1. Scope
This privacy policy applies to the BandhuWay mobile application for iPhone and Android, identified by bundle/application ID com.bandhuway.travelcontacts, and to the website at bandhuway.com.
2. Information we handle
Information you add to the app
You may add a profile name and contact methods, along with information about journeys and people you meet. Depending on what you choose to enter, this can include names, countries, dates, places, notes, birthdays, photos, social handles, phone numbers, email addresses, and encounter memories.
Sign-in information
On supported Apple devices, Sign in with Apple may provide a stable account identifier and, when you choose to share them, your name and email address. Apple may provide a private relay email address instead of your personal email. Authentication data is handled according to Apple’s terms and privacy practices. If cloud authentication is enabled for a release, Supabase may process authentication tokens and the related account identifier.
QR contact cards
When you create a BandhuWay QR card, it contains your name and only the contact fields you select. The information is encoded in the QR image itself. Anyone who scans the code can read and save those selected details.
Device permissions
BandhuWay asks for camera access when you choose to scan a QR card. If photo selection is available, the operating system’s picker may be used when you choose an image. BandhuWay does not automatically import your device address book.
Website information
This website does not include an advertising tracker or a contact form. Its hosting provider may process standard technical request data such as IP address, browser type, requested page, and request time for security, reliability, and delivery.
3. How information is used
Information is used to provide the features you choose, including creating your profile, organizing people by journey, displaying saved details and notes, searching and favoriting records, generating or scanning QR cards, restoring authentication, troubleshooting, protecting the service, and responding to support or deletion requests.
4. Local and optional cloud storage
BandhuWay uses a local database as the primary source for the app experience, allowing core journal and QR features to work without a continuous internet connection. If a release enables cloud services, account authentication and permitted synced data may be processed by our service provider under access controls tied to the signed-in account. The app will not claim cloud backup unless that feature is active in the version you use.
5. When information is shared
We do not sell your personal information. Information may be disclosed only in these circumstances:
- At your direction: details you select are shared when another person scans your QR card or when you use a device sharing action.
- Service providers: Apple may handle sign-in, Supabase may provide authentication or optional cloud infrastructure, and Vercel hosts this website. These providers process information to deliver their services.
- Legal and safety reasons: information may be disclosed when reasonably necessary to comply with law, enforce applicable terms, or protect users, the public, or the service.
- Business changes: information may be transferred as part of a merger, acquisition, financing, reorganization, or sale, subject to applicable law and notice requirements.
6. Retention and deletion
Local app records remain on your device until you delete them, clear the app’s storage, or uninstall the app. Signing out does not automatically remove locally saved journeys or contacts. Authentication and support records are retained only as long as reasonably needed for the purpose for which they were collected, security, dispute resolution, or legal obligations.
For instructions and an account-deletion request channel, visit Delete your BandhuWay data.
7. Security
We use reasonable technical and organizational safeguards appropriate to the information handled. No device, transmission method, or storage system can be guaranteed completely secure. Protect your device and share QR cards only with people you intend to receive the selected details.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to receive a portable copy of information. You can edit or delete individual local records in the app where those controls are available, manage camera permission in device settings, revoke Sign in with Apple access through your Apple account, and request account deletion through our deletion page.
9. Children
BandhuWay is not directed to children under 13, or the higher minimum age required in their country. We do not knowingly collect personal information from children below the applicable minimum age. Contact us if you believe a child has provided such information.
10. International processing
Service providers may process information in countries other than where you live. Where required, appropriate safeguards are used for international transfers.
11. Changes to this policy
We may update this policy as the app changes or legal requirements evolve. The effective date above will be revised, and material changes will be communicated through the app, website, or another appropriate channel.
12. Contact
Questions, privacy requests, and concerns can be sent to support@bandhuway.com. Include enough information to understand your request, but do not email passwords, private keys, or another person’s sensitive contact information.