Aaroh privacy policy

Who we are

Aaroh (called GVT ERP inside the app) is the field operations app of Global Vikas Trust (GVT). GVT staff use it to register farmers, record land, orders, deliveries and payments, and photograph their work.

GVT decides what data the app collects and why. Vimana builds and maintains the app for GVT. GVT's address is 101 & 102, Aabhar Condominium, Plot No. 46, Near Jain Mandir, Ram Krishna Nagar, Khar West, Mumbai, Maharashtra 400052, India.

Whose data this covers

• Staff and administrators who sign in to the app. Administrators create these accounts. Nobody can sign up on their own.
• Farmers whose details staff enter for them. Farmers do not use the app.

What we collect

Staff and administrators

• Name, mobile number, optional email address and user ID.
• A one-time code sent to the mobile number signs staff in. There is no password.
• An audit log of actions in the app: who did what, to which record, and when.

Farmers

• Name, date of birth, gender, mobile number, residential address and village.
• Caste, previous income and family members.
• Land parcels and land records, orders, deliveries, payments and purchase history.
• Bank account number, IFSC code and account holder name, so GVT can pay subsidy. We store these encrypted.

Aadhaar

• Staff scan the QR code on a farmer's Aadhaar card, and the app reads the card text. The phone processes the card image and never uploads it.
• The phone sends the QR data and card text to our server. The server turns the 12-digit Aadhaar number into a one-way token and does not keep the number.
• The server keeps the last four digits, name, date of birth, gender, care-of name, address and the photograph printed in the QR code.
• If the phone is offline, it holds the scanned data in an encrypted queue until the server confirms receipt.

Photos, files and location

• Photos of the farmer, the plot, water sources, soil reports and delivery evidence, and any documents staff attach.
• Each evidence photo carries the latitude, longitude, GPS accuracy and time it was taken.

Permissions the app asks for

How we use it

• To run GVT's farmer programmes: registration, land verification, orders, delivery, payment and subsidy.
• To confirm a farmer's identity.
• To sign staff in and keep an audit trail of what they do.
• To show where and when evidence photos were taken.

We do not use the data for advertising. The app has no advertising, analytics or crash-reporting tools.

Who receives data

We send data to the parties below only to run the feature named. The table says what each party receives.

We do not sell personal data. Some of these parties also collect data under their own terms and privacy policies. We may disclose data when the law requires it.

Security

• The app connects to our servers over HTTPS.
• We encrypt bank details before storing them. We do not keep the Aadhaar number, only a one-way token made from it.
• Only staff with an account and the right permission can see or change records.

How long we keep data

We keep records while GVT works with the farmer or employs the staff member, and for as long as the law requires. Aadhaar-derived records have no expiry date today. We do not yet delete records automatically.

The app has no button for deleting your own data. When an administrator deletes a record, the app hides it and marks it deleted. The database still holds it.

Your requests

You can ask us to show you the data we hold about you, correct it, or delete it. Farmers can ask through GVT staff or write to us directly.

Children

The app is for GVT staff and is not directed at children. Staff enter farmer records, and those records describe adult farmers and their households.

Changes to this policy

If we change this policy, we will update this page and its effective date.

Contact