MyDistrict · Hebbale Technologies
Privacy notice
Version 3 · in force from 28 Oct 2026
Terms · Privacy · Community rules · Business listing agreement · Employer terms · Grievance officer
This notice explains what personal data Hebbale Technologies collects through MyDistrict, why, and the choices you have — as required by India's Digital Personal Data Protection Act, 2023 and its Rules. We collect only what each feature needs. We do not sell your data and we show no advertising based on it.
What we collect and why
| When you… | We collect | Used for |
|---|---|---|
| Create an account | Name, mobile number, PIN (stored only in scrambled form) | Logging you in; showing your name on what you post |
| Accept terms or agreements | Which document and version, date and time, network address and device | Proof of what was agreed, kept as described below |
| List a business | Business name, contact numbers, address, photos, prices, hours | Publishing your business page — this information is public |
| Post a job, offer, event, lost & found or review | What you write, photos, the contact number you give | Publishing it — public until it expires or you delete it |
| Book, order or enquire with a business | Name, mobile, date and details you enter | Passing your request to that business only |
| Apply for jobs | Your job profile and resume | Sharing with the employers you apply to — never public |
| Register as a blood donor | Name, blood group, area, mobile, last donation date | Helping patients find donors; your number is shown only if you choose |
| Request care for parents | Your and your parents' names, phones, address, the service | Arranging the service; seen only by the district team |
| Accept a quotation from a business | Your typed name, the time, network address and device | Proof of what you and the business agreed, kept with that business's record |
| Make an invitation | Names, date, venue, an optional contact number, and the replies guests send | Showing the invitation to people who have its link, and the replies to you — never listed or searchable |
| Reply to an invitation | Your name, how many people are coming, an optional wish | Passing your reply to the family who invited you |
| Buy on credit at a shop that keeps its khata here | Your name, mobile and the entries the shop records | The shop's own record; you can see the same record through the link the shop sends you |
| Report content or file a complaint | What you write; contact details for complaints | Acting on it and replying to you |
| Turn on alerts | Mobile number or device notification token, area, topics | Sending the alerts you chose |
| Tap "use my location" | Your approximate location, once | Finding your district — it is not stored |
| Visit any page | A session cookie and basic counts | Keeping you logged in, security, visitor counts for businesses |
We never ask for Aadhaar, PAN, bank or card details, and our system refuses posts that contain them.
Your consent and choices
We use your data only for the purposes above, with the consent you give when you use each feature, or where the law allows it without consent. You can withdraw consent at any time by deleting the item, turning off alerts, removing yourself from the donor list, or deleting your account.
Who can see it
- Public: business pages, posts, reviews and anything you choose to publish.
- The business you contact, and the employer you apply to.
- The district team and Hebbale Technologies staff, only as needed to run and check the service. Every admin action is logged.
- Service providers that help us run the service (hosting, and WhatsApp if you message us), under confidentiality.
- Authorities, only when Indian law requires it.
Where and how long it is kept
Data is stored on secured servers that may be located outside India. Connections are encrypted, PINs are stored scrambled and access is limited and logged.
- Account data: until you delete your account.
- Records of the terms and agreements you accepted: 7 years from acceptance, even after you delete your account, because they are evidence of the agreement if there is ever a dispute. They cannot be changed by anyone.
- Posts and offers: until they expire or are deleted; problem reports: 30 days.
- Invitations and every reply: deleted automatically 30 days after the function, or earlier when the family deletes it.
- A shop's khata entries: kept for the shop until it deletes them or its account; entries a shop removes stay visible, struck through, so both sides see the same record.
- Care requests: 2 years. WhatsApp message logs: about 1 year.
- Complaints and security logs: up to 3 years, and at least 1 year as the DPDP Rules require.
- Bookings and bills you made with a business stay with that business.
Your rights
- See and download your data: My District → Download my data. Your accepted agreements: My District → My agreements.
- Correct it: edit your profile, posts and business page, or ask us.
- Delete it: My District → Delete my account.
- Complain to our Grievance officer. If you are not satisfied you may approach the Data Protection Board of India.
- Nominate someone to exercise these rights if you die or cannot act — write to the Grievance officer.
Children
Accounts are only for people aged 18 or older. If you believe a child's information or photo is on MyDistrict, please tell us and we will remove it.
If something goes wrong
If there is a personal data breach we will inform the people affected and the Data Protection Board of India as the law requires.
Document fingerprint and earlier versions
The SHA-256 fingerprint proves this exact text. Each acceptance is recorded with the fingerprint of the version accepted.