Privacy policy

The short version

• We collect only what a feature needs, and we never sell your data or show you ads based on it.
• What you save (plans, journal, safety cards) is private to your account. Our team sees only counts, not the content.
• You can ask us to delete your account and everything in it at any time.

What we collect, and why

• Account (Google sign-in): your name and email address from Google, to create your account. We do not get your Google password, contacts, files or anything else.
• Account (mobile sign-in): your mobile number, to send you a one-time code by SMS.
• Things you save: your trip plan, saved insights, journal entries and packing list, so they follow you between phones.
• Family safety cards: the name, age, blood group, phone numbers, meeting point, notes and photo you enter, so you can print or show the card. Only you can see them.
• Enquiries and waitlist: your name, mobile number or email, travel dates, group size and message, so we or a listed partner can reply to you.
• Technical data: like every website, our server records requests (including your IP address) for security and to stop abuse. Where we store an IP address with your data, we keep only a one-way scrambled form of it.

Your location

The map can show places near you and you can share your location with family. Your location is used only on your phone: it is not sent to our server. When you tap “share location”, it goes only to the WhatsApp chat you choose.

Stored on your phone

The site keeps your preferences and saves (language, plan, journal, passport stamps) in your browser so it works offline and without an account. If you sign in, these are copied to your account. Signing out removes the personal copies from that phone.

Who we share data with

We do not sell or rent personal data. We use a few services to run features you choose to use:

• Google: for “Continue with Google”, and for translating pages when you pick a language other than English.
• SMS provider (MSG91): to deliver sign-in codes to your mobile.
• WhatsApp (Meta): to alert our team about a new enquiry, and when you choose to share something on WhatsApp.
• Partners: when you send an enquiry about a listed stay, cab, tour or package, the details you entered may be passed to that provider so they can reply.
• Maps and weather: map tiles and place data (OpenFreeMap, OpenStreetMap, Esri) and weather (Open-Meteo) are loaded from these services, which see your IP address like any website you visit.
• We may disclose data if required by Indian law or to protect someone’s safety.

How long we keep it

Account data and saves are kept while your account exists. Enquiries are kept as long as needed to handle them and for our records. Server request logs are kept only for a short time. When you delete your account, we delete its saves and safety cards.

Your choices and rights

• Use the site without an account: most features work entirely on your phone.
• See and change your name and language in My Kumbh, and delete saves or safety cards there.
• Ask us for a copy of your data, a correction, or deletion of your account, using the contact below. These rights also follow India’s Digital Personal Data Protection Act, 2023.

Children

Accounts are for adults. Parents and guardians may create safety cards for children in their family; those cards stay in the parent’s private account.

Security

The site is served only over HTTPS. Sign-in codes are stored only in scrambled form, sessions expire, and each account can see only its own saves. No system is perfectly secure, so please don’t put passwords or bank details in notes.

Changes and contact

If we change this policy, we will update the date at the top. Questions or requests: [email protected]. See also our terms of use.