This Privacy Policy describes how Arakkal Pooram ("we", "us", or "our") collects, uses, and protects information in connection with the Arakkal Pooram volunteer management application ("App").
1. Information We Collect
We collect the following information from registered volunteers:
- Identity Information: Full name, father's name, and badge number issued by the organisation.
- Contact Information: Mobile phone number used for OTP-based authentication and secondary contact number (optional).
- Location Information: GPS coordinates captured when a volunteer reports an incident, solely for mapping the incident location.
- Device Information: Firebase Cloud Messaging (FCM) token used to deliver push notifications to your device.
- Profile Information: Assigned group, role within the organisation, and home address (optional).
- Usage Data: Actions performed within the App such as incidents reported, events attended, and login timestamps, for operational monitoring only.
We do not collect payment information, biometric data, or any sensitive personal data beyond what is listed above.
2. How We Use Your Information
Information collected is used exclusively for the following purposes:
- To authenticate volunteers via phone OTP and maintain secure session access.
- To assign and manage volunteer roles, groups, and badge tracking during the festival.
- To enable incident reporting with location context for operational response teams.
- To send push notifications about incidents, events, and administrative announcements.
- To allow team coordinators and administrators to contact volunteers during the event.
- To maintain an auditable record of volunteer activity for post-event review.
We do not use your information for advertising, profiling, or any commercial purpose.
3. Data Storage and Security
All data is stored securely on Google Firebase (Firestore and Firebase Storage), which complies with industry-standard security practices including encryption at rest and in transit.
- All connections to our servers use HTTPS/TLS encryption.
- Access to volunteer data is restricted to authorised administrators and captains only.
- Firebase Authentication tokens are stored securely using Flutter Secure Storage on your device.
- We do not store OTP codes — they are handled entirely by Firebase Authentication.
4. Data Sharing
We do not sell, trade, or rent volunteer data to any third party. Data may be shared only in the following circumstances:
- Within the organisation: Authorised captains and administrators can view volunteer profiles and incident reports relevant to their responsibilities.
- Service providers: Google Firebase processes data on our behalf as a cloud infrastructure provider, subject to Google's data processing terms.
- Legal obligation: If required by applicable law or a valid legal process, we may disclose information to the relevant authorities.
5. Data Retention
Volunteer data is retained for a period of one year following the conclusion of the festival for record-keeping and audit purposes. After this period, personal data will be deleted or anonymised unless retention is required by law.
You may request deletion of your data at any time by contacting the organisation administrator.
6. Your Rights
As a registered volunteer, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate information.
- Request deletion of your data, subject to operational requirements.
- Opt out of push notifications at any time through your device settings.
To exercise any of these rights, contact the organisation administrator through the App or at the address below.
7. Children's Privacy
The App is intended for use by adult volunteers only. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided personal information, we will delete it promptly.
8. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via in-app notification or by posting the revised policy on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the revised policy.
9. Contact Us
For questions, concerns, or data requests related to this Privacy Policy, please contact:
- Organisation: Arakkal Pooram Volunteer Management
- Website: pooramconnect.gettorcp.space