पता: प्लॉट नं 58 खसरा नं 206 रायपुर, लखनऊ/लेसा लखनऊ, उत्तर प्रदेश – 226020 (Plot No. 58, Khasra No. 206, Raipur, Lucknow, Uttar Pradesh - 226020)

Email: shrishyamjansewatrust@gmail.com

Resolution Window: Grievance requests are acknowledged within 24 hours and addressed within 15 working days.

21. Developer & Official Contact Details

Shri Shyam Jansewa Trust (Developer Entity)

Legal Registered Office: Madhupuram Colony, near Dr. L.P. Lal Memorial School, Bhitauli Khurd, Lucknow, Uttar Pradesh – 226020

Administrative / Contact Office: Plot No. 58, Khasra No. 206, Raipur, Lucknow, Uttar Pradesh – 226020

Official Website: www.ssjtrust.com

Official Support Email: shrishyamjansewatrust@gmail.com

Official Support Helpline: +91 9506755333

Working Hours: Monday – Saturday, 9:00 AM – 6:00 PM IST

22. Changes to this Privacy Policy

We may periodically update our Privacy Policy to reflect app enhancements, changes in our charitable operations, or updates to Google Play Developer Policies and applicable laws.

Any changes will be posted on this page with an updated "Last Updated" date. Where changes are material, we will provide prominent notice through the App or by push notification prior to the change taking effect. We encourage users to review this Privacy Policy periodically.

Shri Shyam Jansewa Trust