Privacy Policy

2. Key Definitions

• "Platform" — the complete Brujo digital ecosystem: the mobile app, website, admin dashboards, APIs, backend infrastructure, support systems, and future Brujo digital products.
• "Services" — all features offered through the Platform, including trip discovery and booking, seat reservation, recommendations, QR-based ticketing and boarding, live trip tracking, payments, notifications, reviews, account management, and customer support.
• "Trip" — any travel experience, pilgrimage, tour, or journey listed or managed through the Platform by an Organizer.
• "Booking" — a confirmed reservation for a Trip, which may include seat allocation, payment confirmation, a booking reference, a digital ticket, and a QR boarding credential.
• "QR Code" — the unique boarding credential issued for each confirmed Booking. It is personal to the registered traveller and must not be copied, altered, transferred, or misused.
• "Personal Information" — any information that identifies or can reasonably identify you, such as name, email address, mobile number, profile photo, date of birth or age, gender, payment references, booking history, device identifiers, location data, and preferences. It excludes anonymized or aggregated data that cannot reasonably identify an individual.
• "Third-Party Services" — external providers integrated into the Platform (payment gateways, authentication, mapping, analytics, communications, cloud storage, and similar).

3. Information We Collect

• We collect only what is needed to provide, secure, and improve the Services, comply with legal obligations, and prevent fraud. What we collect depends on how you use the Platform and the permissions you grant:
• Account and profile — name, email address, mobile number, encrypted password, gender, date of birth or age, profile photo (if uploaded), booking history, preferences, support communications, and feedback, ratings, and reviews. Trip Organizers may additionally provide identity verification information for compliance and fraud prevention.
• Preferences — preferred language, travel interests, search history, favourite destinations, and notification settings. Religious preference is entirely optional: it is used solely to personalize trip recommendations, never to discriminate or restrict access, and you can change or remove it (or view all trips unfiltered) at any time in your account settings.
• Device information (automatic) — operating system and version, app version, device identifiers, language and time zone, network information, IP address, crash logs, and performance diagnostics, used for stability, compatibility, and security.
• Location — with your explicit permission, precise or approximate location used for nearby trips and organizers, live trip tracking, navigation, boarding verification, and safety features. You can change location access at any time in device settings; location-dependent features may then stop working.
• Payments — limited references only: transaction ID, payment status and timestamp, payment method, booking reference, and refund status. We never store card numbers, CVV, UPI PINs, or banking credentials — sensitive payment data goes directly to the payment gateway over encrypted channels.
• Usage (automatic) — login and session activity, in-app usage, search and booking activity, error and security logs, and fraud-detection signals. We track in-app activity only, to improve recommendations, performance, and security.

4. How We Use Personal Information

• We process Personal Information only for legitimate business purposes:
• Providing the Services — account creation and authentication, processing bookings and reservations, issuing confirmations, digital tickets, and QR boarding credentials, managing cancellations, modifications, and refunds, live trip tracking, and customer support.
• Payments — verifying and processing transactions through authorized payment providers, generating invoices and receipts, processing refunds, maintaining transaction records, preventing duplicate or fraudulent transactions, and resolving disputes.
• Essential communications — account verification, booking confirmations, trip reminders, boarding notifications, refund and cancellation updates, security alerts, and policy changes. These are part of the Service and continue even if you opt out of promotional messages.
• Personalization — relevant trips, nearby organizers, remembered preferences, and better search results. Personalization never affects equal access to the Services.
• Analytics and improvement — monitoring performance, fixing bugs, and improving features; analytics data is aggregated or anonymized where reasonably possible.
• Security and fraud prevention — verifying identity, detecting suspicious activity, preventing unauthorized access and duplicate accounts, and enforcing our Terms of Service.
• Marketing — with your consent and subject to law, offers, product updates, and surveys. Opt out anytime via account settings or the unsubscribe link; transactional and security notifications are unaffected.
• Legal compliance — meeting tax, accounting, and regulatory obligations, responding to lawful requests, enforcing contractual rights, and protecting the rights, property, and safety of users and Brujo.

