Your family's data, guarded like a vow.
Sacred data, protected like a vow. Every byte Trinetra holds is access-controlled, minimised, and used for one purpose only: to bring families together.
Login rate limit
JWT session expiry
HTTPS in transit
Data sold or shared
Hashing, sessions, and secrets that stay secret
Security should not require faith in our intentions. It should be mechanical, verifiable, and on by default. Trinetra is built on authentication standards the industry has trusted for decades.
Passwords are never stored in plain text — only bcrypt hashes. Sessions expire automatically. Every API call is authenticated, and sensitive endpoints are rate-limited, before a single byte is returned.
bcrypt password hashing
Passwords are salted and hashed with bcrypt before storage. We never see the original.
JWT sessions, 24-hour expiry
Every login issues a signed token valid for 24 hours. No permanent sessions, no silent re-use.
HTTPS everywhere
All traffic between the app and our servers travels over TLS. Plaintext channels are rejected.
Rate-limited API
Sensitive endpoints like login are rate-limited, blocking brute-force attempts and abuse at crowd scale.
Your family's story belongs to your family alone
We collect the minimum data needed to reunite families. Nothing more. We do not build profiles, run advertising, or share data with third parties.
Family-only access
Sensitive details, photos, and travel information are visible only to the registered parent or guardian. No stranger, volunteer, or operator can browse them.
Photos used solely to reunite
Profile photos are shown to operators and volunteers only during an active reunification event. They are never indexed, searched, or shared outside that moment.
Minimum data collection
We ask only for name, photo, age, and travel dates. Location is collected only when a search is active. No browsing history, no device fingerprinting.
Account deletion on request
Any user can request permanent deletion of their account and all associated data. We fulfill the request within 72 hours and confirm in writing.
No data selling, ever
Our revenue comes from event partnerships, not advertising. Your data is not a product. It never will be.
Consent at every step
We obtain explicit consent before collecting location or photos. You can withdraw consent at any time from the app settings.
A scan that identifies without exposing
When someone scans a lost child's wristband, they see a reassuring message that confirms the child is registered with Trinetra and a prompt to notify the system. They do not see the parent's phone number, address, or any personal detail.
The system sends the alert directly to the family. Contact happens through the platform, never through a stranger holding a phone number. The finder becomes a helper, not a security risk.
QR encodes a Trinetra ID only
The code holds nothing but a unique, opaque identifier. No name, no number, no photo is embedded.
System notifies the parent
The platform sends an instant push notification to the registered guardian. The finder is never given contact details directly.
Own-family detection
If a family member scans their own QR, the system recognises the match and suppresses the lost-person flow, preventing false alarms and misuse.
Role-gated scan actions
Volunteers and operators have elevated scan privileges, but every action is logged, timestamped, and tied to their verified account.
Alerts that persist until the child is safe
An alert is not a one-time notification. Once a search begins, Trinetra continues sending status updates to the parent at every stage: scan detected, volunteer alerted, location confirmed, reunion complete.
Live location is shared with the family only for the duration of the active reunification. The moment the child is marked safe, location sharing stops automatically. No persistent tracking, no data retained beyond the event.
What happens, step by step, when every second counts
Reunification sequence
Scan detected
A volunteer or bystander scans the QR wristband. Trinetra identifies the person and begins the reunification flow immediately.
Family notified instantly
A push notification with the scanner's approximate location reaches the registered guardian within seconds.
Nearest volunteer alerted
The closest available volunteer receives a task assignment and confirms their position. Their live location is shared with the family.
Booth escalation if needed
If no volunteer is nearby or the child is distressed, the nearest help booth is notified and designated as a safe holding point.
Helpline numbers on hand
Official helpline numbers, including 112, are one tap away in the app, so operators and supervisors can call for police or medical help without leaving the case.
Reunion confirmed
The guardian confirms safe reunion in the app. Alerts cease, location sharing ends, and the event is logged for post-event review.
Escalation roles
Citizen
Scans QR, triggers the alert. No login required for the finder.
Volunteer
Receives task, shares live location, escorts the person to family or booth.
Booth Operator
Safe holding point. Can escalate to a supervisor or call 112 for help if the situation warrants.
Supervisor
Manages multiple active cases, reassigns volunteers, coordinates with authorities.
Admin
Full platform oversight, audit logs, and post-event reporting for the organising body.
National Emergency: 112
Surfaced in the app for operators and pilgrims alike — one tap to call.
Layers of protection, all the way down
Every request passes through multiple verified checkpoints before touching protected data. Role-based access ensures that each actor sees only what they need.
Client Application
Next.js PWA + Android (Capacitor) — HTTPS only, local session token, no sensitive data persisted to device
TLS 1.3
Secure API Gateway
FastAPI — JWT authentication, rate limiting, input validation, CORS policy
Role-based access control
Encrypted channel
Hardened Database
MySQL with bcrypt-hashed credentials, automated backups, and an audit log for all writes
Commitments that do not change between versions
Zero data selling
Your data is never shared with advertisers, partners, or data brokers. Full stop.
Verified network only
Every operator, volunteer, and supervisor is identity-verified before being granted access.
Alerts until safe
Notifications do not stop until the reunion is confirmed. No manual follow-up required.
Helplines on hand
Official helpline numbers, including 112, are one tap away for operators and pilgrims throughout the app.
Walk the ghats with peace in your heart
Trinetra carries the weight of protection so your family only carries the joy of the pilgrimage.