# Privacy Policy for Ek Patro
**Effective Date:** September 5, 2026
**Last Updated:** September 5, 2026
**Application Name:** Ek Patro: Nepali Calendar Hub
**Contact Email:** janakpariyar996@gmail.com
---
## 1. Introduction
Welcome to **Ek Patro** ("we", "our", or "us"). We are committed to protecting your privacy and ensuring transparency regarding how data is handled when you use our mobile application and related digital services (collectively, the "Service").
This Privacy Policy explains what information we collect, how it is used, how your data is secured, and your rights regarding your personal information in compliance with the **Google Play Developer Policy** and applicable data protection regulations.
By downloading, installing, or using Ek Patro, you agree to the collection and use of information in accordance with this policy.
---
## 2. Information We Collect and How We Collect It
We believe in minimal data collection. You can use all public calendar features without creating an account or providing personal identity details.
### A. Information Stored Locally on Your Device (Not Transmitted to Us)
* **Personal Notes & Reminders:** Any private notes, tasks, or custom alerts you create for specific Bikram Sambat (BS) or Gregorian (AD) dates are stored **exclusively in your device's local memory** (via on-device local storage / SQLite). We do not transmit, sync, read, or store your personal notes on our remote servers.
* **Channel Subscriptions & Preferences:** Your followed channels (e.g., specific banks, academic institutions, specialized IPO calendars), category filters, and calendar view settings are stored locally on your device for instant offline availability.
### B. Information Automatically Collected When You Use the Service
* **Push Notification Token (Firebase Cloud Messaging - FCM):** When you enable notifications, a unique anonymous Firebase Cloud Messaging registration token is generated for your device. This token allows our server to deliver important holiday alerts, emergency institutional notices, and calendar broadcast updates to your device. This token contains no personally identifiable information (PII) such as your name, phone number, or email.
* **Device & Usage Data:** When the app connects to our secure API servers (`https://appapi.whereismybusiness.com/api`), standard server logs may record:
* IP address (used temporarily for network routing and DDoS mitigation).
* Device model, operating system version, and application version.
* Basic anonymized diagnostic logs in the event of an application crash.
note: the api endpoints can be changed with time
### C. Information We DO NOT Collect
* We **do not** collect your real name, physical address, national identity numbers, or financial account details.
* We **do not** access your device contacts, photo gallery, microphone, or precise GPS location.
* We **do not** sell, rent, or monetize your personal data to third-party data brokers.
---
## 3. How We Use the Collected Information
The limited data collected is used strictly for the following operational purposes:
1. **Delivering Calendar Feeds & Public Notices:** To provide up-to-date Bikram Sambat 2083 dates, Tithi, gazetted public holidays, and institutional event schedules.
2. **Push Notifications & Alarms:** To send time-sensitive calendar notifications, AGM alerts, exam routines, and holiday reminders when requested by you or your subscribed channels.
3. **App Performance & Offline Caching:** To optimize network request speeds through our stale-while-revalidate caching layer and ensure seamless offline functionality.
4. **Security & Spam Prevention:** To protect our API infrastructure against unauthorized access, abusive traffic, or malicious attacks.
---
## 4. Device Permissions and Why They Are Needed
Ek Patro requests only the minimal Android permissions necessary to deliver core calendar utility:
| Permission | Technical Name | Purpose / Justification |
|---|---|---|
| **Post Notifications** | `POST_NOTIFICATIONS` | Required on Android 13+ to deliver subscribed channel notices, emergency announcements, and reminder alarms. |
| **Schedule Exact Alarms** | `SCHEDULE_EXACT_ALARM` / `USE_EXACT_ALARM` | Required to trigger local reminder alarms and calendar notifications precisely at the user-specified time. |
| **Internet Access** | `INTERNET` | Required to fetch real-time calendar updates, public holiday notices, institutional banners, and event PDF circulars. |
| **Network State** | `ACCESS_NETWORK_STATE` | Used to detect online/offline connectivity and serve cached calendar data when offline. |
*You can grant or revoke notification and alarm permissions at any time via your device's **Settings > Apps > Ek Patro > Permissions**.*
---
## 5. Third-Party Services & Links
Our application integrates a limited number of trusted third-party service providers to ensure app reliability and notification delivery:
* **Google Play Services:** Used for app distribution, in-app updates, and platform compliance.
[Google Play Privacy Policy](https://policies.google.com/privacy)
* **Firebase Cloud Messaging (Google LLC):** Used for delivering real-time push notification alerts.
[Firebase Privacy & Security](https://firebase.google.com/support/privacy)
* **External Links & Institutional Attachments:** Some event cards published by verified institutions may contain external links (such as Google Forms for seminar registration or PDF documents). When you click an external link, you are directed to that third-party website. We recommend reviewing the privacy policy of any third-party website you visit.
---
## 6. Data Security and Encryption
We take the security of your data seriously and apply industry-standard security measures:
* **Encryption in Transit:** All network communication between the Ek Patro mobile app and our backend servers is strictly encrypted using **HTTPS / TLS 1.3** protocols.
* **On-Device Isolation:** Private notes and local preferences are protected by Android's sandbox security model, preventing unauthorized access by other applications.
* **Access Control:** Our backend infrastructure is secured behind authenticated firewall protocols and strictly controlled administrative access.
---
## 7. Data Retention and Deletion Rights
* **Local Data Removal:** Because your personal notes and calendar preferences reside on your physical device, you can delete all personal data at any time by clearing the application data in **Android Settings > Apps > Ek Patro > Storage > Clear Data**, or by uninstalling the application.
* **Push Token Deletion:** When you disable notifications in the app settings or uninstall the app, your FCM registration token is automatically invalidated and deleted from our active broadcast dispatch lists.
* **Data Deletion Request:** If you have questions about data deletion or wish to verify token disassociation, you may submit a request by contacting us at [support@whereismybusiness.com](mailto:support@whereismybusiness.com).
---
## 8. Children's Privacy (COPPA Compliance)
Our Service is designed for general corporate, academic, and individual productivity. We do not knowingly collect or solicit personal information from children under the age of 13. If you believe a child has provided us with personal data, please contact us immediately, and we will take prompt steps to remove such information.
---
## 9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect technological, operational, or legal improvements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage users to review this Privacy Policy periodically.
---
## 10. Contact Us
If you have any questions, suggestions, or concerns regarding this Privacy Policy or our data practices, please contact us at:
* **Organization / Developer:** Ek Patro Team
* **Support Email:** [janakpariyar996@gmail.com]
* **Technical Contact:** [anakpariyar996@gmail.com]
* **Address:** Kathmandu, Nepal