ChandaKhata — Privacy Policy

🧭 Overview

ChandaKhata (चंदाखाता, "the app") helps festival committees, temples, societies and other community groups record donations, pledges and expenses, send receipts to donors, and show their accounts. It is published by MyAppsCart, part of Kirosys Technology ("we", "us").

Unlike some of our other apps, ChandaKhata needs a server: a receipt has to reach a donor, a team has to share one set of accounts, and receipt numbers have to be unique across every collector's phone. So the app does store data in the cloud. This page explains exactly what, and why.

📦 What we collect

About users (people who sign in)

• Name and mobile number — to sign you in by OTP and to show your teammates who recorded what.
• Email address — optional; only if you add one, or sign in with email or Google.
• Your role in each event — organizer, treasurer, collector or member.
• Device push token — so the app can notify you of approvals, handovers and similar events. No other device data.

About donors (entered by an organizer or collector)

• Donor name and mobile number.
• Email and address — optional, only if the collector records them.
• Donation details — amount, cash or UPI, date, receipt number, any pledge (vaada), and whether the donor agreed to be named publicly or chose Gupt Daan (anonymous).

Event records

• Donations, pledges, expenses, cash handovers between collectors and the treasurer, approvals, and an audit log of who changed what.
• Bill photos attached to expenses.
• Payment records for Premium and messaging-credit purchases (what was bought and when — not card or bank details).

We do not read your contact list, track your location, or include an advertising SDK.

🎯 Why we use it

• To sign users in and keep each event's data visible only to its team.
• To issue unique receipt numbers and deliver receipts to donors by WhatsApp, SMS link or email.
• To keep the event's accounts — totals, pledges, expenses, handovers and reports.
• To show the public accounts page, where the organizer has turned it on (see below).
• To process payments for Premium and messaging credits, and to apply what was paid for.
• To send app notifications, answer support requests, and prevent abuse such as spam SMS.

We do not sell or rent personal data, and we do not use donor details to market anything to donors.

🔌 Who processes it

We use these service providers. Each receives only what its job needs.

We may also disclose information if required by Indian law or a valid order of a court or authority.

🔍 The public accounts page

An organizer can turn on a public page, reached by a transparency QR code, that shows the event's totals and spending. On that page:

• Donor names appear only where the donor consented to being listed.
• Gupt Daan (anonymous) donations are counted in the totals but never named.
• Phone numbers, email addresses and postal addresses are never shown — not to the public, and not on a donor's receipt page to anyone else.

🙋 If you are a donor

Your details were entered by the committee you gave to, and that committee decides how its own accounts are kept. You can:

• Ask the organizer to correct your name, number or email, or to stop listing you publicly.
• Write to us at support@myappscart.com if you cannot reach the organizer. We will correct or remove your contact details.

The record that a donation of a given amount was made may need to stay in the event's accounts so that its totals remain correct. Where that is so, we can remove or anonymise your contact details while keeping the amount.

🗄️ How long anything is kept

• User accounts: until you delete your account — see the deletion page.
• Event records (donations, pledges, expenses, handovers, bill photos): for as long as the event exists, because they are the event's accounts. The organizer can delete an event.
• OTP and delivery logs: kept briefly for security and to resolve failed sends, then deleted.
• Payment records: kept as Indian tax and accounting law requires. Razorpay keeps its own records under its policy.
• Support emails: while we are helping you and for a reasonable period afterwards.

🔐 Security

• Server-side access rules let only an event's team read its records, and only within their role.
• Receipt numbers and totals are computed on the server, and changes are written to an audit log.
• All traffic is encrypted in transit, and data is encrypted at rest by Google Cloud.

No system is perfectly secure. If we learn of a breach affecting your data, we will tell you and the authorities as Indian law requires.

🗑️ Deleting your account

In the app, open Settings → Request account deletion, or email us from your registered number or email. Full details, including what happens to events you own, are on the account deletion page.

👶 Children

ChandaKhata is meant for adults managing community collections. It is not directed at children, and we do not knowingly allow anyone under 18 to create an account.

⚖️ Your rights

You can ask us to access, correct or erase your personal data, or withdraw consent for anything that relies on it. We handle requests under India's Digital Personal Data Protection Act, 2023, and will honour equivalent rights where other law applies to you. Write to us and we will respond within 30 days.

📝 Changes to this policy

If this policy changes we will update this page and its date. If a change materially affects how your data is used, we will tell you in the app before it applies.

✉️ Contact

MyAppsCart, a Kirosys Technology company. Privacy questions and requests: