1. INFORMATION COLLECTED AND MANNER OF COLLECTION
When you register on the App, the following information is collected from you and stored securely on the cloud – (i) name; (ii) phone number; (iii) age; (iv) sex; (v) profession; (vi) countries visited in the last 30 days; and (vii) whether or not you are a smoker.
When your mobile or handheld device on which the App is active with mobile, Bluetooth and GPS services turned on, comes within range of another such mobile or handheld device, the App collects from such other device the personal information of the registered user of that device along with the time and your exact GPS location where you came in contact with that person. The App continuously collects your location data and maintains a record of the placeswhere you have come in contact with other registered users.
2. USE OF INFORMATION
The personal information collected from or about you under Clause 1(a) above, will be stored locally in the App on your device and will only be uploaded to and used by the Government of India (i) in anonymized, aggregated datasets for the purpose of generating reports, heat maps and other statistical visualisations for the purpose of the management of COVID-19 in the country and/or (ii) in the event you have tested positive for COVID-19 or have come in close contact with any person who has tested COVID-19 positive. Any personal information uploaded to the cloud will only be used for the purpose of informing you, or those you have come in contact with, of possible infection. Such personal information may also be shared with such other necessary and relevant persons as may be required in order to carry out necessary medical and administrative interventions.
The mobile number that you provide at the time of registration may be used to communicate with you through SMS, IVR, push notifications or other such means to inform you that you have come in close contact with someone who has tested positive for COVID-19 and to provide you such other notifications pertaining to COVID-19 as may be required.
The personal information collected will not be used for any purpose other than those mentioned in this Clause 2 save as required in order to comply with a legal requirement.
All information provided at the time of registration will be retained for as long as your account remains in existence and for such period thereafter as required for the purposes for which the information may lawfully be used or is otherwise required under any other law for the time being in force.
Location information of registered users with whom you have come in contact will be retained for a period of 30 days from the date of such contact after which, if neither you nor such other registered user has tested positive for COVID-19 during such 30 day period, shall be purged from the App.
Nothing set out herein shall apply to the anonymized, aggregated datasets generated by the personal data of registered users of the App or any reports, heat maps or other visualization created using such datasets.
As a registered user, you have the right to access your profile at any time to add, remove or modify any information that you have supplied.
You cannot manage the communications that you receive from us or how you receive them. Ifyou no longer wish to receive communications from us, you may cancel your registration. If you cancel your registration, all the information you had provided to us will be deleted after the expiry of 30 days from the date of such termination.
5. DATA SECURITY
The App is equipped with standard security features to protect the confidentiality and security of your information. Data is encrypted in transit as well as at rest. Personal information provided at the time of registration is encrypted before being uploaded to the cloud where it is stored in a secure encrypted server. Personal information that is stored in the Apps of other registered users that you come in contact with is securely encrypted and are incapable of being accessed by such user.
6. DISCLOSURES AND TRANSFER
Save as otherwise set out in Clause 2(a) in order to carry out necessary medical and administrative interventions, no personal information collected by the App will disclosed or transferred to any third party.
Mr. R S Mani, Deputy Director General (DDG) NIC (email@example.com)