Privacy Policy

Last Updated: 25 May 2026 

Version: 1.0 

App Name: Tisra Netra

Purpose: AI-powered assistive application for visually impaired users

TABLE OF CONTENTS

1. Introduction

2. Information We Collect

3. How We Use Your Information

4. Data Sharing & Third Parties

5. Data Security

6. Your Rights & Choices

7. Data Retention

8. Children's Privacy

9. International Data Transfers

10. Contact Us

1. INTRODUCTION

Welcome to Tisra Netra("we," "our," "us," or "Company"). We are committed to protecting your privacy and ensuring you have a positive experience on our mobile application and related services (collectively, the "Service").

This Privacy Policy explains:

• What information we collect

• How we use that information

• Your choices regarding your information

• How we protect your data

Scope: This Privacy Policy applies to Tisra Netra mobile application (Android/iOS), website, and related services. It does NOT apply to third-party services linked from Tisra Netra.

By using Tisra Netra, you agree to this Privacy Policy. If you do not agree, please do not use our Service.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account Registration:

• Name

• Email address

• Age

• Preferred language(s)

• Emergency contact information (phone)

Profile Information:

• Disability type (blind/low vision)

• Severity level (blind/partially blind)

• Preferred communication method (voice/text)

• Accessibility preferences

• Personal interests/hobbies

Face Recognition Registration (Optional):

• Photos of family members/friends for identification

• Relationship to each person

• Names/nicknames

Volunteer Information (if volunteering):

• Full name, email, phone

• Background check authorization

• Availability/schedule

• Qualifications

• Profile information

Payment Information (if applicable):

• For premium features: Payment method (credit/debit card, UPI, etc.)

• Billing address

• Transaction history

• Note: We use Stripe/Razorpay for payment processing; we do NOT store complete card details

2.2 Information Collected Automatically

Device Information:

• Device model and OS (Android/iOS)

• App version

• Device ID (IMEI, Android ID)

• Unique app identifier

Location Data:

• GPS coordinates (when using navigation feature)

• City/region information

• Venue/landmark detection

• How It's Used: Navigation assistance, obstacle detection, emergency location sharing

• Control: Users can enable/disable location sharing per feature

Camera & Microphone Data:

• Camera frames (for OCR, object detection, face recognition)

• Audio recordings (for voice commands)

• Important: Camera/audio data is processed locally on device by default; NOT uploaded to cloud unless user explicitly requests volunteer assistance or cloud backup

• Control: Users can disable camera/microphone at any time

Usage Data:

• Features accessed (OCR, navigation, emergency SOS, etc.)

• Duration of app usage

• Time of day/frequency

• Errors encountered

• Voice command transcripts (temporary, for improvement only)

• Search queries

Analytics:

• Session information

• Crash reports

• Performance metrics

• User interactions

Network Information:

• IP address

• WiFi/mobile network information

• Internet connectivity status (online/offline)

2.3 Information from Third Parties

We do not give any information to third parties

3. HOW WE USE YOUR INFORMATION

3.1 Primary Uses

Core Service Delivery:

• Enable OCR (text reading) functionality

• Provide real-time navigation and obstacle detection

• Identify faces and recognize people

• Detect objects and describe scenes

• Process voice commands

• Provide emergency SOS functionality

• Connect you with volunteers when needed

• Offer AI chat assistance

• Recognize colors and currencies

Offline Functionality:

• Store and process data locally on your device

• Sync data to cloud only when you go online (if enabled)

• Maintain offline-first operation

Account Management:

• Create and manage your account

• Verify your identity

• Process payments for premium features

• Send account-related notifications

Communication:

• Send push notifications about features, updates, safety alerts, helps

• Respond to your support requests

• Send newsletters/educational content (with consent)

Service Improvement:

• Analyze usage patterns to improve features

• Fix bugs and optimize performance

• Develop new features based on user needs

• Conduct user research and surveys

Legal & Safety:

• Comply with legal obligations

• Enforce terms of service

• Investigate fraud/misuse

• Protect user safety and security

3.2 Secondary Uses (With Consent)

Volunteer Network:

• Match you with qualified volunteers

• Share relevant information (what you need help with)

• Rate and improve volunteer service

Emergency Response:

• Share your location with emergency contacts

• Make call emergency services if you trigger SOS

4. DATA SHARING & THIRD PARTIES

4.1 When We Share Information

We DO NOT sell your personal data. We share information only in these cases:

Volunteers (When You Request):

• Your location, what you need help with

• Camera feed (if you share it)

• Your voice/messages

• Control: You can disable volunteer feature

Service Providers:

• Cloud hosting: Firebase, Google Cloud (encrypted)

