CATCH APP PRIVACY POLICY

CATCH Foundation ("CATCH Foundation", "CATCH", "we", "us", or "our") is committed to safeguarding the privacy, confidentiality, and security of information processed through its internal Project Management and Impact Tracking Application (the "Application" or "App"). This Privacy Policy sets out the manner in which information is collected, used, stored, disclosed, and protected when the Application is accessed by authorised users.

This Privacy Policy applies exclusively to the Application and all data processed within it. The Application is intended solely for internal organisational use and for controlled access by approved CSR partners and is not designed or made available for public or consumer use.

Access to the Application is restricted to authorised administrators, project and maintenance managers, on-ground team members, and approved CSR partners. Access rights and permissions are assigned and managed through role-based controls determined by CATCH Foundation and may be modified at any time to meet operational or security requirements.

In the course of operating the Application, CATCH Foundation may collect limited personal information such as name, email address, phone number, designation, role, and geographic or project assignment. Such information is collected strictly for the purposes of organisational coordination, task allocation, accountability, and communication and is not used for any unrelated or commercial purpose.

The Application also processes project and operational data, including project details, locations, phases, activity schedules, task assignments, progress updates, internal notes, review comments, approvals, and completion records. This data enables structured project execution, monitoring, and reporting across multiple locations and teams.

To ensure transparency, verification, and accountability of on-ground activities, the Application collects photographic and video evidence of activities along with associated metadata such as date, time, and, where enabled or required, location information. This evidence forms the basis for activity reviews, approvals, reporting to stakeholders, and audit trails and is essential to the integrity of the monitoring system.

The Application may automatically collect system and usage data, including login records, access timestamps, activity submission logs, and review or approval actions. Such data is used to maintain system security, ensure operational continuity, monitor performance, and support internal audits.

All information collected through the Application is processed solely for legitimate organisational purposes, including planning, executing, and monitoring plantation and maintenance projects, verifying on-ground work through evidence-based mechanisms, reducing reporting time, improving data accuracy, increasing transparency for stakeholders, supporting impact measurement, and enabling long-term analysis of outcomes. CATCH Foundation does not sell, rent, or commercially exploit any personal, project, or media data collected through the Application.

Information is processed on the basis of legitimate organisational interest, operational necessity, contractual obligations with partners, and compliance with applicable laws and regulations. By accessing or using the Application, users consent to such processing within the scope described in this Privacy Policy.

Access to information within the Application is limited to authorised CATCH Foundation personnel in accordance with their assigned roles. Approved CSR partners are provided restricted, view-only access to information relating solely to projects with which they are associated and do not have access to internal operational notes, personal staff data, or unrelated projects. Information may be shared with trusted third-party service providers solely for purposes such as secure hosting, data storage, backup, or technical support, subject to appropriate confidentiality and data protection obligations. Information may also be disclosed where required by law, regulation, court order, or governmental authority.

CATCH Foundation implements reasonable technical, administrative, and organisational safeguards to protect information processed through the Application, including secure authentication mechanisms, role-based access controls, controlled access to media and project data, and regular monitoring and backups. While every effort is made to protect information, no digital system is entirely secure, and users are responsible for maintaining the confidentiality of their login credentials and access devices.

Information is retained only for as long as necessary to fulfil project lifecycle requirements, maintenance and monitoring obligations, reporting and audit needs, and legal or regulatory compliance. Upon completion of projects, data may be archived for record-keeping, institutional memory, and impact reporting purposes.

All users of the Application are expected to provide accurate, truthful, and verifiable information, upload authentic and unaltered evidence of on-ground activities, use the Application only for authorised purposes, and maintain the confidentiality of their access credentials. Any misuse, misrepresentation, or manipulation of data may result in suspension or termination of access and may lead to disciplinary or legal action in accordance with applicable policies and laws.

The Application is not intended for use by individuals under the age of eighteen, and CATCH Foundation does not knowingly collect or process information relating to minors through the Application.

CATCH Foundation reserves the right to amend or update this Privacy Policy at any time to reflect changes in operations, legal requirements, or system functionality. Any such updates will be indicated by a revision to the "Last Updated" date. Continued use of the Application following such changes constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of information, users may contact CATCH Foundation at catchfoundations@gmail.com or at its registered office at 7, Madhav Plaza - 2, Opp. Kena Bunglows, near SBM Hospital, Motera, Ahmedabad, Gujarat, 380005.