5. App Permissions

• The app requests device permissions only when a feature needs them, and uses them solely as described below. You can deny or revoke any permission in device settings; the related feature may then be limited.
• Storage — temporary files, map cache, and uploads (photos, documents, trip images). We do not access unrelated personal files.
• Camera — profile photos, media reviews, and QR scanning (boarding and supported payments). Activated only when you initiate it.
• Photos and media — only the files you select for upload; we never scan or monitor your library.
• Location — nearby trips and offers, navigation, live tracking, boarding verification, and safety features.
• Contacts — only if granted, for referrals, invitations, and trip sharing you initiate.
• Phone — to call Brujo support from the app; calls are not recorded or monitored.
• Calendar — to add confirmed bookings to your calendar, only after your interaction.
• Identity information — where the OS supports it, limited account details to simplify registration and autofill.

6. Sign-In, OTP, and Notifications

• Google Sign-In — if you sign in with Google, we receive only your name, email address, and profile picture (where permitted), the minimum needed to authenticate you. We do not access Gmail, Drive, Contacts, Calendar, or other Google services without separate consent.
• OTP verification — one-time passwords sent by email are used for registration and sensitive account actions, and are valid for a limited period. Never share an OTP with anyone; Brujo will never ask for one through unsolicited calls, emails, or messages.
• Notifications — with your consent, we send push and email notifications for booking and payment confirmations, trip reminders and live updates, cancellation and refund status, security alerts, and product updates.

7. Sharing and Third-Party Services

• Brujo does not sell, rent, or trade Personal Information to third parties for their own marketing. We share information only where necessary to operate the Platform, comply with the law, or protect users. Trusted providers receive only what they need to perform their function, are contractually required to protect it, and process it under their own privacy policies and applicable security standards:
• Google Sign-In — authentication and secure login.
• Razorpay — payment processing, refunds, settlement, and transaction verification (PCI DSS compliant where applicable). Payment details are transmitted directly to Razorpay over encrypted channels; Brujo retains only limited references (and at most the last four digits of a card) for support, reconciliation, and disputes.
• Google Maps Platform and Places API — trip locations, navigation, live tracking, place search, and route display. Location is shared only when needed for these features and only after you grant permission.
• Cloudinary — secure storage of uploaded images and, where applicable, identity verification documents.
• Firebase — analytics, crash reporting, performance monitoring, and push notifications (FCM). Firebase receives only technical data needed for these services.
• Email service providers — verification, OTP delivery, booking confirmations, and support communications.
• Other carefully vetted SDKs supporting authentication, security, communications, or media — each limited to authorized purposes.

7.1 Legal Disclosure and Business Transfers

• We may disclose Personal Information where required or permitted by law — to comply with regulations, valid court orders, or lawful requests from government, law-enforcement, or regulatory authorities; to investigate fraud or unlawful activity; to enforce our Terms of Service; or to establish, exercise, or defend legal claims and protect the rights, safety, and property of users, the public, or Brujo. We review each request and disclose only what is reasonably necessary, and where legally permitted we may notify affected users first.
• If Brujo undergoes a merger, acquisition, restructuring, financing, or sale of assets, Personal Information may be transferred to the successor entity, subject to applicable legal requirements.

8. Data Retention and Account Deletion

• We keep Personal Information only as long as needed for the purposes in this Policy, legal compliance, dispute resolution, and fraud prevention. When retention is no longer necessary, information is securely deleted, anonymized, or irreversibly de-identified.
• You may request account deletion or deactivation at any time through the Platform's account settings, at brujo.in/delete-account, or via Customer Support. Deactivation temporarily disables access while allowing recovery; deletion permanently removes information that is no longer required. Brujo may also suspend or terminate accounts that violate our Terms of Service, commit fraud, or harm other users — with or without notice depending on severity.
• Some records survive deletion where the law requires it:
• Booking history and payment records — retained as required by tax, accounting, and financial regulations, or the applicable legal limitation period.
• Support records and security/authentication logs — retained for a reasonable period for quality assurance, audits, fraud prevention, and investigations.
• Analytics — retained only in aggregated or anonymized form where reasonably practicable.
• Organizer identity verification records — retained only as long as regulatory obligations require.
• Public reviews and ratings may remain visible to preserve Platform integrity, anonymized where technically feasible.
• Brujo does not store, and is not responsible for, personal data or data loss connected with third-party services you choose to use outside our Platform.

