Privacy Policy

Who we are

MyHarur is a community app for the residents of Harur and Dharmapuri, Tamil Nadu, built and operated by QenBel. This policy explains what information MyHarur collects, why, and what control you have over it. Questions can be sent to adminqenbel@gmail.com or connectwithhemapriyan@gmail.com.

What we collect

• From Google sign-in: your name, e-mail address and profile photo. We never see or store your Google password.
• From e-mail or phone sign-in: the e-mail address or phone number you provide, and a one-time code sent to it to confirm you own it. Phone sign-in is currently limited to Indian (+91) numbers.
• Profile details you choose to add: a username, phone number, blood group, emergency contact, and an optional address — all optional, and visible only to you and to MyHarur admins/moderators, never to other residents.
• Content you post: reports, community news, events, job listings and any photos you attach. Photos have location (EXIF/GPS) data automatically removed before upload.
• Diagnostic information: crash reports and bug reports you send us, with e-mail addresses and long digit sequences automatically scrubbed before they reach our systems.

Why we collect it

• To create and secure your account, and to verify you are a real person before you can post to a shared community feed (this is why sign-in is required for posting).
• To operate the app's features: publishing your reports/news/events/jobs once a moderator approves them, showing local weather, and sending you support responses.
• To keep the community safe: reviewing reported content, restricting or banning accounts that break the rules, and preventing spam or abuse.
• To send you notifications you've opted into (e.g. a daily digest of new reports), capped and rate-limited so you are never sent more than a handful a week.

Who can see it

Your name and anything you publish (reports, news, events, jobs, and their photos) are public once approved. Your profile details — phone, blood group, emergency contact, address, e-mail — are private and visible only to you and to MyHarur staff (moderators and admins) for account-safety purposes. We do not sell or share your personal data with advertisers or unrelated third parties.

Services we use

• Google — sign-in (OAuth).
• Supabase — our secure database and backend, including row-level security so only the right people can read each piece of data.
• Brevo — delivers the one-time sign-in codes for e-mail and phone (+91) sign-in. Brevo only ever receives the address/number needed to deliver that one code, nothing else about you.
• OpenStreetMap / Nominatim — maps and address search when you pin a location on a report, event or job.
• Open-Meteo — weather data for Harur and Dharmapuri.
• Firebase Cloud Messaging (once enabled) — delivers push notifications you've opted into.

Your control

You can edit or clear any profile detail from Account at any time. You can delete any post you made. Account > Delete account permanently removes your profile and sign-in; anything you previously published stays visible (since it may be relied on by other residents) but is no longer linked to your identity. A deleted post is fully purged, including its photos, within 30 days.

Security

Everything is sent over encrypted HTTPS. Your sign-in session is kept in your phone's encrypted storage. Admins and super admins must use two-factor sign-in. The app has been security reviewed and hardened by QenShar.

Children's privacy

MyHarur is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will remove it.

Changes to this policy

If we make a material change to how MyHarur handles your data, we will update the date at the top of this page and, where appropriate, notify you in the app.