Privacy Policy — Dadhwal ICCC Alert App

1. Who we are

Dadhwal ICCC Alert App is a private, internal-use application that lets authorised personnel monitor Integrated Command & Control Centre (ICCC) alerts, CCTV camera feeds and related operational events. It is operated by Dadhwal AI Private Limited, F74, Industrial Area, Phase 7, SAS Nagar (Mohali), Punjab - 160055 ("we", "us", "our").

This policy explains what information the app handles, why, and the choices you have. It applies only to the Dadhwal ICCC Alert App mobile application and its backend services.

Access to the app is restricted to registered, approved users. It is not a consumer social app and it is not intended for use by the general public.

2. Information we collect

We collect only what the app needs to identify you, keep your account secure, and deliver the alerts relevant to you.

2.1 Information you provide

Data	Why we need it
Full name	To identify you to your organisation and to attribute actions such as comments or acknowledgements on an event.
Mobile phone number	It is your login identifier. We send a one-time password (OTP) by SMS to verify it.
Organisation	To scope your access to the correct deployment.
Area / location of posting	To decide which sites, cameras and alert channels you may view.
Designation	To apply the correct role and access level.
Comments, remarks and feedback you type in the app	To record operational follow-up on an event and to respond to support requests.

2.2 Information collected automatically

Data	Why we need it
Device identifier generated by the app	To bind your session to one device, keep you signed in, and deliver notifications to the right handset.
Authentication token and session expiry	To keep you signed in without re-entering an OTP every time.
Device model, Android version, app version	To diagnose crashes and compatibility problems.
Server-side access logs (date and time of requests, IP address, requested resource)	Security, abuse prevention, and audit of who viewed which camera or alert.
Notification and alert delivery state	To avoid showing you the same alert twice and to mark alerts as read.

2.3 Operational content shown in the app

The app displays content produced by the ICCC system itself, including CCTV video streams, alert snapshots, detection events, and vehicle or asset GPS positions reported by tracked equipment. This content belongs to the operator of the ICCC deployment. It is not personal data about you, and it is not generated by your phone.

2.4 Data stored only on your phone

Your preferences (selected channels and subscriptions, alert sound and priority settings, saved camera layouts), a cached copy of recent events and their images, and any screenshot you choose to save from a camera feed are stored locally on your device. Screenshots you save go to your device gallery or app storage and are not uploaded to us unless you deliberately share them.

3. What we do not collect

We do not collect your phone's GPS or precise location. The app does not request location permissions.
We do not read your contacts, SMS inbox, call logs, photos or files.
We do not use your microphone or camera to record you.
We do not sell or rent your personal information to anyone.
We do not use your data for advertising, ad targeting or profiling, and the app contains no third-party advertising SDKs.
We do not ask for or store payment information. The app is free for authorised users.

4. How we use information

To register you, verify your phone number by OTP, and sign you in.
To decide which alert channels, sites and cameras you are permitted to see.
To push alert notifications to your device, including high-priority alerts that may sound or vibrate.
To record operational actions (acknowledgements, comments, feedback) against an event for audit purposes.
To keep the service secure: detect unauthorised access, misuse and abnormal activity.
To fix bugs, improve reliability and support you when you report a problem.
To comply with legal obligations and lawful requests from competent authorities.

Where such a framework applies, our legal basis is the performance of our contract with your organisation, our legitimate interest in operating a secure monitoring system, your consent for optional device permissions, and compliance with law.

5. Device permissions the app requests

Permission	What it is used for
Internet & network state	To reach our servers and to detect when the connection drops.
Notifications	To show alerts. You can revoke this in Android settings; you will then only see alerts when the app is open.
Foreground service & wake lock	To keep a live connection open so urgent alerts arrive promptly, and to wake the screen for a critical alert.
Run at startup (boot completed)	To restore the alert connection after your phone restarts, so you do not silently stop receiving alerts.
Ignore battery optimisations (optional)	Requested only with your explicit consent, so Android does not suspend alert delivery. You may decline; alerts may then be delayed.
Vibrate	To alert you when your phone is silent.
Storage (Android 12 and older only)	To save a camera screenshot you have chosen to capture. Newer Android versions do not need this permission.

You can review or revoke permissions at any time in Android Settings → Apps → Dadhwal ICCC Alert App → Permissions.

6. Sharing and disclosure

We share personal information only in these limited situations:

With the organisation that authorised your account — your name, designation, area and activity on events are visible to administrators and colleagues in your deployment, because the app is an operational tool.
With service providers who host our servers, send OTP SMS messages, or provide notification delivery, strictly to perform those services on our instructions.
Where the law requires it — in response to valid legal process, or to protect the rights, safety and property of users, the public or us.
In a corporate transaction — if the service is transferred to another entity, this policy will continue to apply to the transferred data, or you will be notified of a replacement policy.

We do not transfer your personal data to third parties for their own independent purposes.

7. How long we keep data

Account details (name, phone, area, designation, organisation): while your account is active. Deleting your account from inside the app, or from the deletion page after verifying the code we send you, erases them immediately. A request sent to us by email instead is completed within 30 days.
OTP codes: a few minutes only, then discarded.
Session and authentication tokens: until they expire or you sign out.
Security and access logs: typically up to 12 months, then deleted, unless a longer period is required by law or for an ongoing investigation.
Operational records (alerts, acknowledgements, comments attributed to an account): retained by the ICCC operator as part of its records, under its own retention rules. Where such a record must be kept for audit, we remove or pseudonymise your personal identifiers after account deletion instead of destroying the record.
Data on your phone: removed when you uninstall the app or clear its storage.

8. Security

Access requires a phone number verified by OTP; there is no shared or guest login.
Sessions use expiring tokens and are bound to a device.
Access to alert channels and camera feeds is restricted by role, area and organisation.
Server access is restricted to authorised personnel and is logged.
Credentials are never stored in plain text on our servers.

No system is perfectly secure. Please keep your device locked, never share your OTP with anyone, and tell us immediately at info@dadhwal.in if you believe your account or device has been compromised.

9. Your rights and account deletion

Subject to applicable law, you may ask us to:

Access the personal information we hold about you;
Correct information that is inaccurate or out of date;
Delete your account and associated personal data;
Withdraw consent for optional permissions, such as notifications or battery exemption;
Complain to us, or to your local data protection authority, about how we handle your data.

You can delete your account and data at any time, in either of two ways:

In the app: open Profile and tap Delete my account.
On the web, with no sign-in: use the page below. Enter your registered mobile number, confirm the 6-digit code we send you on WhatsApp, and the account is erased immediately.

Delete your account and data

You may also email info@dadhwal.in from any address, quoting the mobile number registered with the app. We verify every request before acting on it, so that nobody else can delete your account.

10. Children

The app is intended solely for employees, contractors and officials authorised to use the ICCC system. It is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a minor has registered, contact us and we will remove the account.

11. Changes to this policy

We may update this policy when the app changes or the law requires it. The revised policy will be posted at this URL with a new "Last updated" date. If a change materially affects how we use your personal information, we will give notice inside the app or by SMS to your registered number before it takes effect. Continued use of the app after a change means you accept the updated policy.

12. Contact us

For any privacy question, request or complaint about this app:

Dadhwal AI Private Limited
F74, Industrial Area, Phase 7, SAS Nagar (Mohali), Punjab - 160055
Email: info@dadhwal.in

We aim to acknowledge every request within 7 days and to resolve it within 30 days.

Contents