Skip to content

Privacy Policy

Effective Date: 30 October 2026 Last Updated: 30 October 2026

This Privacy Policy ("Policy") is published by Hosangadi Enterprises LLP ("SwaaHaa", "we", "us", or "our"), in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDPA"). This Policy governs the collection, use, storage, transfer, and disclosure of personal data submitted by users ("Data Principal") who access or use the SwaaHaa platform, including https://www.swaahaa.in and our Android and iOS mobile applications.

By accessing or using the Platform, registering an account, booking sevas, making donations, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to be bound by this Policy.

1. Scope and Applicability

This Policy applies to all personal data processed by SwaaHaa in connection with your use of the Platform across all interfaces, including:

  • Our website at https://www.swaahaa.in.

  • The SwaaHaa Android application (Google Play Store).

  • The SwaaHaa iOS application (Apple App Store).

  • Any API integrations, payment gateways, or third-party services embedded within the Platform.

  • Communications made to or from SwaaHaa via email, SMS, WhatsApp, in-app chat, telephone, push notifications, or any other official communication channels used by SwaaHaa.

2. Definitions

  • "Personal Data": Any data about an individual who is identifiable by or in relation to such data, as defined under the DPDPA, 2023.

  • "Sensitive Personal Data or Information (SPDI)": Financial information, passwords, religious or faith-based preferences, and other information classified under applicable Indian law.

  • "Data Fiduciary": Hosangadi Enterprises LLP, being the entity that determines the purpose and means of processing personal data.

  • "Data Principal": You, the individual whose personal data is being processed.

  • "Seva / Prayer Booking": The online reservation of religious services, rituals, or devotional activities at empanelled temples.

  • "Processing": Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, or erasure.

3. Categories of Personal Data Collected

3.1 Identity and Contact Information

  • Full name.

  • Mobile number.

  • Date, time, and place of birth, including the geographic coordinates and time zone of that place (optional, used for personalised religious calendar and astrological features).

  • Email address (optional).

  • Gender (optional).

  • Profile photograph (optional, user-uploaded).

  • Gotra, nakshatra, rashi, or other religious identifiers (optional, for seva booking customisation).

  • Postal addresses you choose to save - label, street address, city, state, PIN code, and approximate geographic coordinates - used by temple to deliver prasad and other physical seva add-ons.

3.2 Account Credentials

  • Authentication credentials, including one-time passwords sent to your mobile number or email address, and the session tokens issued after you sign in.

  • Device identifiers used for fraud prevention and account security (where applicable).

3.3 Booking and Transaction Data

  • Temple name, location, and seva/prayer category selected.

  • Date and time of booking.

  • Details of the beneficiaries on whose behalf a seva is booked - their names and, where the ritual requires it, their gotra and nakshatra. See Section 3.8.

  • Whether you will attend the seva in person or it is to be performed on your behalf in your absence.

  • Add-on items selected with a seva, and whether you chose to collect them at the temple or have them delivered to you.

  • Donation amount and donation purpose (where specified by the Temple Partner or selected by you).

  • Payment method details (processed by PCI-DSS compliant third-party gateways; we do not store full card numbers or CVV).

  • Transaction reference numbers and booking confirmation IDs.

3.4 Location Data

  • Coarse location (city/state) derived from IP address for displaying nearby temples.

  • Precise GPS location, only if you explicitly grant permission via your device settings.

  • You may revoke location permissions at any time via device settings without affecting your ability to book sevas or make donations.

3.5 Device and Technical Data

  • Device type, model, operating system, and version.

  • App version, device identifiers, and diagnostic identifiers (where available), which may be pseudonymised or anonymised before analysis.

  • A record of the devices on which you have signed in - a device identifier, the device type, the push notification token issued for that device by Apple or Google, and when the device was last active. This record is deleted when you remove the device or delete your account.

  • Network type (Wi-Fi, mobile data).

  • Crash logs and performance diagnostics.

3.6 Usage and Behavioural Data

  • Pages visited, features accessed, and time spent on sections of the Platform.

  • Search queries entered (temple names, locations, seva types).

  • Temples marked as favourites or visited.

  • Notifications opened and interaction patterns.

3.7 Communications Data

  • Messages sent through in-app chat or support tickets.

  • Email, SMS, WhatsApp, telephone, and in-app chat correspondence with our support team.

  • Communications relating to booking confirmations, reminders, customer support, feedback, dispute resolution, or service updates.

  • Feedback, reviews, and ratings submitted for temples or sevas.

3.8 Personal Data Relating to Other People

Sevas are often booked for someone other than the person paying. When you name a beneficiary, or provide a delivery address belonging to someone else, you are giving us that person's personal data rather than your own.

  • The beneficiary data we collect is the person's name and, where the ritual requires it, their gotra and nakshatra. We do not create a separate account or profile for a beneficiary.

