Who we are

Swastha is a product of Team Starbase Private Limited ("Starbase Innovations", "we"), a company registered in Kozhikode, Kerala. This policy covers the Swastha mobile app (Android package com.swastha.mobile) and the Swastha service it connects to. Our website has a separate privacy policy at starbaseinnovations.in/privacy.

We decide how Swastha collects and uses personal data and why, so under India's Digital Personal Data Protection Act, 2023 we are the data fiduciary for it.

Who uses the app

Swastha is used by waste-management organisations to run collection and transport trips. You can't sign up in the app: your organisation creates your account, and you sign in with your phone number and password. The app is meant for working adults and not for anyone under 18.

What we collect

Account details. Your name, phone number, email address if your organisation adds one, city, district and state, your role, the organisation you work for and your preferred language. Your password is stored in a form that cannot be read back.

Location. Your phone's precise location, only while you are using the app and only if you allow it. The app records your location when you start a trip, reach or scan a collection point and deposit waste. It also reads your location while a trip screen is open, to measure how far you are from each point, and may record points along the route during a trip. The app does not use your location in the background or after you close it.

Photos. Photos you take with the camera in the app at the start of a trip, at collection points and when you deposit waste. A photo taken when you start a dynamic trip keeps the details the camera stores with it, which can include the time and place it was taken. The app does not read your photo gallery. It saves a trip pass to your photos only when you ask it to.

Trip records. The vehicle, the trip and its times, waste categories, quantities and weights, pause reasons, and any notes or flags you enter.

Notifications. A notification ID for your phone, linked to your Swastha account, so we can send you trip notifications.

Technical details. Your IP address, device type and app version with each request, and error reports when something fails.

We do not access your contacts, microphone, call logs or messages, and we do not show ads.

Why we use it

• To sign you in and keep your account secure.
• To assign trips to you and show you where to go.
• To confirm that a trip happened, by recording where and when waste was collected and delivered, with photos as proof for your organisation and its customers.
• To send you notifications about your trips.
• To give your organisation reports on its trips, vehicles and waste.
• To support you, fix problems and keep Swastha secure.

We use your data only for running Swastha. We don't sell it and we don't use it for advertising.

Who can see it

• Your organisation. Administrators and supervisors whose role allows it can see your account, trips, locations and photos.
• Organisations you carry out trips for. When your organisation runs a trip for another organisation on Swastha, that organisation can see that trip's record.
• Our team, for support, operations and security.
• Amazon Web Services, which hosts Swastha and stores its data and photos in its Mumbai, India region.
• OneSignal, which delivers notifications to your phone and may process data outside India.
• Sentry, which receives technical details when an error occurs, so we can fix it.
• Our email provider, when Swastha sends you an email, for example an invitation.
• Authorities, when the law requires us to share data.

How long we keep it

We keep trip records, including locations and photos, for 2 years from the date of the trip and then delete them. We keep your account details while your account is active. When your account is closed, we delete your account details as described on our account deletion page. Trip records stay with your organisation, no longer linked to your name or phone number, until their 2 years are over.

Security

The app connects to Swastha only over an encrypted connection (HTTPS). Your sign-in session is kept in your phone's secure storage. Inside Swastha, people see only what their role allows, and important actions are logged.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

• give you a summary of the personal data we hold about you and how we use it;
• correct, complete or update it;
• erase it;
• act for someone you nominate if you die or are unable to act yourself.

To delete your account, see starbaseinnovations.in/swastha/delete-account. For anything else, or to make a complaint, write to our grievance officer at the contact details below with "Swastha privacy" in the subject line. We will reply within the time the law sets. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Changes to this policy

When we change this policy, we update this page and the date at the top. If a change affects how we use your data, we will also tell you in the app.