Privacy Policy — Disha

Last updated: September 6, 2026

Disha ("the App", "we", "our") is a field survey and geospatial mapping application. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

• Account information: your email address, and (if you sign in with Google) your Google account's basic profile information. If you set up a username and PIN or biometric login, your PIN is stored as a one-way cryptographic hash and never in readable form.
• Location data: GPS coordinates of markers, measurements, and survey points you create, and your live location when you use the "My Location", "Directions", or "Walk to Measure" features. Location is only accessed while you actively use these features.
• Photos: images you attach to markers or sketches, uploaded and stored securely against your account.
• Survey and field data: any labels, survey numbers, land type, notes, sketches, or other information you enter into the app.
• Subscription and payment information: if you subscribe, our payment processor (Razorpay) processes your payment details directly. We do not store your card, UPI, or bank details ourselves — we only receive confirmation of payment status and a subscription reference ID.

2. How We Use Your Information

• To provide core app functionality: saving your markers, notes, sketches, and measurements, and syncing them across your devices.
• To operate your account: authentication, login, and session management.
• To manage your subscription and send related communications (e.g. renewal reminders, payment confirmations).
• To improve the reliability and performance of the App.

3. Third-Party Services We Use

• Supabase — our backend database, authentication, and file storage provider.
• Google Sign-In — if you choose to log in with Google.
• Razorpay — payment processing for subscriptions.
• Bhuvan (ISRO/NRSC), OpenStreetMap, and Esri — map tile and cadastral overlay data providers. Your location may be sent to these services as part of loading map tiles for the area you are viewing.

Each of these providers has its own privacy policy governing how they handle data on their end.

4. Data Storage and Security

Your data is stored on Supabase's infrastructure with access restricted to your own account through database-level security rules. We take reasonable technical measures to protect your data, but no method of electronic storage is 100% secure.

5. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at dishamap@gmail.com. Some information may be retained where required for legal, tax, or accounting purposes.

6. Your Choices

• You can review, edit, or delete individual markers, notes, and sketches directly within the App.
• You can revoke location permission at any time through your device settings, though this will limit certain features.
• You can request full account deletion by contacting us.

7. Children's Privacy

Disha is intended for professional and personal field-survey use and is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: dishamap@gmail.com