Your mobile number, to sign you in with a one-time code.
Your first and last name, username and app language. Your name is private; others see only your username.
Your device's approximate location (rounded to about 100 metres), to send alerts about incidents near you, and the places you save (for example, Home).
When you post, vote or confirm: the exact location and time, and what you post: clips (video and sound), photos, titles, updates, chat, notes and reports.
Device information: a notification token, a check that the app is genuine (Apple App Attest), app version and crash reports that don't include your name or number.
If you choose to verify with Aadhaar: we check UIDAI's digital signature on the Secure QR code from your Aadhaar or on the offline e-KYC file. The QR is read on your phone and checked on our server; only the results below are kept. We keep only a one-way fingerprint (to stop duplicate accounts), your age band and that you are verified. Your identity is sealed in encrypted escrow and opened only on a lawful request. We never store Aadhaar card images or your Aadhaar number.
Other signed-in users see your username and what you post, including where an incident happened.
Nobody else sees your name, phone number, your own location, saved places or settings.
Supabase: our database, file storage and sign-in (hosted in Mumbai).
Groq (USA): AI translation of posts, summaries of busy incidents, and checks on new reports before alerts go out (the title and a thumbnail from the clip).
Apple and Google: delivering notifications.
An SMS provider: sending sign-in codes.
Crash reporting (Sentry) and product analytics (PostHog: which steps people complete, such as signing up or posting), tied to an anonymous id, never your name or number.
If enabled later: OpenAI (USA) for automatic moderation checks. This policy will be updated before that happens.
Videos are deleted 30 days after they are posted; a still image from each clip (its thumbnail) stays so you can still see what you posted. The incident itself (its title, place, time and what happened next) stays, along with chat and written updates, while your account exists.
When you delete a post, it disappears for everyone straight away. We keep a copy for 7 days in case the law requires it, and then delete it. If the post had been reported, or a moderator removed it, it is kept for 180 days from then, as the IT Rules require.
If the police or a court lawfully ask us to preserve something, we keep it until that request ends, even past these periods.
Archive: if a clip of a confirmed incident was seen by many people, we may ask whether you want to keep it as a record of what happened. It is kept only if you say yes and a moderator approves it, and you can withdraw it at any time, after which it is deleted.
When you delete your account, everything you posted disappears for everyone straight away, and your devices, saved places, alerts, follows and settings are deleted. As the IT Rules require, your phone number and name, your verification records and the removed posts are kept sealed for 180 days and then deleted. You can sign up again with the same number at any time, as a new account.
If an account is banned for breaking the rules, we keep a keyed fingerprint of its phone number (not the number itself) and, if it was verified, of its Aadhaar, for as long as the ban stands, so the person can't return with a new account. Deleting a banned account doesn't lift the ban.
Records of moderation decisions are kept as Indian law requires, even after content is removed.
You can change your name, username, language and alert settings in the app, and turn alerts or location off in your phone settings.
You can delete your account in the app (You → Delete account), or ask to see, correct or delete your data by writing to support@ghatna.in.
Under the Digital Personal Data Protection Act, you can also withdraw consent and raise a grievance; a grievance officer will be listed here before launch.
We share information with Indian authorities only when the law requires it, and only what the request covers.