SNDP OnlinePrivacy policy
SNDP Online is a web app that helps S.N.D.P. Yogam Shakhas keep house and member records, collect masavari and sambhavana, and issue receipts. It is run by S.N.D.P. Yogam Shakha No. 1900, Pullupana (Kadakkal Union) ("we", "us"). Teche Center, Neyyattinkara, provides the technical service — hosting, maintenance, support and WhatsApp delivery — on our instructions. This policy covers the app at app.sndponline.org and this website, sndponline.org. It explains what personal data is collected, why, who can see it, how long it is kept, and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
SNDP Online is not the official website of S.N.D.P. Yogam.
Contents
- Who is responsible for your data
- What we collect
- How the data is used
- Aadhaar, ID numbers and bank details
- Children in a family
- Who the data is shared with
- Where the data is kept
- How long it is kept
- How it is protected
- Your rights
- Cookies and storage on your device
- Grievance Officer and contact
- Changes to this policy
1. Who is responsible for your data
- Member and house records belong to the Shakha that keeps them. The Shakha decides what to record and why, so it is the Data Fiduciary for that data. SNDP Online stores and processes it for the Shakha, on its instructions; Teche Center does the technical processing as Data Processor. Questions about your membership record should normally go to your Shakha first.
- Accounts of office bearers and staff, Shakha registration details and the platform's security records are handled by us, S.N.D.P. Yogam Shakha No. 1900, Pullupana, as Data Fiduciary, with Teche Center as Data Processor.
- WhatsApp message credits are bought by each Shakha's office bearers (not by members) from Teche Center, on its store at techecenter.com/store. That store's own privacy policy covers the checkout and the invoice.
2. What we collect
| Whose | What | Where it comes from |
|---|---|---|
| Members and family members | Name, date of birth, gender, father's and mother's names, address, house number and name, relation to the head of the house, mobile number, email (optional), education and occupation (optional), SNDP permanent number (optional), photo (optional), address proof type and number, membership status, ID card number, and the date consent was given | Entered by the Shakha, or by the member when they register themselves |
| Members and payers | Masavari dues; payments (amount, date, mode, the UPI reference/UTR the payer enters, cheque details); receipts; the name of a payer who is not a member | Entered by the Shakha or the member |
| Office bearers and staff | Name, mobile number, role in the Shakha (President, Secretary, collector and so on), email (optional) | Entered at Shakha registration or by the Shakha admin |
| The Shakha | Shakha number, name, place, Union, contact mobile, UPI ID, bank account details, receipt prefix | Entered by the office bearers |
| Everyone who logs in | Mobile number, login times, the device's browser name and IP address for each login session, records of one-time codes sent (never the code itself in readable form), and a log of changes made | Created automatically |
| WhatsApp messages | Which message was sent to which number and when (for example a receipt or a login code), the values filled into it (such as the receipt number and amount, never the login code itself), whether it was handed to WhatsApp, and the Shakha it was charged to | Created automatically |
We do not collect caste, religion beyond Shakha membership, health, income or biometric data, and the app has no advertising or third-party tracking.
3. How the data is used
- To keep the Shakha's house and member register, approve members, and issue member ID card numbers. (Basis: consent given to the Shakha.)
- To work out masavari dues and arrears, record collections and issue numbered receipts in the Shakha's name, and to let members see and pay their dues. (Consent; the Shakha's accounting obligations.)
- To send a one-time login code, and WhatsApp messages the Shakha's actions trigger: receipts, payment not confirmed, membership approved or not approved, new staff logins. (Consent; to provide the service you asked for.)
- To keep accounts secure, prevent misuse and investigate problems, using login and change logs. (Legitimate uses permitted by the DPDP Act, including preventing fraud.)
- To meet legal requirements and answer lawful requests from authorities.
The data is not used for marketing, not sold, and not used to build profiles. Members are not sent promotional messages.
4. Aadhaar, ID numbers and bank details
- Aadhaar: only the last 4 digits are kept. The full Aadhaar number is never stored.
- Other address proof numbers (voter ID, passport and so on) and the Shakha's bank account number are stored encrypted (AES-256). Screens show only a masked version.
- Photos are stored privately and shown only to logged-in staff of the member's Shakha and to the member.
