Effective date: 18 August 2026
Last updated: 18 August 2026
Entity: Comfort World
Registered operating address: Sree Sai Layout, Bengaluru, Karnataka 560064, India
Contact: contact.comfortworld@gmail.com · +91 87223 33244
Office hours: 8:00 a.m. – 6:00 p.m. IST, Monday to Saturday
Comfort World ("we", "our", "us") operates the Comfort World PG mobile application and the resident management system behind it. This policy explains what personal data we collect, why, who can see it, and how long we keep it. It is written to meet the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and Google Play Developer Policies.
a. Identity and verification (KYC)
Full legal name, date of birth, gender, permanent address, mobile number, email address and passport-size photograph. Aadhaar number and document, required for the mandatory local police tenant verification that applies to paying-guest accommodation in Bengaluru. Where applicable we also hold a college ID or employee ID document.
Your Aadhaar number is displayed masked in the app.
b. Emergency contact
The name, relationship and phone number of the parent, guardian or other person you nominate.
c. Academic and workplace details
College or university name, course, year or semester and USN; or employer name, designation and work location. For sponsored residents these are supplied by the institution or company at admission.
d. Stay records
Block, floor, room and bed allotment; check-in and check-out dates; admission type and renewal history; daily attendance recorded by staff; and leave or night-out requests with their dates, reason and decision.
e. Biometric gate access
Entry to and exit from the premises is recorded by a biometric reader at the gate. We collect and store your fingerprint template and the date and time of each entry and exit. Biometric data is used only to control and record access to the premises. It is never shared with your college, employer or sponsor, and is never used for profiling or advertising.
f. Payment records
Dues raised, payment history, payment mode, and the UPI transaction or reference number of a payment you report.
We also collect the payment screenshot you upload. Payments are not processed inside the app — you pay by scanning our UPI QR code in your own UPI application, then upload a screenshot which our staff verify manually against the payment we received.
Please crop your screenshot before uploading. A UPI confirmation screen often shows more than the payment itself — your UPI ID, bank name, account balance or other recent transactions. We only need the amount, date and reference number. Hide anything else you do not want staff to see.
We do not collect or store your bank account number, card number, UPI PIN or any banking credential. We never ask for them, and no one from Comfort World will.
g. Health information
When you raise a medical request, you describe a health problem and may attach a photograph. This is health data and we treat it as confidential. See section 4.
h. Support and service records
Maintenance and complaint tickets, including any photograph you attach; feedback you submit during a feedback window; and administrative communications.
i. Premises CCTV
Common areas of our premises are under CCTV for security. Cameras are not installed in rooms, bathrooms or any private space.
j. Device and technical data
Device model, operating system version, app version, a Firebase push-notification token, crash reports and diagnostic logs, and basic in-app usage events. Usage and crash data are identified by your resident code, never by your name or email.
k. What we do not collect
We do not track your location. We do not use your data for advertising, and we do not sell it to anyone.
To provide accommodation and perform your tenancy agreement — allotment, renewal, check-in and check-out
To verify your identity and complete mandatory police tenant verification
To raise and collect dues, verify UPI payments, and maintain financial records
To issue and verify your digital resident ID card
For resident safety and premises security — gate access control, attendance, leave records, emergency contact, CCTV
To handle complaints, medical requests and feedback
To send you notices, dues reminders and announcements
To keep the app working and diagnose faults
To comply with municipal safety regulations, police reporting directives, and tax and accounting law
Access inside our system is partitioned by role.
Role
Can see
Cannot see
You (the resident)
Your full profile, dues and payment history, attendance, leave history, your own complaints, medical requests and ID card
Any other resident's records
Hostel staff and wardens
Room and allotment status, attendance, complaint and maintenance tickets, gate entry and exit records, emergency contact, police verification status, dues status
Your banking details (we hold none); medical request details, except the staff handling that request
Medical / care team staff
Your medical requests and any attached photograph
—
Accounts staff
Dues, payment history and uploaded payment proofs
Medical request details
Parent or guardian
No access to any resident record. We contact a guardian in an emergency, and for residents under 18 we obtain parental consent at admission (section 5).
Attendance, leave, dues, complaints, medical requests and all other records
Sponsoring college or employer
Consolidated invoices and confirmation of occupancy
Attendance, leave details, complaints, grievances, medical information
Four categories carry extra care:
Health data from medical requests is visible only to the staff handling your request. It is not shared with your college, employer or sponsor.
Aadhaar and identity documents are used only for identity verification, police tenant verification and legally required record-keeping.
Payment screenshots are used only to verify a payment against your dues.
Biometric data is used only for gate access control. Your biometric template is deleted when you check out.
We accommodate residents under the age of 18 only after verified parental or guardian onboarding.
