Privacy Notice

Dhaga Cycle is the data controller for the personal data described in this notice. This notice explains what we collect, why, who we share it with, and the rights you have.

Account data: your name and email address when you register, and your password (stored only in hashed form by our authentication provider — we never see or store plain passwords).

Profile data: your city and phone number, if you choose to add them.

Content you add: wardrobe items, garment photos and care-label scans, donation listings, NGO requirements and any notes you write.

NGO verification data: organisation name, registration number, contact person, contact phone and uploaded verification documents, where you apply for verification.

Usage data: which features you use (for example the number of scans performed), device and browser information, and your IP address, for security and fraud prevention.

To create and secure your account, and verify your email address.

To provide the service — your wardrobe, donations, scans and NGO matching.

To keep the service secure and prevent fraud and abuse.

To improve the product and respond to support requests.

Legal bases: performance of our contract with you, our legitimate interests in securing and improving the service, your consent where requested, and compliance with legal obligations.

Dhaga Cycle is free to use, so we take no payment details and share nothing with any payment provider.

Service providers who host our database, file storage, authentication and AI features, acting on our instructions.

Professional advisers and authorities where required by law. We do not sell your personal data.

We keep your data while your account is active. You can delete your account at any time from your Profile page — this permanently removes your wardrobe, listings, catalogue items, NGO verification records, uploaded documents and your profile, and deletes your login. Data we no longer need is deleted or anonymised.

You can access, correct or delete your data, restrict or object to processing, and withdraw consent. Under Indian law you may also raise a grievance with us about how your data is handled. To exercise any right, use the Profile page or contact us. We respond within 30 days.

We use encryption in transit and at rest, row-level access controls on every table, short-lived signed URLs for private files, and we validate your sign-in token on every protected request.

We use only essential storage needed to keep you signed in and keep the app working. We do not use advertising or cross-site tracking cookies.

If we change this notice we will update the date above. Questions about privacy? Reach us through the contact details in the app.