  • By submitting such data, you confirm that you have that person's consent, or are otherwise lawfully entitled to share it with us for the purpose of arranging the seva, and that you have made them aware of how it will be used.

  • We use beneficiary data solely to enable the Temple Partner to perform the seva and to produce the associated booking and receipt records. It is never used for marketing or profiling, and it is retained with the booking record it belongs to and for no longer.

  • If you have been named as a beneficiary on a booking made by someone else and you want that data corrected or removed, write to support@swaahaa.in and we will act on your request in the same way as if you held an account with us.

4. Legal Basis and Purposes of Processing

We process your personal data only when a valid legal basis exists under applicable Indian law, including the DPDPA, 2023: (a) your freely given, specific, informed, and unambiguous consent; (b) performance of a contract; (c) compliance with a legal obligation; and (d) certain legitimate uses recognised under Section 7 of the DPDPA, where applicable. The specific purposes include:

  • Creating, maintaining, and authenticating your user account.

  • Facilitating the discovery of temples across India based on location, deity, festival, or seva type.

  • Processing seva and prayer bookings and issuing digital confirmation receipts.

  • Facilitating donations to Temple Partners and enabling issuance of donation receipts or tax receipts by eligible Temple Partners (where applicable under Section 80G of the Income-tax Act, 1961).

  • Sending booking confirmations, reminders, post-seva summaries, service updates, customer support communications, and other transactional messages via SMS, email, WhatsApp, push notifications, or other authorised communication channels.

  • Personalising your experience (suggested temples, upcoming festivals, personalised calendars based on your nakshatra or rashi).

  • Detecting, preventing, and investigating fraud and unauthorised transactions.

  • Complying with legal, regulatory, judicial, or governmental obligations.

  • Responding to your support queries, complaints, and feedback.

  • Conducting internal analytics to improve Platform performance and user experience.

5. Sensitive Personal Data or Information (SPDI)

Certain data collected on our Platform may qualify as SPDI under the IT (SPDI) Rules, 2011. We handle such data with heightened care:

  • Financial Information: Payment card data and UPI details are processed exclusively by Razorpay (PCI-DSS Level 1 certified). We receive only tokenised or masked payment references and do not store raw financial credentials.

  • Religious Preferences: Your gotra, nakshatra, and similar spiritual identifiers are collected solely to improve seva recommendations and booking accuracy. This data is never sold, shared for commercial profiling, or used beyond the Platform's religious services.

  • Authentication Credentials: One-time passwords (OTPs) are used solely for user authentication and are not stored after verification. Authentication tokens are securely managed to maintain account security.

  • Before collecting SPDI, we will obtain your explicit consent where required. You may withdraw consent at any time by contacting support@swaahaa.in.

6. Cookies, SDKs and Similar Technologies

6.1 Types of Technologies Used

  • Session Cookies: Temporary cookies used for login session management on the website.

  • Persistent Cookies: Retained on your device for a defined period to remember preferences.

  • Analytics and crash reporting tools (such as Firebase Analytics and Firebase Crashlytics) to understand in-app user behaviour and to detect and diagnose app crashes.

  • Booking confirmations, reminders, account activity notifications, service updates, and promotional communications (where you have provided consent) may be delivered via push notifications, SMS, email, WhatsApp, or other authorised communication channels.

6.2 Your Choices

  • You may manage cookie preferences via your browser settings (for the website).

  • You may control push notification preferences via your device settings.

  • Disabling analytics will not prevent you from using the Platform.

7. Disclosure and Sharing of Personal Data

We do not sell, rent, or trade your personal data. We disclose personal data only in the following circumstances:

7.1 Temple and Religious Institution Partners

  • When you complete a seva booking or donation, we share your name, contact details, and booking specifics with the relevant temple or trust to facilitate the ritual and issue receipts. These partners are contractually required to maintain confidentiality.

7.2 Payment Processors

  • We engage licensed payment aggregators and payment service providers (such as Razorpay) to process transactions. We share the minimum data required (order ID, amount, payer name, contact) for payment processing.

7.3 Technology Service Providers

  • We engage third-party providers for cloud hosting, SMS/email delivery, analytics, and customer support tools. These vendors process data strictly on our instructions and are bound by data processing agreements.

7.4 Legal and Regulatory Authorities

  • We may disclose personal data where required by Indian law, regulation, court order, or a lawful request from law enforcement or a government authority.

7.5 Business Transfers

  • In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity under the same obligations of this Policy. We will notify you of any such transfer.

7.6 With Your Consent

  • We may share your data for any other purpose with your prior, explicit written consent.

