PRIVACY POLICY

Last updated: [Date, e.g., March 12, 2026]

This Privacy Notice for Mahak Rathore ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you download and use our mobile application (Namaste NL), or any other application of ours that links to this Privacy Notice. This policy explains how this mobile application (“the App”) collects, uses, stores, and protects user information. The App is designed to support Indian individuals living in the Netherlands by providing guidance, community information, services, events, and community resources. By installing or using the App, you agree to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services. Questions or concerns? If you still have any questions or concerns, please contact us at mahak.rathore@gmail.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice. More details are available in the full text below.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  4. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
  5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
  6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  7. HOW LONG DO WE KEEP YOUR INFORMATION?
  8. HOW DO WE KEEP YOUR INFORMATION SAFE AND WHERE IS IT STORED?
  9. DO WE COLLECT INFORMATION FROM MINORS?
  10. WHAT ARE YOUR PRIVACY RIGHTS (GDPR)?
  11. CONTROLS FOR DO-NOT-TRACK FEATURES
  12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
  13. HEALTH DATA DISCLOSURE (GOOGLE PLAY REQUIREMENT)
  14. DO WE MAKE UPDATES TO THIS NOTICE?
  15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Information you voluntarily disclose to us

We collect personal information that you provide to us when you register on the App, express an interest in obtaining information, participate in activities, or otherwise contact us.

Information automatically collected

We automatically collect certain technical information when you access or use the App to ensure performance and security.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information strictly for the following reasons, depending on how you interact with our Services:

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We share user data only in the following specific and transparent situations:

WHAT WE DO NOT DO:

WE DO NOT SELL, RENT, OR SHARE ANY PERSONAL INFORMATION with third parties for marketing or commercial purposes. We do not use user data for advertising purposes. Any third-party service providers (like diagnostics tools) we use are restricted from accessing or using your data for any purpose other than providing their diagnostic function to us.

If you are located in the EU or UK (GDPR/UK GDPR): We rely on the following valid legal bases to process your information:

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with, our Services. Any data collected by third parties is not covered by this Privacy Notice. You should review the policies of such third parties and contact them directly to respond to your questions.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions. We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising. Specific information about how we use such technologies is set out in our Cookie Notice: https://indiansinthenetherlands.nl/.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. Our primary goal is data minimization.

No purpose in this notice will require us to keep your personal information for longer than the period of time in which users have an active account with us. We will securely delete or anonymize your data when it is no longer needed.

Requests for Deletion: You have the right to request account deletion and associated data removal at any time (see Section 8).

8. HOW DO WE KEEP YOUR INFORMATION SAFE AND WHERE IS IT STORED?

Secure Infrastructure & Password Handling (Supabase)

We are committed to data security. Your data is not stored insecurely on our developer device. It is stored securely using secure, cloud-based infrastructure provided by Supabase.

Specifically regarding Passwords: We do not store plaintext passwords. Supabase utilizes industry-standard encryption protocols (like bcrypt) for password-based authentication. Passwords and authentications credentials are encrypted and are not visible to the app administrator or developer. We can only see user IDs and emails, not the underlying passwords.

General Security Measures

We implement appropriate technical and organizational security measures (including secure communication protocols and database security) designed to protect the security of any personal information we process. However, despite our efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our App is at your own risk. You should only access the Services within a secure environment.

9. DO WE COLLECT INFORMATION FROM MINORS?

This App is not intended for children under the age of 13. We do not knowingly collect personal data from children. If we learn that personal information from users less than 13 years of age has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 13, please contact us at mahak.rathore@gmail.com.

10. WHAT ARE YOUR PRIVACY RIGHTS (GDPR)?

Depending on where you are located (e.g., EEA, UK, Canada), you may have the following rights under applicable data protection laws (like GDPR):

To exercise these rights, please contact the support email listed below.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

While we are located in the Netherlands and primary apply GDPR standards, we provide transparency if you use the App as a US resident. Based on your state of residence, you may have rights allowing you greater access to and control over your personal information. If you use the App, we typically do not "sell" your personal information to third parties as defined under applicable US state laws. However, some sharing of de-identified usage data with diagnostics tools could be interpreted differently in specific jurisdictions. We do not collect or share any health or medical data, regardless of your location. US residents can contact us using the contact details below to exercise their rights, subject to verification.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you.

Category Examples Collected
A. Identifiers Contact details, such as real name, alias, unique personal identifier, email address, account name, and Internet Protocol address YES
B. Personal information as defined in the California Customer Records statute Name, contact information, education, employment, employment history, and financial information YES
C. Protected classification characteristics under state or federal law Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data NO
D. Commercial information Transaction information, purchase history, financial details, and payment information NO
E. Biometric information Fingerprints and voiceprints NO
F. Internet or other similar network activity Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements YES
G. Geolocation data Device location NO
H. Audio, electronic, sensory, or similar information Images and audio, video or call recordings created in connection with our business activities NO
I. Professional or employment-related information Business contact details, job title, work history, and professional qualifications if you apply for a job with us NO
J. Education Information Student records and directory information NO
K. Inferences drawn from collected personal information Inferences drawn from any of the collected personal information listed above to create a profile about, for example, an individual’s preferences and characteristics NO
L. Sensitive personal Information Racial or ethnic origin, religious beliefs, precise geolocation NO

How to Exercise Your Rights

To exercise these rights, you can contact us by submitting a data subject access request, by emailing us at mahak.rathore@gmail.com, Instagram, or by referring to the contact details at the bottom of this document.

13. HEALTH DATA DISCLOSURE (GOOGLE PLAY REQUIREMENT)

In compliance with the Google Play User Data policy, we explicitly disclose that the Namaste NL application does not collect, process, store, or share any health or medical data.

Health data includes information related to physical health, mental health, medical conditions, fitness tracking, medical records, or other health-related metrics.

The Namaste NL application is designed to provide community resources, events, and information for individuals living in the Netherlands and does not include any health tracking or medical functionality.

14. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. Material changes will be prominently posted within the App or directly notified to you. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have any questions, concerns, or requests regarding privacy, data handling, or exercising your rights (including requests to access or delete data), please contact:

Mahak Rathore

Almere, Flevoland 1326 GR

Netherlands

Email: mahak.rathore@gmail.com

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please fill out and submit a data subject access request.