Privacy Policy

1. Introduction

Trinetra (“we”, “our”, or “us”) operates a QR-based Lost & Found platform designed for pilgrims and families at India’s sacred gatherings, from temple festivals to the Simhastha Kumbh Mela 2026. This Privacy Policy describes how we collect, use, store, and share personal information when you use our mobile application, website, or registration booths.

By registering with Trinetra, you consent to the practices described in this policy. If you do not agree, please do not create an account or use our services.

2. Information We Collect

To provide effective reunion services, we collect the following categories of information when you register yourself or a family member:

• Full name and relationship to the account holder
• Mobile phone number and email address
• Family member details (names, ages, photographs)
• Date of birth or approximate age for vulnerable members
• Travel dates for the pilgrimage (arrival and departure)
• Profile photograph uploaded for identity purposes
• Payment status and transaction identifiers (processed via Razorpay)
• Device information and IP address for security purposes
• Location data, collected only during an active reunion event

We may also collect information you provide voluntarily when contacting our support team or reporting a lost or found person.

3. How We Use Your Information

We use collected information strictly for the following purposes:

• Creating and managing unique QR-based identities for each registered family member
• Matching a found person with their registered family when a QR code is scanned
• Sending real-time alerts (push notifications, SMS, in-app) to your family when a reunion event is triggered
• Navigating volunteers and family members to a reunion point
• Processing registration fees and issuing receipts
• Improving platform reliability, detecting fraud, and resolving disputes
• Communicating important service updates and safety advisories

We do not use your data for marketing profiling, behavioural advertising, or any purpose unrelated to the reunion service.

4. Photographs & Sensitive Data

Photographs uploaded to the platform are used solely to help identify and reunite a lost person with their registered family. They are displayed only to the scanning volunteer or operator at the moment of a reunion event, and only for as long as the event is active.

Photographs are never shared publicly, used in any advertisement, or accessible to anyone outside the verified Trinetra network. Access is strictly limited to the registered family and authorised volunteers or booth operators involved in the active reunion.

Children’s photographs are treated with heightened care. They are never displayed in any public-facing view and are visible only during a confirmed reunion event.

5. Data Storage & Security

Your data is stored on secure cloud infrastructure. We implement the following technical safeguards:

• Encryption in transit over HTTPS / TLS for all traffic
• Hashed and salted passwords using bcrypt
• JWT (JSON Web Token) based session authentication with short expiry
• Rate-limited sensitive endpoints to prevent brute-force and abuse
• Role-based access control so only authorised operators see relevant records
• Regular security audits and penetration testing before each event period

Despite best efforts, no system is completely immune to attack. In the event of a data breach that affects your personal information, we will notify you promptly and take immediate remediation steps.

6. How We Share Your Information

We do not sell, rent, or trade your personal data. We share it only in the following limited circumstances:

• With verified Trinetra volunteers and booth operators, strictly as needed to complete a reunion
• With government helplines or emergency services (such as the police or 112) where immediate safety requires it
• With our payment processor (Razorpay) to complete fee transactions; Razorpay’s own privacy policy applies to payment data
• With cloud infrastructure providers operating under data processing agreements
• As required by a court order or applicable Indian law

7. Location Data

The Trinetra app requests location permission to enable navigation during a reunion event. Location data is collected and shared only when a reunion event is active, meaning a lost report has been filed or a QR code has been scanned. Outside of an active reunion event, the app does not track or record your location.

Volunteer location is shared with the family of the lost person to aid navigation. Location data is not stored after the event is resolved and marked closed.

8. Your Rights

You have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request erasure of your data, subject to legal retention requirements
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing for purposes other than reunion services

To exercise any of these rights, email us at care@trinetra.in. We will respond within 30 days.

9. Account Deletion

You may delete your account at any time from within the app settings or by contacting our support team. Upon deletion, your personal profile, photographs, and family member records will be permanently removed within 30 days, except where retention is required by law (for example, financial transaction records required under Indian tax regulations may be kept for up to seven years).

10. Children’s Data

Children under 18 do not register independently. A parent or legal guardian must create the account and register child family members on their behalf. By adding a child’s details, the parent or guardian confirms they have the authority to provide that data and consent to its use as described in this policy.

We apply additional protections to children’s records, including restricted display and access controls. If you believe a child’s data has been registered without proper consent, contact us immediately at care@trinetra.in.

11. Changes to This Policy

We may update this Privacy Policy as the service evolves. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify registered users by email or in-app notification. Continued use of the service after changes take effect constitutes your acceptance of the revised policy.