5. Children in a family
A house record may include family members under 18. Their details are entered by the Shakha, or by the head of the house, with the consent of a parent or lawful guardian, and only for the Shakha's register. Children do not get their own login, their data is never used for any other purpose, and they are not sent messages.
6. Who the data is shared with
- Your Shakha: office bearers and staff of your own Shakha see your record. No other Shakha can see it. Union-level users, if a Union is given access, see only summary reports for the Shakhas in that Union.
- WhatsApp (Meta): to deliver messages, the recipient's mobile number and the message content (for example the receipt number and amount) pass through Teche Center's WhatsApp Business system to WhatsApp. WhatsApp handles them under its own terms and privacy policy.
- Payments by members: members pay only their own Shakha, straight to the Shakha's account, with their own UPI app or, where a Shakha sets one up, through that Shakha's own online payment gateway. The gateway handles card, UPI and bank details under its own terms; we never see or store them.
- WhatsApp recharges (for login codes and notifications) are a Shakha expense, bought by the Shakha's office bearers on the Teche Center store through Razorpay. Members never pay for them.
- Authorities: when the law requires it, for example under a court order.
- Teche Center, our technical service provider, whose staff host, maintain and support the service, only as needed for that work, on our instructions and under a duty of confidentiality. Teche Center does not use the data for anything else and does not sell it.
7. Where the data is kept
The app and its database run on servers operated by Teche Center in Kerala, India. Backups are kept on Teche Center's own systems in India. WhatsApp messages are processed by Meta, which may process them outside India.
8. How long it is kept
| Data | Kept for |
|---|---|
| Member and house records | While the person is a member of the Shakha and the Shakha uses SNDP Online. When a member leaves or asks for erasure, the Shakha marks them inactive and personal details are removed or anonymised within 90 days, except what must be kept with payment records (below). |
| Payments, receipts and the names on them | 8 years after the end of the financial year they belong to, because Shakha accounts must be kept that long. Receipts are cancelled, never deleted. |
| Log of changes (audit log) | 8 years, for the same reason |
| Login sessions and one-time code records | Up to 1 year |
| WhatsApp message records | Up to 2 years |
| A Shakha that stops using the service | Its data is given back to it on request (spreadsheet export) and then deleted within 90 days, except records the law requires us to keep. |
| Backups | Overwritten in a rolling cycle of up to 35 days |
9. How it is protected
- Logins use a one-time code sent to the person's own mobile, and the platform administrator also needs a password. Login codes expire after 2 minutes and are limited to a few tries.
- Each Shakha's data is kept apart, and the app checks the Shakha on every request.
- Connections use HTTPS (TLS). Sensitive numbers are encrypted, as described above.
- Every change to members, payments and receipts is logged with who made it and when. The log, payments and receipts cannot be deleted.
- The app is tested for security before each release.
If a personal data breach happens, we will inform the affected Shakhas, the people affected, and the Data Protection Board of India as the DPDP Act requires.
10. Your rights
Under the DPDP Act you can:
- Access a summary of your data and how it is used. Members can see their own details, dues and receipts after logging in.
- Correct or update your details.
- Erase your data when it is no longer needed. Payment records the Shakha must keep by law are retained, as explained above.
- Withdraw consent. This stops further use, but does not undo what was done before.
- Nominate someone to act for you if you die or cannot act.
- Complain to us, and then to the Data Protection Board of India.
Please ask your Shakha's office bearers first, because they keep your record. You can also write to us directly (section 12), and we will help the Shakha act on your request. We answer within 30 days.
11. Cookies and storage on your device
- app.sndponline.org sets one essential cookie, which keeps you logged in. It is sent only to the app's own login service and cannot be read by scripts. The app also remembers your language choice on your device.
- The app stores its own files on your phone so it opens quickly and works as an installed app. It never keeps your records offline.
- sndponline.org (this website) sets no cookies.
- There are no analytics or advertising cookies.
12. Grievance Officer and contact
Grievance Officer: Secretary, S.N.D.P. Yogam Shakha No. 1900, Pullupana — Reesan S
Phone and WhatsApp: +91 96450 67298
President: Murali S, +91 88914 95418
For a record kept by another Shakha, contact that Shakha's office bearers first; we will help them act on your request.
We respond to complaints within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.
13. Changes to this policy
If this policy changes, the new version is published here with a new date. For important changes we will also tell Shakhas in the app before the change takes effect.