Thatha Thotam Privacy Policy
This Privacy Policy explains how the Thatha Thotam Pilot mobile application handles information when Farmers, registered Visitors and anonymous Visitors use the app.
1. Information you provide
Depending on how you use the Pilot, you may provide profile and contact information such as your name, mobile number, WhatsApp number, city and district. Farmer registration also uses a required email address and password for authentication. Visitor email may be optional in the current Pilot.
2. Farmer and farm information
Farmers may provide farm information including farm name, village, city, district, an optional Google Maps link, farm type, description, activities, food information, availability, price-per-person information and maximum visitor capacity. Farmers may also upload farm photos.
3. Authentication and account information
The Pilot uses Supabase for authentication and backend services. Farmer accounts use email/password authentication. Registered Visitor flows may use Supabase anonymous authentication together with a Visitor profile. Password-reset functions use the email address associated with the Farmer account.
4. Photos
Farm photos are selected through the device's image-selection interface. The current Pilot does not implement an in-app camera capture flow and does not request Android camera permission. Uploaded farm photos are stored in a private Supabase Storage bucket and are displayed through temporary signed URLs.
5. Location
The current Pilot does not request Android device-location permission and does not collect GPS location from the device. Farm records may contain location-related information entered by a Farmer, such as village, city, district, an optional Google Maps link, and location fields maintained in the backend.
6. App usage and event information
The Pilot records first-party application events in its Supabase backend to operate, secure and improve the Pilot. These may include registration, login/session, farm registration/submission, farm views, searches, and Call or WhatsApp tap events. Search events may include search-related fields entered in the Pilot such as city or district, interests, travel group and people count.
The Pilot does not currently include an external advertising SDK, external analytics SDK, Firebase Analytics or Crashlytics.
7. Feedback
If you submit feedback through the Pilot, the feedback and its account/farm association may be stored so the Pilot team can review and respond to product or service issues.
8. Call and WhatsApp actions
When you choose Call Farmer, the app opens the device dialer. When you choose WhatsApp Farmer, the app opens WhatsApp externally. These external applications operate under their own privacy practices. The Thatha Thotam interface does not need to display the Farmer's number before opening the external application, but the number may become visible to the dialer or WhatsApp when the action is launched.
9. How we use information
- to create and manage Farmer and Visitor profiles;
- to display eligible farm information to Visitors;
- to support farm submission, review and administration;
- to provide direct Call and WhatsApp contact actions;
- to operate authentication, password reset, storage and security controls;
- to understand first-party Pilot usage and improve reliability and usability;
- to review feedback and DDDP requests where applicable.
10. Service providers and sharing
Supabase processes data as the Pilot's backend, authentication, database, Edge Function and private file-storage provider. Data may also be passed to external applications such as the device dialer or WhatsApp only when you choose the corresponding action.
We do not use the current Pilot to sell personal information, and the Pilot does not currently include advertising or a payment gateway.
11. Security
We use access controls, row-level security where applicable, private file storage, authenticated server-side functions and other technical safeguards designed to limit unauthorized access. No system can guarantee absolute security.
12. Data retention
We retain Pilot application data for as long as needed to provide and administer the Pilot, subject to applicable technical and operational requirements. We do not claim a fixed retention period here where one has not been established.
Infrastructure and security providers may keep independent operational, security or authentication logs according to their own service controls. The Thatha Thotam account-deletion flow does not promise deletion of provider-managed logs that are outside the Pilot application database and storage controlled by this feature.
13. Delete My Account
Registered Farmers and registered Visitors can use Delete My Account inside the app. The self-service deletion flow removes the user's Pilot account/profile and associated Pilot data as applicable, including Farmer farms, farm-photo records and caller-owned private storage objects, events, feedback, DDDP request data and directly linked audit rows handled by the deletion flow.
The deletion target is derived from the authenticated user; the user cannot choose another account to delete. Account deletion is intended to be permanent and cannot be undone.
14. Children and age information
The current Pilot registration flow described in this policy does not ask for a date of birth. Any Google Play target-audience or age eligibility settings will be declared consistently with the final release configuration before publication.
15. Your choices
You can choose what farm information and photos to submit, can avoid using Call or WhatsApp actions, and can permanently delete a registered account through the in-app Delete My Account feature.
16. Contact
For privacy questions, account-deletion support, or other data-related requests, contact us at thathathottam@gmail.com.
17. Changes to this policy
We may update this Privacy Policy when the Pilot changes. The page will show the current “Last updated” date. Material changes should be reflected here before the related functionality is released.