Nagrik Logo
Nagrik
Statutory Compliance & Editorial Governance

Privacy Policy & Data Protection Charter

Mandated under the Digital Personal Data Protection (DPDP) Act, 2023, Information Technology Rules, 2021, and Google Play Store User Data Safety Guidelines.

Effective / Updated: September 2026•Charter Version: v2026.3
DPDP Act 2023 & Indian Data Sovereignty Notice

Nagrik processes your personal data strictly with unambiguous, informed consent and for verified journalistic and civic dissemination. We do not sell, rent, or trade personal information to data brokers. All financial data is encrypted and handled under Reserve Bank of India (RBI) directives.

1. Data Fiduciary Particulars

Under Section 2(i) of the Digital Personal Data Protection Act, 2023 (DPDP Act), the entity determining the purpose and means of the processing of your personal data is:

Data Fiduciary: Wizzling Pvt Ltd
Principal Office: Koilwar, Arrah, Bhojpur, Bihar – 802163, India
Support & Privacy Desk: wizzlingsupport@gmail.com
Helpline Phone: +91 8890043675
Resident Grievance Officer: wizzlingsupport@gmail.com

2. Anonymous Reader Access & Pseudonymous Device IDs

Nagrik does not require general readers to register, create accounts, or provide phone numbers or email addresses to read articles, watch local video dispatches, or search community news.

To provide technical reliability, prevent DDoS attacks, and remember your manually chosen district/ward and bookmarked stories, our mobile client generates an anonymous random UUID (stored locally as x-device-id). This device ID is not linked to your real identity.

3. Categories of Personal Data Collected

We adhere to the principle of Data Minimisation (Section 6(1) DPDP Act) and collect only information strictly necessary for operational delivery:

Publisher Identity & Contact

Full legal name, phone number, email address, profile photo, and bureau affiliation (required solely for publishing contributors).

Banking & Payout Data (Publishers Only)

UPI Virtual Payment Address (VPA), Bank Account Number, IFSC code, and PAN for statutory TDS compliance under Sections 194C/194R.

Local Preferences & Bookmarks

Selected reading language (Hindi/English), chosen district/city/area, and bookmarked articles (stored client-side on your device).

Content Reports & Inquiries

When filing an error or content report: article URL, category of concern, explanatory details, and optional email for updates.

4. Location Information (Approximate vs. Precise)

Because Nagrik is a hyperlocal platform, location is used to display news relevant to your community:

  • Manual Selection (Default): You can manually select your district, city, or municipal ward from our directory. No GPS permission is required for this.
  • Optional Precise GPS (Field Reporters): When contributors upload on-the-scene news dispatches, the app requests permission to record GPS coordinates to tag where the civic incident occurred and verify proximity.
  • No Background Tracking: Nagrik does NOT track your physical location in the background when the app is closed.

5. Mobile Application Hardware Permissions

In compliance with the Google Play Store User Data & Safety Policy, our mobile application only requests permissions required for specific user actions:

Location (ACCESS_FINE_LOCATION): Used only when opted in to discover nearby community dispatches and tag video dispatches.
Camera (CAMERA): Used exclusively when a stringer records field reporting videos or takes photo evidence.
Microphone (RECORD_AUDIO): Used only during active video recording to capture interview audio.
Notifications (POST_NOTIFICATIONS): Used solely to alert you of urgent public safety advisories or breaking district news (opt-in).

6. Actual Service Providers & Infrastructure

We process data exclusively using enterprise cloud infrastructure providers under strict Data Processing Agreements (DPAs):

Supabase Inc. (Database & Auth)

PostgreSQL database engine hosted in India (ap-south-1) with Row-Level Security (RLS) restricting access to authorized records.

Cloudflare R2 (Media Storage CDN)

Encrypted object storage for public news videos, report thumbnails, and press images, delivered over global edge caching.

Google AdMob & UMP

Privacy-respecting ad delivery with User Messaging Platform (UMP) consent controls on mobile devices.

Firebase Cloud Messaging (FCM)

Encrypted push notification delivery to alert opt-in mobile readers of major municipal or emergency notices.

7. Lawful Grounds Under DPDP Act 2023

We process your personal data under two lawful grounds recognized by the DPDP Act:

  • Consent (Section 6): Given affirmatively when registering as a publisher, saving preferences, or opting in to push notifications. Consent may be withdrawn at any time.
  • Legitimate Uses (Section 7): Fulfilling statutory payout and tax (TDS) obligations under Indian tax laws, complying with court subpoenas, and safeguarding platform security against fraud.

8. Storage, Security & Data Retention

All data in transit is encrypted using TLS 1.3 protocols, and sensitive stored data (including publisher bank details) is protected with AES-256 encryption at rest.

Publisher account records and tax withholding data are retained for statutory periods mandated under Indian financial law (typically 7 years for taxation audits). General server logs are rotated and deleted within 90 days.

9. Rights of Data Principals (DPDP Act 2023)

As a citizen utilizing Nagrik, you possess statutory rights enforceable under Indian law:

Right to Access Information
Request a summary of personal data being processed about you.
Right to Correction & Erasure
Correct inaccurate information or request total deletion of your profile.
Right of Grievance Redressal
Direct recourse to our Data Protection Officer and the Data Protection Board.
Right to Nominate (Section 14)
Nominate a representative to exercise your rights in the event of death or incapacity.

10. Account & Data Deletion Workflow

In compliance with Google Play Store User Data Safety rules and the DPDP Act, you can request full erasure of your account and personal data at any time:

Send an email to wizzlingsupport@gmail.com from your registered email address with the subject line "Data Deletion Request".

Upon verifying identity, our team purges your profile, contact details, device links, and authentication tokens within 7 business days, retaining only statutory tax ledger records required by law.

11. Protection of Children's Personal Data

In strict compliance with Section 9 of the DPDP Act 2023, Nagrik does not knowingly collect personal data from or process the behavioral data of children under 18 years of age without verifiable parental consent. Nagrik does not engage in targeted advertising directed at children.

12. Cookies & Local Client Storage

Our web platform uses strictly necessary cookies and local storage tokens solely to maintain user sessions, remember theme preference (Dark/Light mode), and preserve your selected reading language. We do not use third-party tracking cookies across external websites. See our Cookie Policy.

13. Data Protection Officer (DPO) & Privacy Contact

For any inquiries, rights requests, or concerns regarding how Nagrik processes your data, please contact our compliance desk:

Data Protection Officer: Legal & Compliance Wing, Wizzling Pvt Ltd
Office Address: Koilwar, Arrah, Bhojpur, Bihar – 802163, India
Direct & Grievance Email: wizzlingsupport@gmail.com
Phone Support: +91 8890043675
Wizzling Pvt Ltd • Koilwar, Arrah, Bhojpur, Bihar – 802163
Statutory Alignment: Digital Personal Data Protection Act, 2023 & Information Technology Rules, 2021