9. Security

• We protect Personal Information with technical, administrative, and organizational safeguards that are reviewed and updated against evolving threats:
• In transit — all communication between the app, our backend, and authorized providers is encrypted (HTTPS/TLS), covering login, OTP, bookings, QR tickets, payments, tracking, and support.
• At rest — encryption, logical access controls, secure database configuration, and backup and disaster-recovery procedures appropriate to the data.
• Passwords — never stored in plain text; hashed with bcrypt. No Brujo employee can retrieve your original password.
• Payments — processed exclusively by authorized gateways over encrypted channels; Brujo never stores full card numbers, CVV, UPI PINs, or banking credentials.
• Infrastructure — firewalls, secure hosting, monitoring and security logging, rate limiting, fraud detection, vulnerability management, and patching.
• People and process — role-based access limited to staff with a legitimate need, confidentiality obligations, periodic access reviews, vendor security assessments, and a security-incident procedure: investigate, contain, remediate, notify affected users where required by law, and cooperate with authorities.

9.1 Your Role and Our Limits

• Please keep your credentials confidential, never share OTPs, secure your device (screen lock or biometrics), install updates promptly, and tell us immediately if you suspect unauthorized activity. Brujo is not responsible for unauthorized access caused by a failure to protect your own credentials or device.
• No method of electronic transmission or storage is completely secure. While we apply industry-recognized safeguards, we cannot guarantee absolute security, and you acknowledge the inherent risks of internet-based services.

10. Your Rights

• Subject to applicable law, you may request any of the following by contacting us (we may first verify your identity):
• Access — confirmation of what Personal Information we hold about you.
• Correction — updating inaccurate or outdated information (most profile details can be edited directly in account settings).
• Deletion — removal of your Personal Information, subject to the legal retention obligations described in Section 8.
• Restriction and objection — where permitted by law, limiting certain processing or objecting to processing based on legitimate interests, including direct marketing.
• Withdrawal of consent — at any time, without affecting prior processing; some consent-based Services may then become unavailable.
• Data portability — where applicable and technically feasible, a copy of certain information in a structured, machine-readable format.

11. Children's Privacy

• You must generally be at least 18 to create an Organizer account, make bookings, or complete financial transactions. Individuals aged 13–18 may use certain features only with the involvement and consent of a parent or legal guardian, where the law permits.
• Brujo does not knowingly collect Personal Information from children in violation of applicable law. If we learn that a child's information was collected without required consent, we will delete it or otherwise comply with the law. Parents or guardians can contact us using the details below.

12. Changes to this Policy

We may update this Policy to reflect changes in our Services, technology, law, or privacy practices. Material updates are published on the Platform with a revised "Last Updated" date, and — where required by law or where changes materially affect processing — notified by email, push, or in-app notice. Continued use of the Platform after an update takes effect constitutes acceptance; if you disagree, discontinue use or request account deletion.

13. Contact Us

• For any question, request, or complaint about this Policy or your Personal Information — including access, correction, deletion, consent withdrawal, or reporting a suspected security incident — email official@brujo.in. We will respond to legitimate requests within a reasonable timeframe, subject to identity verification and applicable law.
• Grievance Officer: to be announced · Email: official@brujo.in · Phone: to be announced. A complaint is acknowledged within 48 hours and resolved within one month of receipt; you can also raise it in the app under Help → Write to us → Grievance.
• The Platform is operated by Brujo, to be announced.
• Effective Date: 10 July 2026 · Version 1. Any revised version supersedes previous versions from its stated effective date.