• Payment processing: Stripe, Razorpay (PCI-DSS compliant)

• Analytics: Google Analytics (anonymized)

• All have data processing agreements; they cannot use data for their own purposes

Emergency Services (If SOS Triggered):

• Your location

• Emergency contact information

• Video/audio from the moment of emergency

• Medical information (if provided)

Law Enforcement (If Required):

• Only with valid legal warrant/court order

• We will notify you unless legally prohibited

• Minimal data necessary

Grant Funders & NGO Partners:

• De-identified usage statistics

• Case studies (with explicit consent)

• Impact metrics

• No personal identifying information without consent

Business Partners (With Consent):

• If you explicitly agree to share data with health insurance, employers, etc.

4.2 Third-Party Services We Use

Service

Purpose

Data Shared

Privacy Policy

Firebase

Cloud storage, auth, notifications

Account data, analytics

https://policies.google.com/privacy

Google Maps API

Navigation, location

GPS coordinates

https://policies.google.com/privacy

Gemini API

AI text/image processing

Camera frames, text (encrypted)

https://policies.google.com/privacy

Stripe/Razorpay

Payment processing

Billing info (tokenized)

https://stripe.com/privacy, https://razorpay.com/privacy

Google Analytics

Usage analytics

Anonymized session data

https://policies.google.com/privacy

Twilio

SMS/voice communication

Phone number, messages

https://www.twilio.com/en-us/privacy

4.3 No Third-Party Marketing

• We do NOT share your data with advertisers

• We do NOT allow third parties to track you through Tisra Netra

• We do NOT use your data for personalized advertising (though you may see general ads for accessibility products)

5. DATA SECURITY

5.1 Security Measures We Take

Encryption:

• Data in transit: TLS/SSL 1.2+ encryption

• Data at rest: AES-256 encryption in cloud databases

• End-to-end encryption option for sensitive messages

Access Control:

• Password-protected accounts

• Role-based access

Offline Security:

• Data stored locally on device is encrypted and secure

• User authentication required to access app's all feature

Infrastructure Security:

• Firebase: Google's enterprise-grade security

• Regular security audits & penetration testing

• DDoS protection

• Intrusion detection systems

Team Security:

• Background checks for team members with data access

• Confidentiality agreements

• Privacy & security training

• Minimal data access principle

5.2 Limitations

No Guarantee: While we implement strong security, no system is 100% secure. We cannot guarantee absolute security of your data.

Your Responsibility:

• Keep your password confidential

• Use strong, unique passwords

• Keep your device updated

• Report suspicious activity immediately

5.3 Data Breach Notification

• If we discover a breach affecting you, we will notify you within 72 hours

• Notification will include: what data was affected, when, what we're doing about it, what you should do

• We will cooperate with law enforcement if required

6. YOUR RIGHTS & CHOICES

6.1 Your Data Rights

You have the right to:

Access: Request a copy of all personal data we hold about you

• Submit request via: Abhimanmandal123@gmail.com

• Response time: Within 30 days

• Format: Downloadable file (JSON/CSV)

Rectification: Correct inaccurate data

• Update directly in app settings, or

• Submit correction request to Abhimanmandal123@gmail.com

• We will update within 15 days

Deletion: Request deletion of your data ("Right to be Forgotten")

• Via app settings: Delete account

• Or email: Abhimanmandal123@gmail.com

• We will delete within 30 days (except where legally required to retain)

• Some data may remain in backups for up to 90 days

Portability: Export your data in portable format

• Available in app under Settings > Data Export

• Or request via: Abhimanmandal123@gmail.com

Opt-Out: Stop receiving marketing communications

• Unsubscribe link in every email

• Turn off notifications in app settings

Object: Oppose processing of your data for specific purposes

• Request via: Abhimanmandal123@gmail.com

• We will stop within 15 days (except where legally required)

6.2 Privacy Controls in App

Camera & Microphone:

• Enable/disable camera anytime

• Enable/disable microphone anytime

• Grant permission per-feature (e.g., navigation, volunteer assist)

Location:

• Enable/disable GPS tracking

• Grant location access only during active use

• Disable emergency location sharing

Data Sharing:

• Choose whether to sync data to cloud

• Choose whether to enable volunteer assistance

• Choose which data volunteers can access

Notifications:

• Turn on/off all push notifications

• Choose notification types

• Set notification frequency

Analytics:

• Opt-out of usage analytics (Settings > Privacy)

• Still required for essential analytics (crash reports, etc.)

