Privacy Policy

Last updated: July 23, 2026

App name: RojiRoti Leaders
Operator: RojiRoty ("we", "us", "our")

This Privacy Policy describes how RojiRoty collects, uses, stores, shares, and protects personal information when you use the RojiRoti Leaders mobile application, our APIs, and related websites (including /privacy-policy and /terms-of-service). By using the app, you agree to this policy.

If you do not agree, please do not use the service.

1. Scope

This policy applies to:

The RojiRoti Leaders Android/iOS mobile app
Authenticated API services used by the app
Public pages hosted on our domain for legal and informational purposes

This policy does not cover third-party websites, app stores, or delivery platforms (such as Swiggy, Blinkit, or others) that may be referenced inside the app for referral or lead-tracking purposes. Those services have their own privacy policies.

2. Information We Collect

We collect only the information needed to operate referral, job discovery, wallet, and account features.

2.1 Information you provide

Category	Examples	Purpose
Account & identity	Mobile phone number, first name, last name	OTP login, account creation, profile
Profile	City, state, date of birth, profile photo	Onboarding, display in app, program eligibility
Referral data	Your referral code, referral code entered at signup	Attribution of referrals and rewards
Referral leads	Lead name, phone, city, state, date of birth, notes/metadata	Submitting contacts you refer to delivery/partner programs
Job interest	Job applications you submit	Connecting you with job opportunities listed in the app
Contacts (with permission)	Names and phone numbers you select from your address book	Pre-filling referral lead forms when you choose contacts in the app

2.2 Information collected automatically

Category	Examples	Purpose
Authentication & security	Login timestamps, API access tokens (stored securely), device fingerprint you submit, IP address at login	Fraud prevention, session security, abuse detection
App usage	Feature interactions necessary for service delivery	Reliability, support, and program integrity
Wallet & rewards	Earnings, milestone status, payout records	Operating the referral rewards program
Location (with permission)	Approximate or precise device location when you grant the Location permission	Auto-filling city/state, showing region-relevant jobs and referral content, and improving location-based features

If you deny Location permission, you can still use the app by entering city and state manually in your profile.

2.3 Device permissions (Android)

RojiRoti Leaders requests the following Android permissions. You can review and change them anytime in your device Settings → Apps → RojiRoti Leaders → Permissions.

Permission	Why we use it	Required?
Internet	Connect to our servers for login (OTP), profile, referrals, leads, wallet, jobs, and banners	Yes — the app cannot function without network access
Location	Suggest or auto-fill your city/state and show region-relevant program content	No — optional; you may enter location details manually
Contacts	Let you pick people from your address book when submitting referral leads	No — optional; you can type lead details manually
Notifications	Send alerts about OTP/login activity, referral lead updates, wallet credits, payouts, and important account messages	No — optional; core features work without push notifications
Wake Lock	Keep brief background work running (for example, finishing an API request or sync) when the screen turns off during active use	Yes — used only for short operations needed for app reliability

What we do not do with these permissions:

We do not upload your entire contact list. Only contacts you explicitly select in the app are used to create referral leads.
We do not track your location continuously in the background unless a feature you use requires it and your device OS allows it; location is used to support app features you request.
Wake Lock does not keep the app running indefinitely; it is used for short-lived tasks such as completing network requests.

You can deny optional permissions and still use core features where technically possible. Some features (such as contact picker or location auto-fill) will be unavailable if the related permission is denied.

2.4 Other data you may provide

Profile photo — if you choose to upload one through the app (via your device's file or photo picker, where supported by your OS without additional permissions)
Phone number for OTP — entered manually at login; we send OTP via SMS through our messaging provider

3. How We Use Your Information

We use personal information to:

Authenticate you via one-time password (OTP) sent to your mobile number
Create and manage your account and user profile
Operate the referral program, including tracking referrals, leads, conversions, and milestone rewards
Calculate and display wallet balances and transaction history
Process upline referral bonuses when eligible referred users generate qualifying lead conversions
Enable job listings and applications you choose to submit
Show in-app content such as promotional banners
Use location data (if permitted) to auto-fill or suggest city/state and show relevant regional content
Use contacts you select (if permitted) to help you submit referral leads faster
Send push notifications (if permitted) about account activity, referrals, and wallet updates
Prevent fraud, abuse, and policy violations
Comply with law, respond to lawful requests, and enforce our Terms of Service
Improve stability and security of our systems, including completing in-flight network requests reliably

We do not sell your personal information to third parties.

