Privacy Policy - Karumbu Karangal

Effective Date: April 17, 2026

1. Introduction

Karumbu Karangal ("we," "our," or "the App") is a Cane Management System developed for the sugarcane industry in Tamil Nadu, India, under the Sugar Department, Government of Tamil Nadu. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application.

By using Karumbu Karangal, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Personal Information (Provided by You)

Data Type	Purpose	Required
Full Name & Father's Name	User identification and farmer registration	Yes
Mobile Number	Login authentication & OTP verification	Yes
Email Address	Profile management & communication	Yes (Staff)
Aadhaar Number	Government-mandated farmer identity verification	Yes (Farmers)
PAN Number	Tax identification for payment processing	Yes (Farmers)
Bank Account Details	Payment disbursement to farmers	Yes (Farmers)
Address & Pin Code	Geographic identification and service area mapping	Yes
Gender & Community	Government reporting and demographic records	Yes (Farmers)
Employee ID & Designation	Role-based access control for staff users	Yes (Staff)

2.2 Media & Files

Profile Photos: Uploaded voluntarily for user identification.
Document Photos: Proof documents and field visit evidence uploaded for official records.
Plot Map Images: Images related to cane plot registration and surveying.

2.3 Location Data

We collect GPS coordinates (latitude and longitude) when you use the plot registration and field visit features. Location data is used solely for:

Mapping sugarcane plot boundaries during season registration.
Verifying field visit locations for official documentation.

Location access is requested only when needed and is not collected in the background.

2.4 Automatically Collected Information

Session Data: Login timestamps, session identifiers, and device information for security purposes.
App Logs: Error logs and crash reports stored locally on your device for debugging. Sensitive data is automatically redacted from logs.

3. How We Use Your Information

    We use your information strictly for the operational purposes of the Cane Management System. We do not use your data for advertising, profiling, or any purpose unrelated to sugarcane industry management.
  

Authentication: Verify your identity via mobile number and OTP.
Farmer Management: Maintain farmer records, cane registrations, and payment processing.
Field Operations: Track field visits, plot surveys, and seasonal registrations with GPS tagging.
Reporting: Generate operational reports for mills, weighments, daily mill reports, and trip sheets.
Security: Prevent unauthorized access through session management and reCAPTCHA verification.

4. Data Storage & Security

4.1 Encryption

All sensitive data (passwords, Aadhaar, PAN, bank details) is encrypted using AES-256 encryption before transmission.
Data is transmitted over HTTPS (TLS) in production environments.
Locally stored data on your device is encrypted using secure storage mechanisms.

4.2 Access Control

Role-based access control ensures users only access data relevant to their role.
Sessions automatically expire after 15 minutes of inactivity.
Only one active session is permitted per user account.
OTP verification includes rate limiting (5 attempts with 15-minute lockout).

4.3 Server Infrastructure

Production data is hosted on government-managed servers maintained under the security standards of the Government of Tamil Nadu.

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information. Your data may be shared only in the following circumstances:

Government Authorities: As required under applicable Indian laws and regulations governing the sugarcane industry.
Sugar Mills: Operational data necessary for cane weighment, payments, and processing within the assigned mill.
Legal Compliance: When required by law, court order, or government regulation.

6. Third-Party Services

Service	Purpose	Data Shared
Google reCAPTCHA v3	Bot prevention during login	Device interaction data (no personal info)
Google Firebase	App infrastructure & crash reporting	App performance data (no personal info)

We do not use any third-party advertising or tracking services.

7. Permissions Used

Permission	Purpose
Internet	Required for all app functionality and API communication
Location (GPS)	Plot boundary mapping and field visit verification
Camera	Capture profile photos and document proofs
Storage / Media Access	Upload and download documents, images, and reports
Vibration	Haptic feedback for notifications and alerts

8. Data Retention

Your data is retained as long as your account is active and as required for operational and legal purposes.
Session data is cleared upon logout or after session expiry (15 minutes).
Local app logs are rotated daily and do not contain personally identifiable information.
Upon account deactivation, your personal data will be retained only as required by applicable government regulations.

9. Your Rights

Under applicable Indian data protection laws, you have the right to:

Access: Request a copy of your personal data held by us.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your data, subject to legal retention requirements.
Withdraw Consent: Revoke consent for optional data processing (e.g., location access).

To exercise these rights, please write to us at the address provided below.

10. Children's Privacy

Karumbu Karangal is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child's data has been collected, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted within the App and on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the revised policy.

12. Contact Us

Office of the Commissioner of Sugar

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please write to us at the following address:

Sugar Department, Government of Tamil Nadu
AAVIN ILLAM, Second Floor 3-A
Pasumpon Muthuramalinganar Salai
Nandanam, Chennai – 600035
Tamil Nadu, India

An official support email and website will be published on this page once available. Until then, please use the postal address above for written requests.

13. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, as applicable. Any disputes shall be subject to the exclusive jurisdiction of courts in Chennai, Tamil Nadu.