Parental consent: for any resident under 18, personal data and KYC records must be provided or confirmed by a parent or legal guardian, at physical admission or through the digital onboarding form.
Safeguards: a minor's data is processed strictly for safety, emergency medical response, guardian communication and lawful housing administration.
We do not use minors' data for profiling, targeted advertising or behavioural tracking.
We do not sell personal data. We share it only as follows:
Google (Firebase) — Cloud Messaging to deliver push notifications, Crashlytics for crash reports, and Analytics for usage data, under Google's terms.
Hostinger — the virtual private server that runs our application and database.
Amazon Web Services — Amazon S3, Asia Pacific (Mumbai) region, where your uploaded documents and images are stored; and Amazon SES for transactional email.
Your sponsoring college or employer — invoices and occupancy confirmation only, as set out in section 3.
Police and government authorities — for mandatory Bengaluru police tenant verification for paying-guest accommodation, and when lawfully required by legal process.
Notifications are currently delivered by push notification, email and in-app message.
Our application and database run on a Hostinger virtual private server located in Mumbai, India. Uploaded documents and images are stored in Amazon S3, Asia Pacific (Mumbai) region, in India. Login tokens are stored in your phone's encrypted secure storage.
Record
Retention
Then
KYC and police verification files
Active stay + 1 year after check-out
Securely deleted
Financial and rent transaction records
7 years from end of financial year (statutory tax compliance)
Archived / aggregated accounting
Uploaded payment screenshots
7 years, alongside the financial record they evidence
Deleted with that record
Biometric templates
Duration of your stay
Deleted at check-out
Gate entry and exit records
180 days, rolling
Automated purge
Attendance records
180 days, rolling
Automated purge
Leave and night-out approvals
Duration of the academic or tenancy year
Purged on annual renewal
Complaints, maintenance and feedback
90 days after the ticket is resolved
Anonymised for quality metrics
Medical requests
90 days after the request is resolved
Deleted
CCTV footage
30 days, unless retained for an active legal inquiry
Automatically overwritten
Your app account (login, device tokens)
Closed and deleted after you vacate
Hard deleted from live systems
Closed account metadata
30 days after a verified deletion request
Hard deleted from live systems
Crash and usage data
As retained by Firebase under Google's own settings
—
Traffic between the app and our servers is encrypted in transit. Login tokens are held in your device's secure storage, expire regularly and can be revoked. Staff access is restricted by role, as set out in section 3. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as required by law.
You may:
Access an extract of the personal data we hold about you
Correct it — you can already update your course, year/semester and USN in the app; for anything else, contact us
Request deletion — see section 11
Restrict non-essential processing, and withdraw consent for non-statutory notifications
Nominate someone to exercise these rights on your behalf if you are unable to
Complain to our Grievance Officer (section 12), and after that to the Data Protection Board of India
You can request deletion of your account and data in any of these ways:
Online form: https://sites.google.com/view/comfortworld/home — complete the deletion request form linked there
Email: contact.comfortworld@gmail.com, subject line "Data Deletion Request"
In person: ask at the front desk
So that we can verify the request is yours, please give your name, your registered phone number and your email address.
We acknowledge within 24–48 hours and complete verified deletions within 30 days.
What is deleted: your app login, device tokens, push notification history, and temporary logs.
What is retained, and why: payment and tax records for the statutory period in section 8, and police verification records for as long as the law requires. We will tell you what was deleted and what was retained.
You do not have to ask: we close and delete your app account after you vacate in any case. Records we must keep by law are retained for the periods in section 8.
Closing your app account does not end your accommodation agreement or cancel dues you owe.
Grievance Officer: Nagendra Babu
Company: Comfort World
Address: Sree Sai Layout, Bengaluru, Karnataka 560064, India
Email: contact.comfortworld@gmail.com
Phone: +91 87223 33244
Response window: acknowledgement within 24–48 hours; resolution within 15 business days
Camera and photos — only to take or choose a payment screenshot, complaint photo, medical photo or profile picture. We access the image you select, never your whole gallery.
Notifications — for dues reminders, complaint updates and hostel notices. You can turn these off in your phone settings; the app keeps working.
Storage — only to save your ID card PDF to your Downloads folder when you tap Download.
We may update this policy. The version and effective date are shown at the top. If a change materially affects how we use your data, we will notify you in the app before it takes effect.
Any dispute arising from this policy falls under the exclusive jurisdiction of the competent courts in Bengaluru, Karnataka, India.
service available from: 8 a.m.–6 p.m., Monday to Saturday
service available at: Sree Sai Layout, Bengaluru, Karnataka 560064
Phone: +91 87223 33244
Email: comfortworldoffical@gmail.com