1.1 Regulatory Scope

• 1.1.1 Statutory Governance: This policy governs the processing of personal and sensitive data across MeetUrNeed web domains, mobile portals, POS terminals, and school ERP interfaces in strict compliance with the DPDP Act, 2023, and the Information Technology Act, 2000.

1.2 Data Roles & Architectural Distinctions

• 1.2.1 Data Fiduciary: MeetUrNeed acts as a Data Fiduciary for consumer travel/rental bookings and merchant partner onboarding.
• 1.2.2 Data Processor: MeetUrNeed acts strictly as a Data Processor for student records, academic metrics, and canteen transactions managed on behalf of client educational institutions.

2.1 Consumer & Mobility Data

• 2.1.1 Contact & Identity: Full legal name, verified mobile number, email address, residential address, and emergency contact details.
• 2.1.2 Driving Credentials & Collateral: Driving Licence details and original government ID (Voter ID, Aadhaar, Passport) submitted as temporary rental collateral.
• 2.1.3 IoT Fleet Telematics: Real-time GPS location coordinates, road speed logs, acceleration patterns, and geofence boundary alerts.

2.2 Adventure & Extreme Sports Disclosures

• 2.2.1 Health Declarations: Self-declared medical records and passenger body weight for paragliding wing-loading safety checks.

2.3 Enterprise POS & Merchant Data

• 2.3.1 Commercial Profile: Trade name, business PAN, GSTIN registration, bank account settlement details, and real-time dining/order ticket records.

2.4 Educational SMS & Smart School Canteen Records

• 2.4.1 Student Profiles: Enrollment ID, name, grade/section, parent/guardian contact credentials, and daily attendance logs.
• 2.4.2 Canteen Wallet Transactions: RFID/NFC smart token serial numbers, itemized cafeteria purchases, and parent-defined spending caps or dietary allergen flags.

2.5 Mobile App Permissions

Our Android apps (MeetUrNeedBusiness, MeetUrNeedAdmin and MeetUrNeed) use the following on your device. Android asks your permission where it is required. None of them asks for your contacts or SMS, and none of them asks for device location.

• 2.5.1 Wi-Fi and Network: To run the offline order hub on a business's Wi-Fi, to check if the internet is working, to switch to mobile data when Wi-Fi stops, and to keep working offline until the connection returns.
• 2.5.2 Camera: To scan QR codes, supplier bills, product boxes and expiry dates, and to take photos you choose to upload. Only when you start it.
• 2.5.3 Microphone: For voice calls, such as between a hotel guest and the front desk. Only during a call.
• 2.5.4 Bluetooth and USB: To connect receipt and kitchen printers (MeetUrNeedBusiness).
• 2.5.5 Notifications and Background Running: To alert you about orders and tasks. A phone set as the hub keeps running and restarts after the phone restarts.
• 2.5.6 App Updates: To download new versions of the same app from meeturneed.com. You confirm before anything is installed.
• 2.5.7 Advertising: The customer app (MeetUrNeed) includes Google's advertising library so that AdSense ads can show on our pages. Google may use your device's advertising ID, which you can reset or delete in your Android settings.

2.6 AI Reading of Photos and Documents

Some features use artificial intelligence (Google's Gemini service) to read a photo or document so you do not have to type it. A photo is sent only when you or your staff take or upload it for that feature, and only for that one read. Google processes it for us as a service provider.

• 2.6.1 Business Licences: When a business uploads its licences (for example FSSAI, drug licence or school recognition), AI reads the licence type, number, name and expiry date to check them and to suggest the business's plan. A person at MeetUrNeed reviews the result. The owner's identity card (Aadhaar or other ID) and PAN card are never read by AI.
• 2.6.2 Bills, Boxes and Cheques: When a business photographs a supplier bill, a product box or a cheque, AI reads the items, prices, batch and expiry dates, or the cheque details. The business checks the result before it is saved.
• 2.6.3 Hotel Guest ID Cards: When a hotel scans a guest's ID card at check-in, AI reads the name, address and ID details to fill the guest register required by law. For Aadhaar cards, the first 8 of the 12 digits and the QR code are blacked out before the photo is saved. The photo is kept privately for the hotel only, not on any public page.
• 2.6.4 Dish and Product Descriptions: AI writes short descriptions from an item's name. No personal data is sent.
• 2.6.5 Your Choice: Every AI feature is optional. You can always type the details yourself instead.

2.7 Hotel Guests & Order Customers

• 2.7.1 Hotel Guests: Name, phone, address and the ID details the law requires at check-in, the dates of stay and the room bill. The property sees them; they are not shown on any public page.
• 2.7.2 Restaurant & Shop Orders: Name, phone number, the order, the kitchen note and how you paid. The restaurant or shop uses them for your order; the phone number also lets you track it.

3.1 DPDP Act Compliance for Students

• 3.1.1 Behavioral Profiling Ban: MeetUrNeed will never track, profile, or conduct behavioral monitoring of minors using school or canteen interfaces.
• 3.1.2 Zero Advertising Monetization: No student data, academic records, or canteen purchase histories will ever be sold, leased, or monetized for commercial advertising.
• 3.1.3 Institutional Consent: Participating educational institutions warrant that they have secured verifiable parental/guardian consent before entering student data into the system.

4.1 PCI-DSS Level 1 Payment Processing

• 4.1.1 Zero Card Storage: MeetUrNeed does not store raw credit/debit card numbers, CVVs, or net-banking credentials. Transactions are processed via RBI-authorized, PCI-DSS Level 1 compliant gateways using end-to-end tokenization.
• 4.1.2 Transport Encryption: All transactions and account sessions run over encrypted TLS 1.3 / SSL channels.

4.2 Data Retention & Deletion Schedules

• 4.2.1 Commercial Records: Booking invoices and transaction ledgers are retained for 7 years to satisfy statutory tax obligations.
• 4.2.2 GPS Telematics: Granular second-by-second telematics traces are purged after 90 days, retaining only summary trip metrics.
• 4.2.3 Institutional Data: Student records are scrubbed within 60 days following institutional contract termination.

5.1 User Privacy Rights

• 5.1.1 Access & Rectification: Users have the right to review, update, or request the erasure of personal profiles, subject to legal retention obligations.

5.2 Grievance Officer Contact Details