8. Cross-Border Data Transfers

Your personal data is primarily stored on servers located within India. In cases where our service providers operate infrastructure outside India (e.g., cloud services, analytics platforms), any transfer of your personal data will be conducted in accordance with the DPDPA, 2023 and applicable government notifications specifying approved countries and contractual safeguards.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law:

  • Account Data: Retained for as long as necessary to provide the Services and thereafter for such period as required to comply with legal obligations, resolve disputes, enforce our agreements, prevent fraud, and maintain business records.

  • Transaction and Donation Records: 7 years from the date of transaction, in compliance with the Income Tax Act, 1961.

  • Communication Records (Support): Retained for as long as necessary to respond to your queries and thereafter for such period as required to comply with legal obligations, resolve disputes, and maintain business records.

  • Marketing Data: Until you withdraw consent or opt out, whichever is earlier.

  • Crash Logs and Analytics: Anonymised and retained for up to 24 months for product improvement purposes.

  • Upon expiry of the retention period, we will securely delete or anonymise your personal data.

10. Information Security

SwaaHaa implements reasonable security practices as mandated by Rule 8 of the IT (SPDI) Rules, 2011. Our security measures include:

  • TLS 1.2+ encryption for all data in transit between your device and our servers.

  • AES-256 encryption for sensitive data at rest.

  • Directly identifying fields such as your email address and mobile number are stored in encrypted form.

  • Secure handling of authentication tokens and one-time passwords (OTPs) using industry-standard security practices.

  • Multi-factor authentication (OTP/email verification) for account login.

  • Role-based access controls limiting employee access to personal data on a need-to-know basis.

  • Regular vulnerability assessments and penetration testing.

  • PCI-DSS compliant payment gateways.

  • In the event of a personal data breach that poses a risk to your rights or interests, we will notify you and the relevant regulatory authority within the timeframes prescribed under applicable law.

11. Your Rights as a Data Principal

Under the DPDPA, 2023 and other applicable laws, you are entitled to exercise the following rights:

  • Right to Access: Request a summary of the personal data we hold about you, the processing purposes, and the entities to whom it has been disclosed.

  • Right to Correction: Request correction of inaccurate or incomplete personal data.

  • Right to Erasure: Request deletion of your personal data, subject to our legal retention obligations. To delete your SwaaHaa Partner account, write to support@swaahaa.in; the steps are set out at https://partner.swaahaa.in/policies/account-deletion. Deleting your account does not require deletion of records we are legally required to retain, including financial, taxation, fraud prevention, dispute resolution, or regulatory records.

  • What account deletion actually does: we close your account and sign you out of all sessions immediately; we erase your username, profile photograph, gender, all birth details, gotra, nakshatra and rashi; and we delete every saved address and registered device. Your name and email address are kept on the closed account record for 180 days, as required by applicable law, and are then erased. Your mobile number is retained on the closed account record so that completed transactions and payment records remain attributable, as we are required to keep those. None of these is used to contact you after deletion. If you sign in again with the same mobile number, you start with a new, empty account.

  • Right to Grievance Redressal: Raise a complaint regarding our processing of your data. We will respond within 30 days as required under the DPDPA.

  • Right to Nominate: Nominate another individual to exercise your data rights in the event of your death or incapacity, as provided under the DPDPA.

  • Right to Withdraw Consent: Withdraw consent for any optional processing at any time without affecting the lawfulness of prior processing.

  • To exercise any of the above rights, submit a written request to our Grievance Officer at the details in Section 14.

12. Children's Privacy

The Platform is not directed to children under the age of 18. We do not knowingly collect personal data from minors without verifiable parental or guardian consent. If a parent or guardian becomes aware that a minor has registered on the Platform without consent, they should notify us at support@swaahaa.in and we will promptly delete the relevant account and associated data.

13. Third-Party Links and Services

The Platform may contain links to external websites, temple portals, payment gateways, or social media pages. SwaaHaa is not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party service you access through our Platform.

14. Grievance Officer and Contact Information

In accordance with the IT Act, 2000 and the DPDPA, 2023, we have appointed a Grievance Officer to address your concerns:

  • Designation: Grievance Officer.

  • Company: Hosangadi Enterprises LLP.

  • Email: support@swaahaa.in.

  • Website: https://www.swaahaa.in.

  • Postal Address: A 305, Commanders Glory Apartments, Vidyaranyapura Post, Bengaluru – 560097, Karnataka, India.

  • Working Hours: Monday to Saturday, 10:00 AM to 5:00 PM IST (excluding public holidays).

  • You may also raise a complaint with the Data Protection Board of India once established under the DPDPA, 2023.

15. Updates to This Policy

We may update this Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. Material changes will be communicated to you via email, in-app notification, or a prominent notice on the Platform website at least 14 days prior to the change taking effect. Your continued use of the Platform after the effective date of the revised Policy constitutes your acceptance of the changes.

16. Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts located in Bengaluru, Karnataka, India.