Privacy Policy

Last updated 6 September 2026. Rojsaathi is operated from Nagpur, Maharashtra, India. This policy describes what the app actually does today. It is written to be read, not to be survived, and it will be updated when the product changes rather than written to cover things we might do later.

What we collect

• Your phone number. It is how you sign in; there is no password. We send a one-time code to it.
• Your name, and for a resident the flat and society you tell us you belong to.
• The work record. Which days a worker was present, the agreed monthly rate, and what was paid. This is the product.
• Visitor entries at a gate, if your society uses the gate app — including a photo taken at the gate where the guard takes one.
• Where you are, when you add an address. The app asks your device for your location and sends it to us. We do not store it: we convert it immediately to map tiles — three nested ones, the finest a few hundred metres across — and keep only those, so we can show vendors who can actually reach you. Your exact position is never written down.
• Push notification tokens for your device, if you have the app; a guard's PIN (stored scrambled, never in the clear); a vendor's UPI id, so customers can pay them directly; the record of payments made; and any documents a society uploads to verify itself.

What we do not do

• We never hold your money. Payments go directly from the payer to the person being paid, over UPI. We are not in between, and we cannot be.
• We do not sell your data, and we do not run advertising. There is no advertising module in this product.
• Nobody can pay to rank higher. Vendors are ordered by how many neighbours actually use them. There is no paid placement of any kind.
• We do not build a record of a worker's debts that employers can look up.

Gate photos are deleted

A photo taken at your society's gate is deleted automatically after 45 days. This is automatic, not a request you have to make.

Who can see what

A society committee sees its own society's records and no other society's. A worker sees their own attendance and their own earnings, across every household they work for — a household cannot see what a worker earns elsewhere. A household sees the workers it engages. These boundaries are enforced by the database itself, not only by the app.

Your rights under the DPDP Act

You can ask us to show you what we hold about you, correct it, or delete it. Write to our Grievance Officer, Sagarsingh Pawar, at sagarsingh@rojsaathi.in, and we will answer. Deletion, like access and correction, is handled by hand today, so give us a few days.

When we delete you, we remove your name and contact details and stop sending you anything. One thing we deliberately do not delete: the attendance and payment records of work already done. Those records belong to two people — a household and a worker — and erasing one side's copy would destroy the other person's proof of what they earned and are still owed. So the record stays, and stops being connected to you.

Who else touches your data

We do not sell it, and there is no advertising in this product. But we cannot deliver a message or run the service without some help, so these companies process data on our behalf and for no purpose of their own:

• WhatsApp (Meta) and our SMS gateway — to deliver the messages above. They see your phone number and the message.
• Google Firebase — to deliver app notifications.
• Cloudflare — hosting, and storage of gate photos.
• Our payment provider — to confirm that a UPI payment happened. The money itself never comes to us.

If you were photographed at a gate

You may be reading this because a guard took your photo when you visited a building, and you never signed up for anything. That photo is held for 45 days as the building's record of who came — so an entry can be checked if it is ever disputed — and is then deleted automatically. If you want it removed sooner, write to the Grievance Officer above with the building and the date, and we will delete it.

Messages we send

We message you about your own work and money: a monthly payslip, an absence to confirm, a payment receipt, a job offer, a change to a delivery we are about to bill you for, or word that work has stopped, paused or started again. We use WhatsApp where we can and SMS only where we cannot, and we send one message per event, never the same thing twice on two channels. The absence confirmation — the one that matters most, because it is how you dispute a day you did work — comes to you inside the app instead if you have it installed. Not having the app never costs you anything.

Children

Rojsaathi is not for anyone under 18.

Changes

If this policy changes in a way that affects you, we will tell you in the app before it takes effect.