Privacy Policy for BalSathi

Last updated: June 14, 2026

1. Introduction

BalSathi ("we", "us", or "our") is a maternal and child health platform designed for Anganwadi workers, parents, and health supervisors in rural Maharashtra. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using BalSathi, you agree to this Privacy Policy.

2. Information We Collect

2.1 Account & Profile Information

• Full name (first name, last name)

• Mobile phone number

• Role (Anganwadi worker, parent, supervisor, admin)

2.2 Child Health Information

• Child's name, date of birth, gender

• Growth measurements: height, weight, head circumference, arm circumference

• WHO-computed health indicators (Z-scores, growth status, trends)

• Vaccination records and schedules

• Location identifiers: state, district, block, sector, AWC (Anganwadi Centre)

• Approval status and supervisor notes

2.3 Device Information

• Device model and OS version

• A unique device identifier (UUID) generated on first use

• Firebase Cloud Messaging (FCM) token for push notifications

• Platform type (Android, iOS, Web)

2.4 Usage Data

• Authentication tokens (JWT), stored securely on your device

• Language and locale preferences

3. How We Use Your Information

Purpose

Data Used

Child health tracking and growth monitoring

Child profile, growth records

Vaccination reminders and scheduling

Vaccine records, child DOB

Push notifications for health alerts

FCM token, device ID

Role-based access control

User role, permissions

Approval workflows for child registrations

Child data, approval notes, user role

App functionality and session management

JWT tokens, device code

We do not use your data for advertising or sell it to third parties.

4. Data Storage and Security

• Authentication tokens are stored in encrypted secure storage (flutter_secure_storage) on your device.

• Health data is transmitted over HTTPS to our backend servers.

• We use Firebase (Google) for push notifications; FCM tokens are sent to Firebase servers.

• We take reasonable technical measures to protect your data, but no system is 100% secure.

5. Third-Party Services

We use the following third-party services:

Service

Purpose

Provider

Firebase Authentication

User sign-in

Google LLC

Firebase Cloud Messaging

Push notifications

Google LLC

Firebase (General)

App infrastructure

Google LLC

These services have their own privacy policies. We recommend reviewing Google's Privacy Policy.

6. Children's Data

BalSathi processes health data of children under 5 years of age as part of its core function. This data is:

• Entered only by authorized Anganwadi workers or parents

• Used only for child health monitoring and maternal care

• Never shared with third parties outside the platform

We comply with applicable Indian laws regarding the handling of sensitive personal data.

7. Data Retention

We retain data as long as your account is active and as required by government health program obligations. You may request deletion of your account and associated data by contacting us.

8. Your Rights

You have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your account

• Withdraw consent for notifications at any time (via device settings)

9. Contact Us

For privacy concerns or data requests, contact:

BalSathi Support

Email: sayneeltech@gmail.com

10. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes through the app. Continued use of BalSathi after changes constitutes acceptance of the updated policy.

Me done! You need to host this as a webpage (Google Play require public URL for privacy policy). Me suggest putting it on a free site like GitHub Pages, Notion (make page public), or your own domain, then paste the URL in Google Play Console under App content → Privacy policy.