PRIVACY POLICY FOR HNAHSIN KUT
Last Updated: September 3, 2026
Effective Date: September 3, 2026
Welcome to Hnahsin Kut, the official mobile companion application for the Hnahsin Kut festival in Champhai, Mizoram. This Privacy Policy outlines how Champhai Nature Conservancy and Siruk Consultancy ("we", "us", or "our") collect, use, store, share, and protect your information when you use our mobile application (Hnahsin Kut, Package Name: com.siruk.hnahsinkut) and associated services.
By downloading, accessing, or using the Hnahsin Kut mobile application, you consent to the data practices described in this Privacy Policy.
--------------------------------------------------------------------------------
1. INFORMATION WE COLLECT
We only collect data that is strictly required to provide festival scheduling, ticket management, interactive grounds activities, and attendee safety.
A. Information You Provide to Us
- Account Information: When you sign in (via Google Sign-In, Apple Sign-In, or phone/email), we collect your name, email address, profile picture (if provided by your identity provider), and phone number.
- Ticketing & Passes: When you purchase festival passes, register for events, or take part in lucky draws, we collect your transaction details and assigned digital ticket credentials.
- Stall Bidding & Vendor Applications: If you apply for a vendor pad or food stall, we collect your name, contact details, layout slot bids, and business contact information.
- Payment Screenshots & Verification: If you select manual UPI payment verification, you may choose to upload payment receipt images or transaction screenshots.
- Customer Support: Information you transmit when contacting festival support or reporting issues.
B. Information Collected Automatically
- Device & Hardware Details: Device model, operating system version, unique device identifiers, locale/language, and network state.
- Application Diagnostics: Performance analytics, feature usage logs, and crash metrics to keep the app reliable.
- Push Notification Tokens: Tokens generated via Firebase Cloud Messaging (FCM) and Expo Notifications to send critical festival bulletins, lucky draw results, and schedule updates.
C. Device Permissions & Sensitive Data Usage
Our app requests specific permissions only when required to provide core features:
- Location Data (Foreground Only):
* Declared Permissions: ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION.
* Purpose: To show your real-time position on the interactive festival grounds map, locate nearby stages, emergency services, food stalls, and alert you when you are near Cosmos Badges in the scavenger hunt.
* Background Tracking: We do not track or access your location in the background. Location access occurs solely while the app is in active foreground use.
- Camera (android.permission.CAMERA):
* Purpose: To scan QR codes positioned throughout the festival venue during the Cosmos Scavenger Hunt, and for authorized staff to validate ticket QR codes at gates.
* Privacy Assurance: Camera feeds are processed locally in real time for barcode scanning; no video feeds or photos are saved without your direction.
- Photos & Storage Access (android.permission.READ_MEDIA_IMAGES):
* Purpose: Only used when you choose to upload a payment proof screenshot for UPI verification, or share festival moment photos. The app never scans or reads unrelated media files.
- Audio Recording (android.permission.RECORD_AUDIO):
* Purpose: Declared for optional festival audio interactive features. It is never activated without explicit user interaction.
--------------------------------------------------------------------------------
2. HOW WE USE YOUR INFORMATION
We process your data for the following explicit purposes:
1. Festival Companion Operations: Delivering real-time schedules, artist line-ups, site maps, and venue announcements.
2. Gate Entry & Ticketing: Issuing, displaying, and scanning digital passes for venue entry.
3. Interactive Events: Tracking Cosmos Scavenger Hunt badges and administering festival lucky draws.
4. Vendor Logistics: Evaluating stall bids, communicating allotment results, and organizing on-site stalls.
5. Direct Announcements: Pushing weather advisories, schedule changes, and urgent notifications.
6. Fraud Prevention & Safety: Preventing duplicate ticket redemption and ensuring physical safety on the festival grounds.
--------------------------------------------------------------------------------
3. PAYMENTS AND FINANCIAL SECURITY
- All payments for festival tickets, lucky draws, or stall bids are securely processed through RBI-authorized payment aggregators (such as Razorpay) and UPI apps (Google Pay, PhonePe, Paytm, BHIM).
- We do not collect, process, or store credit/debit card numbers, CVVs, net banking passwords, or UPI PINs. All payment processing occurs on secure, PCI-DSS-compliant gateways.
--------------------------------------------------------------------------------
4. THIRD-PARTY SERVICES
We work with trusted third-party SDKs and service providers to operate the application. These providers have their own privacy policies governing data handling:
- Google Play Services: Base platform infrastructure and diagnostics.
- Google Identity / Sign-In: Account authentication.
- Firebase (Google LLC): Push notifications (FCM) and backend messaging.
- Expo (650 Industries): App framework, updates, and secure on-device token storage.
- Google Maps API: Map tiles and spatial venue rendering.
- Razorpay: Secure payment checkout and UPI intents.
We do not integrate third-party ad networks and do not sell your personal information to third-party advertisers or data brokers.
--------------------------------------------------------------------------------
5. DATA SHARING AND DISCLOSURE
We do not share your personal data with external entities except:
- Event Organizers: Authorized ground coordinators from Champhai Nature Conservancy for ticket gate verification and stall logistics.
- Service Infrastructure Providers: Cloud database and messaging providers bound by strict confidentiality terms.
- Legal Requirements: When mandated by applicable Indian law, court order, or governmental authorities.
--------------------------------------------------------------------------------
6. DATA SECURITY AND RETENTION
- Security: All communication between the app and our servers is encrypted using HTTPS/TLS 1.2+. Sensitive local tokens are stored within the operating system's secure keystore.
- Retention: We retain account data and ticket history only for the duration needed to operate festival services, handle audits, or until you request deletion.
--------------------------------------------------------------------------------
7. ACCOUNT AND DATA DELETION (GOOGLE PLAY COMPLIANCE)
In adherence to Google Play's User Data policies, users can request the complete deletion of their account and all associated personal data.
To request deletion:
- In-App: Visit your Account section within the mobile app and choose account options to request deletion.
- By Email: Send an email from your registered email address to hello@hnahsinkut.com with the subject "Account Deletion Request - Hnahsin Kut".
Deletion Timeline:
Upon receiving your request, we verify your identity and permanently delete your profile, authentication records, contact info, and activity progress within 30 days, retaining only records required by legal or tax obligations.
--------------------------------------------------------------------------------
8. CHILDREN'S PRIVACY
Our app is directed toward general audiences attending Hnahsin Kut. We do not knowingly collect personal data from children under 13 years of age. If you become aware that a child has provided us with personal information without parental authorization, please notify us at hello@hnahsinkut.com so we can remove the data immediately.
--------------------------------------------------------------------------------
9. UPDATES TO THIS POLICY
We may amend this Privacy Policy periodically to reflect app enhancements or statutory updates. When changes are made, the "Last Updated" date at the top will be revised accordingly.
--------------------------------------------------------------------------------
10. CONTACT US
For questions, privacy concerns, or data deletion inquiries, please reach out to:
- Organizers: Champhai Nature Conservancy & Siruk Consultancy
- Contact Email: contact@siruk.io
- Official Website: https://hnahsinkut.com
- Location: Champhai, Mizoram, India