Privacy Policy

Last updated: 30 July 2026

Overview

Prangan is a residential-community management app for housing societies. It is used by three kinds of people in a society — residents, security guards, and administrators — and this policy explains what it stores about each of them, why, who else can see it, and how to get rid of it.

We do not sell your data, we do not use it for advertising, and we do not run any advertising or analytics SDKs in the app.

Information You Give Us

• Account and profile: your name, email address, phone number, and password (stored only as an Argon2 hash — we never keep the password itself). If you sign in with Google we receive your Google account identifier, name, email, and profile picture URL.
• Your place in the society: your role, your society, your tower and flat, and for committee members your designation.
• Emergency contact: a name and phone number you choose to add, so someone can be reached on your behalf.
• Household details you choose to add: family members (name, relationship, phone, photo) and vehicles (type and registration number).
• Photos and documents: a profile picture, photos attached to complaints, photos of visitors taken at the gate, payment receipts you upload, and — for administrators — society logos, notice images, amenity photos, and resident-import spreadsheets.
• What you post: complaints and their comments, notices, poll votes, amenity bookings, and messages to your society.

Information About Visitors and Guests

Residents and guards record people who come to the society: a visitor's name, phone number, purpose of visit, entry and exit times, the flat they are visiting, and sometimes a photograph taken at the gate. Guest passes additionally store an email address so the pass can be sent.

These people are usually not Prangan users and have not agreed to this policy. If you enter someone else's details, you are responsible for having a legitimate reason to do so and for telling them if they ask. Your society administrator can delete any visitor record, and anyone recorded as a visitor can write to us at kumar.abhishek2k23@gmail.com to have their record removed.

Information Collected Automatically

• Push notification token: an identifier for your device's copy of the app, so we can notify you about visitors, complaints, notices, dues and emergencies. Used for nothing else.
• Session and security records: login sessions and refresh tokens (stored hashed), and one-time codes for email verification and account deletion. These expire.
• App integrity signals: the app asks Google Play Integrity to confirm it is a genuine, unmodified install before it talks to our servers. This checks the app and the device, not you, and returns no personal information to us.
• Server logs: ordinary request logs kept briefly for security and debugging.

We do not collect your location, contacts, calendar, microphone audio, SMS, call logs, installed-app list, or advertising identifier.

Device Permissions

• Camera — to photograph a complaint, a payment receipt, a visitor at the gate, or to scan a gate pass. Stills only; the app never records audio or video.
• Photos — to attach an image you have already taken.
• Notifications — to alert you as described above.
• Biometrics / device passcode — optional app lock. The check happens entirely on your device; no fingerprint or face data is ever sent to us or stored by us.
• Files — only to save a report you asked to download, to a folder you pick.

Who Can See Your Information

Prangan is shared software: your society's administrators can see the residents, flats, complaints, dues and payments of that society, and guards can see visitor records for the society they work at. Residents see their own flat's records — note that people who share a flat share its visitor log and its dues. Nobody in one society can see another society's data.

Service Providers

We share data with these companies only so far as they need it to do their job for us:

• Cloudinary — stores and serves the images described above.
• Razorpay — processes payments. Card, UPI and bank details are entered with Razorpay and never reach our servers; we store only the payment's amount, method, status and Razorpay reference. Money for maintenance dues is settled directly to your society's account, not to us.
• Google (Firebase Cloud Messaging, Play Integrity) and Expo — deliver push notifications and verify app integrity.
• Email delivery — sends verification codes, password resets, guest passes and complaint receipts.
• Hosting and database providers — run the service.

We do not sell or rent personal data to anyone, for any purpose.

Data Retention & Deletion

We keep your data for as long as your account exists. You can delete your account at any time, from the app (Profile → Delete account) or from the Delete Account page here — we email a one-time code to confirm it is really you, then remove your profile, credentials, sessions, push tokens and personal records.

Two things survive a deletion, and you should know which: records that belong to the society rather than to you (for example a paid maintenance receipt, or a complaint another resident is still party to) may be retained where accounting or legal obligations require it, and backups age out on their own schedule. Nothing retained is used to contact you or to rebuild your account.

Security

Passwords are hashed with Argon2 and never stored in plain text. Traffic is encrypted in transit. Sessions use short-lived access tokens with rotating refresh tokens, and a reused refresh token invalidates the session. Requests from the mobile app are attested with Google Play Integrity. No system is perfectly secure, but these are the measures we take.

Children

Prangan is intended for adult members of a housing society and is not directed at children under 13. We do not knowingly collect data from them. A parent may add a family member who is a child; that entry holds only what the parent chose to enter, and can be removed at any time.

Your Rights

You can view and correct your profile in the app, and delete your account as described above. To ask what we hold about you, to correct something you cannot reach yourself, or to complain about how we have handled your data, write to us at the address below. We respond to grievances within 30 days.

Changes to This Policy

If this policy changes materially we will update the date above and, where the change affects how we use existing data, tell you in the app.

Contact

For privacy questions, data requests, or grievances, contact kumar.abhishek2k23@gmail.com.