This policy explains what Sri Sri Drishti collects, why, who it is shared
with, and how to get rid of it. It describes what the app actually does today.
1. What we collect
Information you give us
Your phone number, when you sign in with a one-time code. This is how your account is identified.
Your Google account email and name, if you choose to sign in with Google.
Profile details you choose to add: full name, username, a short bio, a profile photo, and links to your own social media pages.
Content you create: event listings, event registrations, contact requests, ratings and reviews.
If you apply to be a teacher: the identification you upload for that review.
Information collected as you use the app
Which events you subscribe to or register for.
Who you follow and who follows you.
Precise location — only if you turn location on. Your exact coordinates are sent to us when you look for activities or members near you, so we can work out what is close. They are not stored. Your position is never saved to your profile and we keep no history of where you have been. Distances are recalculated on your phone as you move, and this only happens while the app is open in front of you — nothing runs in the background. You can turn location off at any time, and switching off “Discoverable” in Privacy Settings removes you from nearby results entirely.
A device token for push notifications, if you allow notifications. This identifies the installation, not you personally, and is deleted when you sign out or turn notifications off.
Basic technical and usage data: app version, device type, and which screens are opened, through Google Analytics for Firebase.
Who invited you, and activity on links you share — see section 3.
2. Contact sync — read this part
Contact sync is optional, off until you turn it on, and it is the
one feature that touches data about people who are not our users. This is
exactly what happens.
When you sync, your phone reads your address book on the device and
converts each phone number into a one-way code (an HMAC-SHA-256 hash).
The full phone numbers of your contacts are never sent to us and are
never stored.
What is sent to us and stored, for each contact:
the one-way code of the number;
the name you saved for that contact in your phone;
a masked form of the number showing only the first two and last two digits, for example +91••••••••02, so you can recognise which contact a row refers to;
anything you add yourself, such as a relation or a note.
We use the codes to count how many other members have the same person saved.
Other members are told only a number — “you have contacts in common” — never
who. Your name is revealed to another member only when you choose to share a
specific contact, one at a time. Full phone numbers are exchanged only after an
introduction that both people have accepted.
You can delete a synced contact, or all of them, at any time from the Network tab.
3. Invite links, sharing and your community
Members can share an invite link, or a link to an event. This is what those links record.
Who invited you. When you join through a member’s link — by tapping it, through the Play Store install that followed it, because you left your number on that link’s page, or by typing their invite code in your first 7 days — we record that member as your inviter, and which link it was. Administrators can correct this; every change is logged.
Link activity. When someone opens a shared link we count what happens next: opened, viewed, tapped Join WhatsApp or Register, joined or registered. A visitor’s steps are tied together by a random ID — on the website a first-party cookie called sd_vid that lasts one year, in the app a random ID created for each installation. It is not your name or number, and it is linked to your account only if you are signed in. Your IP address is used only to limit abuse and is not stored.
People who are not members yet. The page behind a shared link lets a visitor leave their name and phone number, with this consent shown beside the form: “I agree that Sri Sri Drishti may contact me on this number about Art of Living programmes, and share my first name with the person who invited me.” We store the name, a masked number (for example +91••••••••78), a one-way code of the number so we can recognise the person if they join and credit whoever invited them, and the full number encrypted (AES-256-GCM). The member whose link it was sees only the first name and the masked number. Only Sri Sri Drishti administrators can see the full number, and each time one does, or exports a list, it is recorded against them. The number is used to contact the person about Art of Living programmes, as the consent says, and for nothing else.
WhatsApp groups. A link’s page can offer to join a WhatsApp group run by the event’s teacher or by Sri Sri Drishti. Joining takes you to WhatsApp, where WhatsApp’s own privacy policy applies and the group’s admins can see your WhatsApp number.
How far a share went. A member sees how many people opened each link they shared and how many joined or registered. Nobody who registered through a link is named. People who passed the link on are named only if the member invited them. An event’s teacher, and administrators, see the same counts for the event, with the names of the members who shared it.
Telling your inviter. When you join through someone’s invite, they get a notification with your name, for example “Amit joined Sri Sri Drishti”. They can turn these off.
4. Why we use it
To run the service: sign you in, show your feed, register you for events, and deliver notifications you asked for.
To show you events and members that are relevant, including by distance if you enabled location.
To let members find people they already know, through contact sync.
To credit members who invite others, and show them how their shares travelled.
To keep the community safe: investigating abuse reports and enforcing the Terms of Service.
To fix problems and understand which parts of the app are used.
We do not sell your personal information. We do not use it for
advertising, and we do not share it with advertisers or data brokers.
5. Who else handles your data
We use a small number of service providers, who process data on our behalf and
are not permitted to use it for their own purposes:
Contabo — server and database hosting, in Mumbai, India, for the servers that run the app and store your account data.
Amazon Web Services (S3) — storage for the photos you upload, in the Mumbai region of India.
Google Firebase — sign-in, push notifications, and analytics.
2Factor.in — sending sign-in codes by SMS. They receive your phone number for that purpose.
Google Maps — displaying maps and locations.
WhatsApp — only if you choose to join a group from a link’s page; see section 3.
We will also disclose information where the law requires it, or where it is
necessary to protect someone’s safety.
6. What other members can see
Public on your profile: your name, username, photo, bio, teacher
status, any social links you added, and your follower and following counts.
Not shown to other members: your phone number, your email address,
and your synced contacts. Your phone number becomes visible to another member
only after you have both accepted a contact request or an introduction.
If you switch off “Discoverable”, you will not appear in nearby results or
people search. Approved teachers remain searchable, because being findable is
the purpose of a teacher listing.
Your community: the member who invited you sees your name, photo, when you joined, whether you have been active recently, and how many people you have invited. Members further above you see only a count, unless you turn on “Show my name to everyone above me” in Privacy Settings. Nobody in your community sees your phone number. If your account is suspended only a count is shown, and if you delete it you appear as “a former member”; the people you invited stay where they are.
7. How long we keep it
We keep your information for as long as your account exists.
When you delete your account, it is immediately deactivated and hidden from
other members, and the data is permanently deleted after 30 days.
The 30-day window exists so you can recover an account deleted by mistake. Your
synced contacts are deleted along with your account.
Leads — the name and number someone who is not a member left on a link’s page — are deleted 12 months after they last left it, whether or not they joined. They can ask us to delete them sooner at the address in section 13. Link activity is kept while the link’s owner has an account.
8. Security
Data is encrypted in transit. Sign-in tokens are held in the device’s secure
storage. Access to production systems is restricted. No service can promise
perfect security, but we take reasonable measures to protect your information.
9. Children
Sri Sri Drishti is not intended for children under 13, and we do not knowingly
collect information from them. If you believe a child has given us information,
contact us and we will delete it.
10. Your rights
See and edit your profile in the app.
Turn location and discoverability off in Privacy Settings.
Control which notifications you receive, including quiet hours.
Delete individual synced contacts or all of them.
Delete your account, and with it your data, from Settings.
Turn “Show my name to everyone above me” and join notifications on or off.
If you left your number on a link’s page and want it deleted, write to us at the address below.
For a copy of your data, or any request we cannot handle in the app, contact us
at the address below.
11. Where data is stored
Our database and servers are hosted in Asia, and our providers may process data
in other countries. Where data leaves its country of origin, we rely on the
protections our providers have in place.
12. Changes to this policy
We may update this policy. The “last updated” date above changes when we do,
and we will give notice in the app if a change is material.
13. Contact
Sri Sri Drishti is operated by Collabdiary Private Limited.