Sanatan Sanskaaram

Privacy Policy

Effective 27 September 2026 · Last updated 5 October 2026 (seat reservations no longer ask for the number of people)

This policy explains what information the Sanatan Sanskaaram app for Android and iPhone (com.sanatan.sanskaaram) and the website sanskaaram.com collect, why, who it is shared with, and the choices you have. "We" and "us" mean Sanatan Sanskaaram, the organiser of the Ramleela event the app serves.

In short: we collect what is needed to sign you in, issue your entry and parking passes, run your event wallet and answer your questions. We do not sell your data, show ads, track you across other apps or websites, or read your contacts or location.

Information we collect

What	Why
Mobile number	Your account is tied to your mobile number. We use it to send your sign-in code on WhatsApp and so the office can issue passes and coins to you.
Seat reservations (website)	When you reserve seats on our website, we collect your name, mobile number and the date you will attend. We use them to issue your reservation pass, send it to that mobile number on WhatsApp, and plan seating. The pass shows these details. Its QR code holds only a random number; when event staff scan it at the gate, they see that it is a seat reservation, its pass type and how many people it admits, but not your name or number. If you sign in to the app with the same mobile number, your upcoming reservations are shown there too. You do not need an app account or a membership to reserve.
Name and membership details	Your name, membership tier and validity, and any special access, recorded by our office or by you. Shown on your profile and passes.
Profile photo (optional)	If you add one, it is uploaded and shown on your profile.
Dates and family details (optional)	Date of birth, anniversary, and family members' names, relationships and dates of birth, if you or the office add them to a membership profile.
App-generated device identifier	A random identifier the app creates when it is installed. It links your entry pass to your phone so a pass cannot be used from another device. It is not your advertising ID or any hardware ID. Reinstalling the app creates a new one.
Passes and entry records	The passes you hold, when and at which gate they were scanned, parking passes and the vehicle number you give for them.
Wallet activity	Event coin balances and transactions: coins you receive, coins you share with other people, and coins you spend at vendor counters. The event coins are not money and cannot be bought or cashed out in the app.
Numbers you enter for other people	When you transfer a pass or share coins, you enter the other person's mobile number. If they are not yet registered, we may send them a one-time WhatsApp invite.
Complaints and messages	Complaints you submit in the app, and messages you send to our WhatsApp number, so our team can respond.
Security information	Sign-in sessions, your IP address and request logs, used to keep accounts secure and to prevent abuse such as repeated code requests.
QR scanner diagnostics (Android only)	On Android, the QR scanner used by event staff runs on Google ML Kit. When it is used, ML Kit sends Google diagnostic and usage information about the scanner: the device model, the Android and app versions, how long scans take, any errors, and a random identifier for this installation of the app. It never sends camera images or what a QR code contains. Google uses this for diagnostics and usage analytics of ML Kit and does not pass it to third parties. The iPhone app uses Apple's built-in scanner, which works entirely on the phone and sends nothing.

Camera

The app uses your camera only when you choose to: event staff use it to scan pass and wallet QR codes, and anyone can use it to take or choose a profile photo. QR codes are read on your phone, and camera images are not stored or uploaded. Only a profile photo you choose to save is uploaded. On Android, the scanner also sends Google the diagnostics described above (never images).

What we do not collect

No location, contacts, call logs, SMS or files beyond a photo you pick.
No advertising, no tracking across other apps or websites, and no advertising ID. The only analytics is the QR scanner diagnostics that Google ML Kit collects on Android (above).
No payment card or bank details. Coins are issued by the organiser, not purchased in the app.

How we use information

To sign you in and keep your account secure.
To issue and check entry and parking passes at the event.
To manage seat reservations made on our website.
To run your event wallet: grants, sharing and vendor redemptions, which you approve in the app.
To respond to complaints and messages and send you event notifications.
To prevent fraud and misuse, and to keep records we need for accounting and audit.

Who can see it

Event staff. When a gate guard scans your pass they see whether it is valid, its date, tier and any special access, but not your name or number. When a vendor cashier scans your wallet QR, they see your name on the payment request, and nothing is deducted until you approve it in your own app. Authorised office administrators can see member and reservation records to manage passes, reservations, coins and support.
People you transact with. When you share coins, the recipient sees your name on the transaction.
Service providers that run the service for us, only for that purpose: Meta Platforms (WhatsApp Business Platform) to deliver sign-in codes, invites and support messages; Cloudflare for secure network delivery and profile photo storage; and Google, which receives the Android QR scanner diagnostics described above. Everything else is stored on our own servers in India.
Legal reasons. If the law requires it, or to protect the safety of attendees.

We do not sell or rent personal information.

Retention and deletion

We keep your information while your account is active. You can delete your account at any time in the app, or ask us to delete it (how to delete your account). Deletion is immediate and permanent:

your mobile number, name, photo, dates, family details, linked sign-ins, sessions and device links are erased;
your complaints, notifications, invites, vehicle numbers and messages you sent to our WhatsApp number are erased;
your passes are cancelled, pending wallet requests are cancelled and your coin balance is set to zero;
coin transaction and gate entry records are kept in anonymised form (no longer linked to your name or number), because they are needed for the event's accounting and audit. Records of actions our administrators took on your account are kept for security.

Seat reservations are not part of an app account, so deleting your account does not remove them. To change or cancel a reservation, or to have it deleted, contact us.

Sign-in codes expire after 5 minutes and are stored only in scrambled (hashed) form.

Security

All traffic is encrypted in transit (HTTPS). Sign-in codes and session tokens are stored only as one-way hashes. Access to member data is limited to authorised administrators, with a second verification step, and their changes are logged.

Children

The app is meant for adults and is not directed at children. A member or the office may record family members, including children, on a membership profile for event entry. If you believe we hold a child's information that should be removed, contact us.

Your choices and rights

You can view your profile in the app, correct details by editing it or asking the office, and delete your account. In line with India's Digital Personal Data Protection Act, 2023, you can also ask us for a summary of the personal data we hold about you, ask for corrections, or raise a grievance with us at the address below. We aim to respond within 30 days.

Changes

If we change this policy, we will update this page and the effective date above. For significant changes, we will also tell you in the app.

Contact

Sanatan Sanskaaram
Privacy and grievance contact: [email protected]