Nagrik processes your personal data strictly with unambiguous, informed consent and for verified journalistic and civic dissemination. We do not sell, rent, or trade personal information to data brokers. All financial data is encrypted and handled under Reserve Bank of India (RBI) directives.
1. Data Fiduciary Particulars
Under Section 2(i) of the Digital Personal Data Protection Act, 2023 (DPDP Act), the entity determining the purpose and means of the processing of your personal data is:
2. Anonymous Reader Access & Pseudonymous Device IDs
Nagrik does not require general readers to register, create accounts, or provide phone numbers or email addresses to read articles, watch local video dispatches, or search community news.
To provide technical reliability, prevent DDoS attacks, and remember your manually chosen district/ward and bookmarked stories, our mobile client generates an anonymous random UUID (stored locally as x-device-id). This device ID is not linked to your real identity.
3. Categories of Personal Data Collected
We adhere to the principle of Data Minimisation (Section 6(1) DPDP Act) and collect only information strictly necessary for operational delivery:
Full legal name, phone number, email address, profile photo, and bureau affiliation (required solely for publishing contributors).
UPI Virtual Payment Address (VPA), Bank Account Number, IFSC code, and PAN for statutory TDS compliance under Sections 194C/194R.
Selected reading language (Hindi/English), chosen district/city/area, and bookmarked articles (stored client-side on your device).
When filing an error or content report: article URL, category of concern, explanatory details, and optional email for updates.
4. Location Information (Approximate vs. Precise)
Because Nagrik is a hyperlocal platform, location is used to display news relevant to your community:
- Manual Selection (Default): You can manually select your district, city, or municipal ward from our directory. No GPS permission is required for this.
- Optional Precise GPS (Field Reporters): When contributors upload on-the-scene news dispatches, the app requests permission to record GPS coordinates to tag where the civic incident occurred and verify proximity.
- No Background Tracking: Nagrik does NOT track your physical location in the background when the app is closed.
5. Mobile Application Hardware Permissions
In compliance with the Google Play Store User Data & Safety Policy, our mobile application only requests permissions required for specific user actions:
6. Actual Service Providers & Infrastructure
We process data exclusively using enterprise cloud infrastructure providers under strict Data Processing Agreements (DPAs):
PostgreSQL database engine hosted in India (ap-south-1) with Row-Level Security (RLS) restricting access to authorized records.
Encrypted object storage for public news videos, report thumbnails, and press images, delivered over global edge caching.
Privacy-respecting ad delivery with User Messaging Platform (UMP) consent controls on mobile devices.
Encrypted push notification delivery to alert opt-in mobile readers of major municipal or emergency notices.
7. Lawful Grounds Under DPDP Act 2023
We process your personal data under two lawful grounds recognized by the DPDP Act:
- Consent (Section 6): Given affirmatively when registering as a publisher, saving preferences, or opting in to push notifications. Consent may be withdrawn at any time.
- Legitimate Uses (Section 7): Fulfilling statutory payout and tax (TDS) obligations under Indian tax laws, complying with court subpoenas, and safeguarding platform security against fraud.
8. Storage, Security & Data Retention
All data in transit is encrypted using TLS 1.3 protocols, and sensitive stored data (including publisher bank details) is protected with AES-256 encryption at rest.
Publisher account records and tax withholding data are retained for statutory periods mandated under Indian financial law (typically 7 years for taxation audits). General server logs are rotated and deleted within 90 days.
9. Rights of Data Principals (DPDP Act 2023)
As a citizen utilizing Nagrik, you possess statutory rights enforceable under Indian law:
10. Account & Data Deletion Workflow
In compliance with Google Play Store User Data Safety rules and the DPDP Act, you can request full erasure of your account and personal data at any time:
Send an email to wizzlingsupport@gmail.com from your registered email address with the subject line "Data Deletion Request".
Upon verifying identity, our team purges your profile, contact details, device links, and authentication tokens within 7 business days, retaining only statutory tax ledger records required by law.
11. Protection of Children's Personal Data
In strict compliance with Section 9 of the DPDP Act 2023, Nagrik does not knowingly collect personal data from or process the behavioral data of children under 18 years of age without verifiable parental consent. Nagrik does not engage in targeted advertising directed at children.
13. Data Protection Officer (DPO) & Privacy Contact
For any inquiries, rights requests, or concerns regarding how Nagrik processes your data, please contact our compliance desk:
