Staunch Trainer Privacy Policy

We collect various types of personal and sensitive information to deliver our services effectively and in compliance with applicable laws:

a. Personal Information

• Full name
• Mobile number
• Email address
• Date of birth
• Address and location data
• Profile photo
• Bio and professional information
• Languages known
• Areas of expertise/categories

b. Identity Verification and Professional Information

• PAN number, name, and date of birth (for KYC verification)
• Aadhaar verification through OTP-based consent (we do NOT store Aadhaar numbers)
• Aadhaar-derived fields stored include name, gender, year of birth, address, and photo
• Police clearance certificate
• Work experience details
• Certification documents and images
• All KYC and bank account verification is performed securely through Sandbox API.

c. Media Uploads

• Profile images
• Introduction videos
• Testimonial videos
• Transformation videos
• Certification documents
• These are stored securely on our servers.

d. Service Delivery Information

• Location data
• Trainer availability slots
• Expertise categories

e. Bank Account Details

• Account holder name
• Account number
• IFSC code
• These are collected to process trainer payouts, verified through Sandbox APIs, and stored securely.

f. Device and App Usage Data

• Device type, OS version, IP address, crash reports, and usage data via Firebase Analytics and Firebase Crashlytics.

g. Login and Authentication

• Initial user sign-in is managed via Firebase Authentication using a mobile number or email
• Our backend generates authentication cookies for subsequent logins to maintain secure sessions
• Authentication tokens are stored securely and encrypted

h. Communication Data

• Firebase Cloud Messaging is used to send push notifications about sessions and important updates.

We use the information we collect for the following purposes:

• To register and manage your Trainer account
• To verify your identity and professional eligibility
• To process payouts and maintain financial records
• To facilitate communication with Clients through platform features
• To match you with appropriate clients based on your expertise, availability, and location
• To showcase your professional qualifications and transformation results
• To improve app functionality, performance, and support
• To notify you of updates, policy changes, or session information
• To comply with legal obligations including KYC norms

Under the DPDPA 2023, we process your personal data on the following legal grounds:

• Consent: When you provide explicit consent to process your data for specific purposes
• Legitimate Business Interests: Where processing is necessary for our legitimate business purposes
• Contractual Necessity: To fulfill our contractual obligations to you
• Legal Obligation: To comply with applicable laws and regulations

We do not sell or rent your personal information to third parties. We may share your data with:

• Government authorities as required by law
• Our trusted service providers (e.g., Firebase, AWS, Sandbox API) for technical operations
• Our internal staff for support, moderation, and quality assurance under strict confidentiality
• Potential clients (limited to your professional profile, expertise, availability, and public credentials)

We ensure that any third-party with whom your data is shared follows adequate data protection standards.

We take your data security seriously and implement technical and organizational measures to protect it:

• All sensitive and personal data is encrypted during transmission and at rest
• Verified KYC data and banking info are stored on secure servers with restricted access
• Authentication cookies and tokens are encrypted and securely stored
• Uploaded files (photos, videos, documents) are stored securely on our servers
• Regular audits and access control practices are implemented

We retain your information as long as your account is active or as necessary to fulfill legal, contractual, and operational requirements. If you request deletion or if your account becomes inactive, we may retain certain data for a reasonable period as required by law or for audit and dispute resolution purposes.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Information about data collection and processing
• Right to Access your personal data that we hold
• Right to Correction of inaccurate or incomplete data
• Right to Erasure of your personal data (with certain exceptions)
• Right to Withdraw Consent previously provided
• Right to Grievance Redressal through our designated officer

To exercise these rights, please contact our Data Protection Officer using the details provided in Section 12.

Please note that while we respect and uphold your rights, some data such as verified PAN or Aadhaar fields may not be editable for compliance reasons, and certain information may be retained as required by law even after account deletion.

The Staunch Trainer App is intended for users aged 18 and above. We do not knowingly collect data from individuals under the age of 18.

While the Trainer App does not use cookies directly, Firebase and third-party SDKs may use tracking technologies for analytics and crash monitoring purposes. These are used solely to improve service performance and stability. Our backend generates authentication cookies for maintaining secure sessions after initial Firebase authentication.

In compliance with DPDPA 2023, we implement the following measures:

• Regular security assessments and audits
• Staff training on data protection principles
• Documented data processing procedures
• Breach detection and notification protocols
• Restricted access to personal data based on need-to-know principles

We may update this Privacy Policy periodically to reflect changes in legal, regulatory, or operational requirements. We will notify you through the App or by email if significant changes are made. Continued use of the App after any updates constitutes your acceptance of the revised policy.

For questions, feedback, or to exercise your rights regarding your personal data, please contact our Data Protection Officer:

In the event of a data breach that may pose a risk to your rights and freedoms, we will notify you and the relevant authorities as required by law without undue delay.

Your data is primarily stored and processed in India. However, some of our service providers may process data outside India. In such cases, we ensure that appropriate safeguards are in place to protect your personal data in accordance with DPDPA requirements.

If you have any concerns or complaints about how we handle your personal data, you may:

1. Contact our Data Protection Officer using the details in Section 12
2. Submit a formal grievance, which will be acknowledged within 7 days
3. Receive a decision on your grievance within 30 days

If you are not satisfied with our response, you may escalate your concern to the Data Protection Board of India once established.

If you wish to permanently delete your Staunch Trainer account and associated personal data, you can submit a request using the form below. All verified requests will be reviewed and processed within 7 working days.

Submit Account Deletion Request

Please ensure the contact information you provide in the form matches your registered account details. Note that certain information may be retained for legal or regulatory purposes, as outlined in this Privacy Policy.