UrbanSetu — Privacy Policy

Last updated: 9 July 2026

UrbanSetu (“we”, “us”, “the app”) is a society-management platform that helps residential societies manage residents, visitors, billing, and communication. This Privacy Policy explains what personal data the app collects, why we collect it, who we share it with, how long we keep it, and how you can access or delete your data. By using UrbanSetu you agree to this policy.

1. Information we collect

We collect only the data needed to operate the society-management features you use:

Data	When / why it is collected
Phone number	Used to create and sign in to your account (via one-time password / phone verification). This is your primary identifier.
Name	Displayed to your society admins and neighbours so people and requests can be identified.
Email address (optional)	Optional contact and account-recovery channel.
Society & flat association	The society, building, and unit you belong to, and your relationship to the unit (owner, tenant, family member), so the app can show you the right information and route approvals.
Location (map pin)	Only when an admin creates or verifies a society — a one-time map coordinate for the society’s location. The app does not track your location in the background.
Photos & documents	Images you choose to upload: society logo, verification/proof documents, and marketplace listing photos.
Device push token	A token from Firebase Cloud Messaging so we can send you push notifications (visitor alerts, approvals, bill reminders).
Visitor & entry logs	When you or your society’s guards record visitors, deliveries, or walk-ins, those entries (name, phone, purpose, time, and the unit visited) are stored for society security records.
Usage & diagnostics	Anonymous/aggregated app-usage events and crash reports to keep the app working reliably (see §3).

2. How we use your information

Account creation & sign-in — verify your phone and maintain your session.
Society management — connect you to your society, building, and flat; route join requests and approvals to the right admin or owner.
Visitor management — record and notify you about visitors, deliveries, and gate entries for your unit.
Push notifications — send timely alerts (visitor at the gate, request approved, bill due).
Billing — generate and remind you about maintenance bills and society collections.
Reliability & improvement — diagnose crashes and understand which features are used, in aggregate.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Third-party services

We rely on the following processors to run the app. Each receives only the data needed for its function:

Service	Purpose
Supabase	Authentication and primary database (stores your account and society data).
Firebase (Google)	Push notifications and phone-number verification.
Sentry	Crash and error reporting to improve stability.
PostHog	Aggregated product analytics (which features are used).
Cloudflare	Hosting, content delivery, and security.
Google Maps	Selecting and displaying a society’s location on a map.

4. Data retention

We keep your account and society data for as long as your account is active.
Visitor and entry logs are retained for society security and audit purposes and may be kept for a limited period even after a visit, per the society’s records policy.
When you delete your account, we remove or irreversibly anonymise your personal data (name, phone, email, photos) within 30 days, except where we are required to retain limited records to meet legal, security, or billing obligations.
Aggregated, anonymised analytics that cannot identify you may be retained.

5. Your rights & choices

Access & export — you can request a copy of the personal data we hold about you.
Correction — you can update your name, email, and profile details in the app.
Deletion — you can request deletion of your account and personal data, either from the app’s account settings or by emailing us (see §7).
Notifications — you can turn off push notifications from your device settings.

To request data export or deletion: email privacy@urbansetu.club from the phone number/email associated with your account. We will respond within 30 days.

6. Children’s privacy

UrbanSetu is intended for adult residents and society staff. It is not directed at children under 13, and we do not knowingly collect their personal data.

7. Contact us

For any privacy questions or requests, contact us at privacy@urbansetu.club.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify you in the app.