Privacy Policy

Last Updated: 26-02-2026
Effective Date: 26-02-2026

The SARC Yearbook App ("App") is developed and operated by the Student Alumni Relations Cell (SARC), IIT Bombay, Mumbai, Maharashtra, India. SARC acts as the data controller for the purposes described in this Privacy Policy.

1. Information We Collect

• Account Information: College email address (@iitb.ac.in or @iitbombay.org)
• User Content: Photos, videos, captions, notes, and other content voluntarily uploaded
• Technical & Usage Data: Non-identifiable crash logs and basic usage metrics to improve functionality

We do not collect financial information, precise location data, government IDs, or contact lists.

2. How We Use Information

• To verify IIT Bombay affiliation
• To provide and maintain app functionality
• To moderate content and ensure community standards
• To improve app reliability, performance, and security

3. Account Verification

Registration is restricted to valid @iitb.ac.in or @iitbombay.org email addresses. Accounts are verified through OTP or confirmation link authentication.

4. Content Moderation

All uploaded content may be reviewed. Users may report inappropriate content within the App. Violations may result in content removal or account suspension.

5. Data Sharing & Third Parties

We do not sell, rent, or trade user data.

The App may use secure third-party infrastructure providers (such as cloud hosting or analytics services) solely for app functionality and performance monitoring. These providers process data on our behalf and are required to maintain confidentiality and security.

For the purpose of producing the printed yearbook, selected user content may be securely shared with authorized printing vendors under confidentiality obligations.

Personal data is not shared with external organizations except where required by law.

6. No Advertising & No Tracking

The App is ad-free. We do not use third-party advertising SDKs and do not track users across third-party apps or websites.

7. Data Security

• Encryption in transit using HTTPS
• Encrypted storage on secure servers
• Password hashing using industry-standard algorithms
• Role-based administrative access controls

8. Data Retention

Data is retained while accounts remain active. Users may delete content at any time. Account deletion is available directly within the App settings. Upon confirmed deletion, associated personal data is permanently removed within a reasonable period, except where retention is required by law.

9. User Rights

Users may access, update, or delete their content within the App. Requests for complete data deletion may be sent to the contact email below and will be processed within 7 days.

10. Children’s Privacy

The App is intended only for individuals aged 18 years or older.

11. Legal Compliance

This Privacy Policy is designed in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023.

12. Governing Law

This policy is governed by the laws of India. Jurisdiction: Mumbai, Maharashtra.

13. Contact Information

Email: khushiyadav.sarc@gmail.com