Privacy Policy

Jagraaj — messaging, calls, and an optional workforce module.

Applies to the Jagraaj Android app (com.jagraaj.app) and jagraaj.com · Last updated 10 September 2026

Who this policy is from

Jagraaj is made by Rana Sikander Singh, Raipur, Chhattisgarh, India. Questions about this policy or your data: viratmahanagar@gmail.com.

What the app is

Jagraaj is a private messaging app for individuals and small businesses. People chat, make voice and video calls, share photos and videos, and post to a personal feed. Businesses can additionally use an optional workforce module for field staff: team check-in, shift attendance and payroll.

Information we collect

Account — your name, username, email address and, if you set one, a profile photo. If you sign in with Google we receive your email address, display name and profile picture URL; Google's own sheet handles your password and we never see it.
Content you create — messages, photos, videos, voice notes, documents, status posts and notes, stored so they can be delivered and shown back to you.
Contacts within the app — the friends and groups you add inside Jagraaj. We do not read your phone's contact list.
Technical data — a session cookie or app token to keep you signed in, the device model and app version for delivering notifications and diagnosing faults, and IP address at the time of a request.
Location — only as described in the next section.

Location data — what we collect and why

Jagraaj collects location data for two separate, optional features. Neither is on by default, and neither is used for advertising or analytics.

1. Employee shift attendance (background location)

This feature collects location in the background — that is, while the app is closed or not in use. It is used only by workers whose employer has added them to a team and sent them a personal check-in link.

Collection starts only when the worker taps Check In, and only after they accept an on-screen disclosure explaining exactly this.
While checked in, the app records the device's location approximately every 30 minutes and sends it to that worker's employer, so the employer can confirm staff were at the assigned work site during the shift.
A permanent notification stays visible for as long as tracking is running.
Collection stops automatically when the worker taps Check Out, and can be stopped at any time by checking out or revoking the permission in Android Settings.
Each record contains the location, its accuracy, the time, the distance from the employer's registered work site, and (if the employer requires photo proof) a photo the worker takes at check-in.
People who have not been added to a team by an employer never use this feature, and the app never requests background location from them.

2. Sharing your location with a friend (foreground only)

Separately, you can share your location with individual friends from a chat. This is off by default, you control it per friend, it is one-directional (sharing with someone does not reveal their location to you), and only your most recent point is stored. You can delete your stored location or turn the master switch off at any time. This feature does not use background location.

Who receives location data

Attendance location is shared with the employer who added that worker to their team, and with nobody else. Friend location is shared with the specific friends you choose. Location is never sold, rented, shared with advertisers or data brokers, or used to build advertising profiles.

How we use your information

To deliver your messages, calls and media to the people you send them to.
To show you your own content, chats and history.
To send notifications you have asked for.
To confirm shift attendance, for employers using the workforce module.
To keep accounts secure — detecting abuse, blocking and rate-limiting.

We do not use your content or location to show advertising. Jagraaj contains no advertising SDKs and no third-party analytics or tracking software.

Sharing and disclosure

We share limited data with providers that help us run the service:

Google — optional "Sign in with Google", and push notification delivery.
Email provider — to deliver verification and password-reset emails.
Hosting — our servers store your account, content and media.

These providers process data only to provide their service to us. We otherwise disclose personal data only where required by law.

Permissions the app asks for

Permission	Why
Camera	Taking photos and video, video calls, scanning QR codes, and attendance photo proof.
Microphone	Voice notes and voice/video calls.
Photos and media	Attaching images and videos you choose. The app receives only what you pick.
Location (foreground)	Sharing your location with a friend; recording a check-in.
Location (background)	Shift attendance only, as described above.
Notifications	Delivering messages and incoming call alerts.
Biometrics	Optional app lock, verified on your device only.

Every permission can be revoked in Android Settings. Revoking one disables the feature that needs it; the rest of the app keeps working.

Data retention and deleting your data

Content is kept until you delete it or delete your account. Stored location points are overwritten by the next one, and attendance records are retained by the employer for their payroll and attendance purposes.

You can delete your account from within the app (Settings → Account), which removes your profile, messages, media and stored location from our servers. You can also request deletion by emailing viratmahanagar@gmail.com.

How we protect your data

These are the practices we apply to all personal and sensitive user data — including messages, media, account details and location — whether it is in transit or at rest.

Encrypted in transit. Every connection between the app and our servers uses HTTPS (TLS). This covers sign-in, messages, calls signalling, media uploads and downloads, and location reports. The app makes no plain-text HTTP requests.
Passwords are never stored in readable form. They are kept only as bcrypt hashes, which cannot be reversed. If you sign in with Google, your password is handled by Google and never reaches us at all.
Access is restricted to the people you send data to. Every request is checked against your account before any content is returned. Messages and media are released only to the sender, the recipient, or the audience you selected for a post.
Media files are not publicly guessable. Photos, videos and voice notes are served through signed, expiring links rather than open URLs, so a file cannot be reached by guessing an address.
Sessions are protected and revocable. Sign-in cookies are HttpOnly, Secure and same-site, so other websites and scripts cannot read them. You can see every signed-in device and revoke any of them from the app's Active devices screen.
Servers are access-controlled. Data is stored on servers we operate, reachable only over key-based administrative access. Administrative access is limited to the operator named in this policy and is used only to run, repair and support the service, or where the law requires it. We do not browse user content.
We collect as little as we can. Jagraaj contains no advertising SDKs and no third-party analytics or tracking software. We do not sell, rent or trade personal data, and we do not use your content or location to build advertising profiles.
Deletion is real deletion. When you delete content or your account, the records and the underlying media files are removed from our servers, not merely hidden.
If something goes wrong. If a security incident affects your personal data we will investigate it, close the cause, and notify affected users — and the relevant authorities — where the law requires us to.

Children

Jagraaj is not intended for children under 13, and they may not create an account. Accounts for ages 13–17 require verifiable parental consent before they activate, and minors' presence and last-seen information is hidden.

Your rights

You can access, correct, export or delete your personal data. Contact us at the address below and we will respond within a reasonable period.

Changes to this policy

If this policy changes materially we will update the date at the top of this page and, where appropriate, notify you in the app.

Contact

Rana Sikander Singh · Raipur, Chhattisgarh, India · viratmahanagar@gmail.com

Other apps

This policy covers the Jagraaj app (com.jagraaj.app) and jagraaj.com. The privacy policy for our separate app ShootAndRule is at jagraaj.com/privacy/shootandrule.