Privacy Policy · गोपनीयता नीति

Kisan Kiraya (किसान किराया) — a marketplace for farmers in Haryana to rent & sell agricultural equipment and find labour.

Last updated: 08 May 2026 · Effective: 08 May 2026

1. About this app

Kisan Kiraya is operated from api.kisankiraya.net. The Android app is published on Google Play Store. This policy describes how we collect, use, share and protect your personal information.

2. Information we collect

2.1 Information you provide

• Mobile number (10-digit Indian) — used as your login identifier and for other users to contact you about your listings.
• Name — displayed publicly with your listings/labour profile.
• Email address (Optional) — collected only if you voluntarily provide it during signup or in your profile. Used for password reset, account recovery, important security notifications, and account management. We never share your email with any third party and never use it for marketing or advertising. You can leave this field blank during signup — email is not required to use the app.
• Password — stored only as a salted bcrypt hash, never in plain text. Used solely to authenticate your login.
• Village & district — used for hierarchical location filters so nearby farmers can find you.
• Listing details — equipment / product name, item photos (base64-encoded JPEG/PNG), price, description, category, rent / sale type, busy schedule.
• Optional service / business name (e.g. "शर्मा Tractor Wale") — displayed publicly as your listing's title when provided.
• Optional owner photo (small round avatar, base64) — displayed publicly in the corner of your listing card and on your public provider profile. You may add or remove this at any time.
• Service area — multi-select districts and / or specific villages where you offer your service. Used to determine which users see your listing.
• Labour profile details — skills, daily wage, experience years, optional photo, service areas (districts + villages).
• Expense entries (Kharcha tracker) — when you use the optional expense tracker, the amount, category, date and note you enter are stored against your account only. This data is private and never shown to other users.
• Favorites — listings you tap the ❤️ heart on are saved against your account so you can revisit them. Private to you.
• AI Krishi Salahkar messages — when you ask the Hindi farming-advice chatbot a question, your message is sent to Google Gemini (via our server) to generate a reply. We do not store your chat history on our database, and Google's processing follows their own Gemini API terms.
• Reviews — text and 1–5 star rating you give to listings / labour profiles.

2.2 Information we collect automatically

• Device timestamp when you create / update content.
• App version & basic crash logs (no personal identifiers).
• Approximate active-user heartbeat (a periodic ping from your app while it's open) so we can show admins anonymized Daily / Hourly Active User totals. We log the user id + timestamp; we do NOT log your IP address, GPS, or message content.
• We do NOT track your GPS location, contacts, or browsing history.

2.3 Authentication via Firebase (when enabled)

If OTP login is active, we use Google Firebase Authentication to verify your phone number via SMS. Firebase processes only your phone number and a temporary verification code. See Firebase Privacy.

3. How we use your information

• To create and operate your account.
• To show your listings/profile to other users in the app.
• To enable in-app calls between buyers and sellers (via masked or full mobile numbers depending on premium status).
• To process the optional ₹299 lifetime Premium upgrade via Razorpay (PCI-DSS compliant).
• To detect and prevent fraud / abusive content.
• To comply with applicable Indian law (IT Act 2000, IT Rules 2021).

4. Sharing & disclosure

We do not sell your personal data. We never use your email address for marketing or advertising. We share data only:

• With other app users: your name, village, district, listings, labour profile and (when unmasked) mobile number. Email addresses are NEVER shown to other users.
• With service providers who help us run the app:
  • MongoDB Atlas — database hosting
  • Firebase (Google) — phone-OTP authentication (when enabled)
  • Cashfree / Razorpay — payment processing for Premium upgrade (only triggered when you choose to pay; we never store your card / UPI details)
  • Google Gemini API — only the chat message you send to the AI Krishi Salahkar is processed on Google's servers to produce a Hindi farming-advice reply. Google processes the message under their own Gemini API terms. We do not send your email, mobile, or any other personal identifier to Google.
  • data.gov.in (Agmarknet) — public read-only mandi-price feed. No personal data is sent.
  • Open-Meteo — public read-only weather forecast feed. Only the district / village name you select is sent, never your GPS or account identifiers.
• To authorities when legally compelled (court order, IT Act).

5. Mobile-number visibility & Premium

The app supports two visibility modes controlled by Kisan Kiraya admins:

• Free Mode (current launch mode) — All mobile numbers are visible to everyone for free. This is enabled to help users connect quickly during the initial launch period.
• Premium Mode — Other users see your mobile as 9XXX-XXX-1234. To make it fully visible, you may optionally upgrade by paying ₹299 (lifetime, one-time). This payment is processed by Razorpay; we never store your card / UPI details.

You can always see whether masking is active and current pricing inside the app's "My Profile" tab.

5a. Public Provider Profile

Tapping a listing's owner avatar or name opens a "Provider Profile" screen that aggregates all listings and labour profiles posted by that user, plus their public name, village, district and optional photo. This helps buyers see the full range of services a provider offers. Mobile numbers continue to follow the masking rules described in Section 5.

6. Your rights

• Access: see all data linked to your account in the My Profile tab.
• Edit: update name / village from My Profile → Edit.
• Delete: tap "Delete My Account" inside the app, OR submit a request at api.kisankiraya.net/delete-account. All your listings, labour profile, reviews and account data will be deleted within 7 days.
• Withdraw consent: simply uninstall the app; you may also email us to permanently delete data first.

7. Data retention

We retain your account & content for as long as your account is active. Deleted accounts are removed from the live database within 7 days and from encrypted backups within 90 days.

8. Children

This app is intended for users 18 years or older. We do not knowingly collect data from children.

9. Security

• All API traffic uses HTTPS (TLS 1.2+).
• Database access is restricted to authenticated server processes only.
• Admin operations are protected by mobile-allowlist + master-password + 12-hour session tokens.
• We follow industry-standard practices but no system is 100% secure.

10. Changes to this policy

If we make material changes, we will update the "Last updated" date and notify users via the app or email.

11. Contact us

• Email: support@kisankiraya.net
• Website: https://api.kisankiraya.net