Privacy Policy

How we secure and protect your identity and personal safety records.

1. Introduction & Guiding Principles (DPDP Act 2023)

At Bhala Manush, we operate as a responsible Data Fiduciary under the Digital Personal Data Protection (DPDP) Act, 2023 of India. We are committed to safeguarding your personal data and respect your privacy. Our smart identity QR tags are designed as privacy-first products, helping citizens and emergency workers connect with you in critical events without exposing your raw mobile numbers or private identity details.

2. Information We Collect & Lawful Purposes

We process personal data based on your explicit consent for specific and lawful purposes. The types of data we collect include:

  • Registration Profile Data: Name, email address, and mobile number. This is necessary to configure your account, verify your phone status, and link products.
  • Emergency Contact Records: Optional contact details, health alerts, and blood groups that you voluntarily associate with your tags. This data is only revealed to scanners to coordinate assistance.
  • Public QR Interaction (Scan Data): When a user scans your QR code, we request consent to fetch their device GPS coordinates. This location is shared exclusively with you (the owner) to notify you of where your item/pet/family member is. Finders voluntarily submit their name and contact info if they wish to coordinate directly.
  • Contact Form Details: Name, email, and message query history. This is used solely to respond to your customer requests.

3. Cookie Policy

We use essential cookies to manage your active language settings (English or Hindi) and maintain secure user sessions. We do not use cookies for tracking, analytics, or behavioral advertising.

4. Data Encryption & Security

All sensitive information stored in our database is securely protected using industry-standard AES-256-CBC cryptography. Communications between browsers, mobile applications, and backend systems are encrypted using secure SSL/TLS channels.

5. Data Retention Limits

We retain your personal data only as long as your account remains active or as required for service fulfillment. Upon receiving a valid erasure request, all registered profile fields, emergency logs, and product link parameters will be deleted from our active storage arrays within 30 days.

6. Your Rights under the DPDP Act

You possess complete control over your personal data. Your rights under the DPDP Act 2023 include:

  • Right to Access: You can review a summary of personal data being processed and the reasons for processing.
  • Right to Correction & Erasure: You can edit your profile records at any time or request complete erasure of your files via our "Data Deletion" request page.
  • Right to Withdraw Consent: You can withdraw consent for data processing. Note that withdrawing consent may limit our ability to coordinate emergency alert transmissions.
  • Right to Grievance Redressal: In case of unresolved disputes or concerns, you have the right to file a grievance directly with our Data Protection Officer.

7. Data Protection Officer (DPO) Details

For any DPDP compliance queries, consent withdrawals, or privacy concerns, please contact our designated DPO:

Email: support@bhalamanush.com
Office: Bhala Manush Security Division, Jaipur, Rajasthan, India.


Last updated: June 23, 2026

If you have questions regarding this privacy policy, contact us at support@bhalamanush.com.