6.3 Applicable Laws

If you are in India:

• Your rights are governed by Information Technology Act, 2000

• You can request data access/deletion anytime

If you are in Europe (GDPR):

• You have additional rights under General Data Protection Regulation

• Data transfer agreements comply with GDPR

If you are in USA/California (CCPA):

• You have rights under California Consumer Privacy Act

• We comply with CCPA requirements

7. DATA RETENTION

7.1 Retention Periods

Account Data:

• Retained while account is active

• Deleted within 30 days of account deletion

• Some data (emergency contact) retained 6 months (in case of emergency)

Camera/Audio Data:

• Offline: Stored locally on your device; you control deletion

• Cloud: Not stored; processed in real-time only if you share with volunteer

• Volunteer Sessions: Deleted after 30 days (or when you delete chat)

Location Data:

• Navigation: Deleted 7 days after navigation session

• Emergency SOS: Retained 90 days (for incident review/improvement)

• Real-time tracking: Never retained (deleted as soon as you reach destination)

Analytics/Logs:

• Aggregated usage data: 12 months

• Individual session logs: 30 days

• Error logs: 30 days

Payment Information:

• Credit card data: NOT retained (payment processor only)

• Transaction records: 7 years (for tax/compliance)

Volunteer Ratings/Feedback:

• Retained indefinitely (for volunteer improvement + matching)

• Anonymized after 1 year (volunteer's name removed)

Messages/Chat History:

• Retained while account is active

• Deleted when you delete conversation

• Deleted within 30 days of account deletion

• Backup copies: Deleted within 90 days of account deletion

8. CHILDREN'S PRIVACY

Tisra Netra is NOT intended for children under 13 years old.

If a child under 13 uses Tisra Netra:

• We do NOT knowingly collect personal information

• If we discover child data was collected, we delete it within 30 days

• Parents/guardians: Contact Abhimanmandal123@gmail.com  immediately if your child's data was collected

For visually impaired children 13-18 years:

• We require parental/guardian consent

• Parents can access child's account data

• Parents can delete account anytime

We comply with:

• Children's Online Privacy Protection Act (COPPA) in USA

• Indian laws on children's privacy

• GDPR requirements for children (<16 years)

9. INTERNATIONAL DATA TRANSFERS

Data Locations:

• Primary: India (Firebase - Google Cloud Mumbai region)

• Backup: Global (Google Cloud multi-region)

• Processing: May occur in India, USA, or EU

Data Transfer Agreements:

• All transfers comply with applicable laws

• Standard Contractual Clauses in place for international transfers

• Adequacy decisions honored where applicable

For GDPR Users:

• Data transferred from EU to India/USA

• Adequate safeguards in place

• You can request data remain in EU (may limit features)

For India Users:

• Data primarily stored in India

• Backup in global cloud (encrypted)

• Compliance with Indian data localization requirements

10. CONTACT US

10.1 Privacy Questions & Data Requests

Email: Abhimanmandal123@gmail.com
Phone: +91 7050855141
Address: Jharkhand, India
Response Time: 30 days for formal requests, 7 days for general questions

10.2 Complaint Escalation

If you're unsatisfied with our response:

In India:

• Contact: National Informatics Centre (NIC) Data Protection Authority

• Website: https://www.dpadataprotection.gov.in

• Or: Indian Computer Emergency Response Team (CERT-In)

In Europe:

• Contact: Your local Data Protection Authority

• Find yours: https://edpb.ec.europa.eu/about-edpb/board/members_en

In USA:

• Contact: Federal Trade Commission (FTC)

• Website: https://reportfraud.ftc.gov

10.3 Policy Updates

• We may update this policy anytime

• Material changes: We will notify you via email + in-app notification

• Minor changes: Posted without notification

• Your continued use = acceptance of updated policy

• Last updated: May 2026

11. SPECIAL PROVISIONS FOR ASSISTIVE TECHNOLOGY

11.1 Accessibility Commitment

Tisra Netra  Privacy Policy itself is accessible:

• Available in text format (this document)

• Audio version available (read-aloud)

• Large print version available

• Contact:Abhimanmandal123@gmail.com  for alternative formats

11.2 Sensitive Data (Disability Status)

We recognize that your disability status is sensitive:

• Disability type/severity shared only with people you authorize (volunteers, family)

• NOT shared with advertisers, insurance companies, employers without explicit consent

• You control who sees this information

11.3 Emergency Data

For safety, some data is always retained:

• Emergency contact information: 6 months minimum

• Emergency SOS location: 90 days minimum

• This is necessary for your safety and cannot be deleted

END OF PRIVACY POLICY

This Privacy Policy is effective immediately. By using Tisra Netra , you accept these terms.

Version: 1.0
Last Updated: May 2026
Next Review: August 2026

For questions: Abhimanmandal123@gmail.com