Privacy Policy of
Privacy Policy of
Upokari
Last Updated: October 18, 2026
Effective Date: October 18, 2026
Spectrum Engineering Consortium Ltd. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our mobile application Upokari ("the App") collects, uses, stores, and protects your information when you use our digital correspondence and secure personal vault services.
By installing, accessing, or using Upokari, you agree to the collection and use of information in accordance with this Privacy Policy.
We collect information necessary to deliver secure citizen correspondence, facilitate identity verification (KYC), and provide protected utility features:
Account Identification: Full Name, Phone Number, and Government/Citizen Smart Card Number.
Identity Verification Photo (KYC): When completing identity verification, you capture a photograph of your face and/or identification card using your device's camera.
Device Identifiers: Device model, operating system version, and system language preferences to ensure app compatibility and secure session management.
Authentication Credentials: Secure cryptographic authentication tokens stored safely within your device’s encrypted keychain.
We do not collect browsing history across other apps or websites.
We do not sell, rent, or trade your personal data to data brokers or third-party advertisers.
We do not track you across third-party apps for advertising purposes.
To ensure an accurate and secure identity verification experience, Upokari utilizes on-device face detection technology:
Purpose: The camera and on-device face detector are used solely to assist you in properly framing and aligning your face within the camera guide before capturing your verification photo.
On-Device Processing: Face detection is performed locally in temporary volatile memory (RAM) using on-device machine learning (Google ML Kit).
No Biometric Templates Stored: The App does not extract, generate, or store facial recognition templates, face meshes, or biometric identifiers.
Data Transmission: Once you confirm your photo, only the standard photographic image (JPEG) is securely transmitted via encrypted HTTPS/TLS to our verified servers for regulatory identity verification. No biometric facial models are ever shared or transmitted.
Upokari features a secure, on-device Document Vault:
Local Sandbox Storage: All documents, photos, and PDF files you choose to import into your Vault are stored strictly inside your device’s sandboxed local storage.
Zero Cloud Transmission: Files saved within the Vault remain on your physical device and are never automatically uploaded to our servers or synced with third-party cloud providers without your explicit action.
Export & Sharing Control: You retain full control to view, share via the native iOS share sheet, or permanently delete documents from your Vault at any time.
We use the collected information strictly for legitimate operational and statutory purposes:
Account Creation & Authentication: Verifying your eligibility and granting secure access to your citizen profile.
Digital Mail & Notices Delivery: Delivering official correspondence, postal notices, and transaction confirmations.
Security & Anti-Fraud: Ensuring device authorization, session integrity, and preventing unauthorized account takeover.
Customer Support: Responding to inquiries and troubleshooting technical issues.
We respect your privacy and strictly limit disclosures:
Government & Statutory Compliance: We may disclose information where required by applicable laws, legal processes, or statutory regulatory frameworks governing postal and citizen records in Bangladesh.
Service Infrastructure Partners: We may utilize trusted technical infrastructure providers (such as secure hosting and SMS gateway providers) bound by strict confidentiality agreements to deliver SMS verification codes.
No Commercial Sharing: We never share or monetize your personal information with commercial third parties or advertisers.
Security Standards: We implement industry-standard encryption protocols (HTTPS/TLS) during transit and secure keychain storage on-device to protect your sensitive credentials.
Statutory Retention: Official correspondence receipts and citizen registry records are retained in accordance with national statutory and postal record-keeping regulations.
You have the right to delete your digital account and remove your personal information from the App at any time:
Open the Upokari application.
Navigate to Menu ➔ "অ্যাকাউন্ট মুছুন" (Delete Account).
Review the confirmation dialog and confirm your deletion request.
Your active digital authentication tokens, device bindings, and push notification tokens are permanently revoked and erased.
All local session caches on your device are purged immediately.
Statutory administrative records mandated under postal law are archived in compliance with regulatory retention obligations.
You may also request account assistance or data deletion by contacting our support team at support@spectrum-bd.com.
Upokari is designed for citizens eligible for national services and is not targeted at children under the age of 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Developer: Spectrum Engineering Consortium Ltd.
Email: support@spectrum-bd.com
Website: https://spectrum.com.bd