Kambar Darbar app privacy policy

Effective: 9 November 2026.

This policy covers the Kambar Darbar Android app, package org.kambardarbar.app, published by BITSY INFOTECH for Kambar Darbar. For app privacy questions, contact darbarkambar@gmail.com. General Darbar correspondence can be sent to kambardarbar@gmail.com.

Information sent to our app services

• Optional Google sign-in: Google and Firebase Authentication process your sign-in credentials and tokens. The app receives a Firebase user identifier and available Google profile information, including name, email address and profile-photo URL. We use this to identify your app session and, for authorized Darbar administrators, control access to management features.
• Feedback: when you submit feedback, Firebase Cloud Firestore stores the message, submission time, and the name and email available in your app session. Feedback can also be submitted as an anonymous guest. In app versions with private feedback conversations, replies also store the reply text, sender's app user identifier and display name, administrator role and submission time. A conversation is accessible only to the original account owner and authorized Darbar administrators; it is not a public discussion board. Anonymous submissions without an identified account cannot receive private replies.
• Private feedback attachments: in app versions supporting attachments, you can choose a photograph or video, or record a voice note, to send in your private feedback conversation. Each file can be up to 100 MB. Selected files and voice recordings are stored in a private Cloudflare R2 bucket; the file name, type, size and attachment identifier are stored with the reply in Firestore. Access requires an authenticated participant in that conversation. These files are not placed in the public Gallery, publications or devotional-audio library.
• Administrator content: authorized administrators can submit event details, selected event photographs, news, image links and devotional updates to Firestore. Content intended for publication is displayed to app users. Only submit photographs and other content you are entitled to publish.
• Service information: Firebase Authentication and related Google services process technical information such as IP addresses, authentication activity, app identifiers and SDK/device metadata to operate the service, authenticate requests and prevent abuse. The precise information depends on the SDK and service being used.

We use this information for app functionality, account management, feedback handling and security. The app does not integrate advertising, Firebase Analytics or Firebase Crashlytics SDKs. We do not sell your personal information or use app accounts and feedback for personalized advertising.

Information kept on your device

Reading preferences, notes, bookmarks, cached content, feedback drafts and downloaded publications are stored locally. Sign-in display information may also be cached locally. Scholarship application fields are used on your device to create a completed PDF; the app does not automatically submit the application to Firebase. You choose whether to save, print, hand in or send that document. Information you subsequently send outside the app is handled by that recipient.

Permissions and notifications

The app uses internet access for online content and Firebase services. Where Android requests permission, you can choose whether to allow notifications and select a photograph or save a document using the system picker. Event and feedback notifications use on-device notifications; the app does not integrate Firebase Cloud Messaging. Disabling notifications does not delete your account.

Microphone permission is requested only if you choose to record a feedback voice note. Recording is started by you, has visible Stop and Cancel controls, and does not continue as a background microphone service. You can send text feedback without granting microphone access.

When you start devotional audio, supported app versions can continue playback in the background or with the screen locked. Android media controls let you pause, resume and stop that playback.

Service providers and external content

Google Sign-In, Firebase Authentication and Cloud Firestore provide authentication and app data services. Firebase processes information on our behalf according to its service terms. See Firebase privacy and security and Google's privacy policy.

Public devotional publications, audio, photographs, videos and content catalogues are delivered through Cloudflare R2 and its content-delivery network in the app update. Older installed versions may continue to use GitHub. Cloudflare processes connection information such as IP addresses and request metadata to deliver and protect these services. The cloud content editor verifies an authorized administrator's Firebase sign-in token; general users do not need to sign in to download this public content. See Cloudflare's privacy policy. Live darshan connects to Darbar camera streaming infrastructure; network services receive connection information such as your IP address when you connect. YouTube videos open in the external YouTube app or browser. External websites, video services and email apps have their own privacy practices.

Private feedback attachments are delivered through a separate authenticated Cloudflare endpoint over HTTPS. The service verifies your Firebase sign-in and your access to the feedback conversation for uploads and downloads. Attachment responses are not stored in a shared public content cache.

Security

Account, feedback and administrator data sent to Firebase is encrypted in transit using HTTPS. Access to administrative app data is controlled through Firebase authentication and database access rules. Live camera feeds use RTSP and are not encrypted by HTTPS; this policy does not claim that camera streaming is encrypted. Do not include passwords, payment details or sensitive personal records in feedback.

Retention, account deletion and your choices

Your sign-in profile remains associated with your app account while it exists. Submitted feedback is kept for the Darbar team to handle and manage. Signing out does not delete these online records. The app does not configure an automatic expiry for account and feedback records.

To prevent upload abuse, the private media service keeps temporary daily upload counters associated with a hashed app-account identifier. These do not contain your email address or message contents and normally expire within two days plus the next scheduled cloud cleanup. This short-lived security metadata is separate from the feedback and media removed during account deletion.

You can delete your app account and associated feedback using the account and data deletion page, without installing the app or emailing the Darbar team. Sign in with the same Google account used in the app, review the account shown, and confirm deletion. The process verifies your sign-in, removes associated feedback and personal information from the active app database, then deletes the app's Firebase Authentication account. Completion is shown only after these steps succeed. If a connection or verification step fails, follow the page's retry guidance; some feedback may already have been removed.

Private replies are stored within their original feedback record and are deleted with that record when account and associated feedback deletion completes. For private attachments, the updated deletion process first queues removal of the conversation's files in the cloud, then removes the feedback record and app account. Temporary storage-service failures are retried automatically. Once the feedback record is removed, its former attachments cannot be retrieved through the authenticated conversation endpoint.

The app update that adds Delete account and data in Settings provides the same automatic process. Older installed versions may still open an email draft; users of those versions can use the web page above instead. Deleting the Kambar Darbar app account does not delete your Google account. These app records are not intentionally retained after successful deletion.

You can reset reading data in the app's Settings. Android's app-storage controls can remove remaining local app data; downloaded files may need to be removed separately. Uninstalling the app does not itself delete online account records.

Age group

The app is intended for teens aged 13 and above and adults. It is not specifically directed to children under 13. If you believe a child under 13 has provided personal information through the app, contact the privacy inbox so the team can investigate and remove the associated app records.

Updates and contact

We may update this policy when app functionality or data practices change. The effective date is shown above. For questions about this policy or your app data, email darbarkambar@gmail.com.