4. SMS and OTP (Third-Party Service Provider)

Login uses a one-time password (OTP) sent to your phone number. SMS delivery is handled through our configured SMS gateway provider (Nimbus IT or another provider we designate in admin settings).

When an OTP is sent, your phone number and the message content (including the OTP) are transmitted to that provider solely for delivery. We configure the provider in either:

Live mode — real SMS is sent, or
Dummy/test mode — no SMS is sent (typically non-production environments)

Please refer to the SMS provider's own privacy practices for how they process data on our behalf.

5. How We Share Information

We may share information only in these situations:

Recipient	What is shared	Why
Service providers	Phone number (OTP), hosting/infrastructure data, push notification delivery data	SMS delivery, cloud hosting, security, notifications
Legal & safety	Information required by law	Court orders, government requests, fraud investigation
Business transfers	As part of corporate transaction	Merger, acquisition, or asset sale (with notice where required)
With your direction	Contact and lead data you choose to submit	To operate the referral workflow you initiate

We do not share your information with delivery platforms for their independent marketing unless you separately engage with them outside our app.

6. Data Retention

We retain information for as long as necessary to:

Provide the service and maintain your account
Process referrals, leads, wallet credits, and audit trails
Meet legal, tax, and regulatory obligations
Resolve disputes and enforce agreements

Referral and wallet records may be retained in anonymized or de-identified form after account deletion where required for accounting, fraud prevention, or legal compliance.

7. Account Deletion (Google Play & User Rights)

You may delete your account from within the app (Google Play User Data policy requirement):

Open the account deletion option in the app (typically under Profile / Settings)
Confirm by entering DELETE when prompted
The app calls our API: DELETE /api/v1/user/account

You can also read step-by-step instructions on our public account deletion page: /delete-account (for example, https://leader.rojiroty.com/delete-account).

What happens when you delete your account:

Your active login sessions and API tokens are revoked immediately
Profile photo is removed from our storage
Personal fields such as name, phone number, city, state, and date of birth are cleared or anonymized
Your account is deactivated and soft-deleted
You will need to register again with your phone number if you return

What may be retained: anonymized transaction, referral, and lead records where retention is required for legal, tax, audit, or anti-fraud purposes. These records are no longer linked to identifiable profile data.

To request help with deletion or data access, contact us using the details in Section 12.

8. Your Rights and Choices

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023, where applicable), you may have the right to:

Access personal information we hold about you
Correct inaccurate profile information (via app profile settings)
Delete your account (in-app as described above)
Withdraw consent where processing is consent-based (including Location, Contacts, or Notifications permissions), by changing device permissions, disabling notifications, deleting your account, or contacting us
Lodge a complaint with a relevant data protection authority

We may need to verify your identity before fulfilling requests.

9. Children's Privacy

RojiRoti Leaders is intended for users who are at least 18 years of age and eligible to participate in referral and delivery-partner programs in India. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us data, contact us and we will take appropriate steps to delete it.

10. Security

We implement reasonable administrative, technical, and organizational measures to protect your information, including:

HTTPS encryption for API communication
Token-based authentication (Laravel Sanctum)
Access controls on administrative systems
Idempotent wallet operations to prevent duplicate payouts
Rate limiting on authentication endpoints

No method of transmission or storage is 100% secure. You are responsible for keeping your device and OTP confidential.

11. International Transfers

Our primary operations and data processing are intended for users in India. If data is processed outside India (for example, through cloud infrastructure), we take steps consistent with applicable law to protect your information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may be notified through the app or our website. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy questions, data requests, or account deletion assistance:

Email: support@rojiroty.com
In-app: Use the support or help option in RojiRoti Leaders (if available)
Web: Privacy Policy URL published on our Google Play store listing

We aim to respond to legitimate requests within a reasonable timeframe as required by applicable law.

This document is provided for transparency and Google Play compliance. It does not constitute legal advice.