Your privacy on Hunar Circle

Hunar Circle is a free, manually-verified listing of skilled Dawoodi Bohra individuals and their businesses. This page explains what personal data we collect when you sign up or submit a profile, why we collect it, who can see it, and how you can exercise your rights under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

When you sign up and submit a profile, we collect:

• Your full name, photo, city and area or service area.
• Contact details: phone number, WhatsApp number, email, and ITS number.
• Profile details: your skill or business category, tags, bio, tagline, years of experience, and any portfolio, Instagram or LinkedIn links you add.
• If you also list a business: its own logo, tagline, description and WhatsApp number (kept separate from your personal number).

Your phone number, WhatsApp number and email are never public. They are never written into a page's HTML or returned by any public listing endpoint - a visitor only sees them after clicking to reveal contact details, a request we rate-limit to guard against bulk scraping. A business's WhatsApp number works the same way and is never mixed up with the owner's personal number.

Your ITS number is never public and is not even shown to you on your own profile screen - it exists only so an admin can confirm your community affiliation during manual review, on the internal review page.

This isn't just a promise: we have previously caught and reverted a change that briefly made email addresses bulk-readable through a public listing, precisely because contact details must stay behind the click-to-reveal flow.

Every photo you upload is re-encoded on our server before it's stored - this strips EXIF data, including any embedded GPS location, regardless of what your original file contained.

Your data is stored in Supabase (database and file storage), hosted on Firebase App Hosting. Photos, work samples and business logos live in storage areas that are readable only through the app; a separate, private storage area used to cache preview images is never directly accessible to visitors.

Every submission is reviewed by a person, not an automated system. A reviewer checks your photo and details, and may call or WhatsApp you to confirm them before approving your profile. Every review decision, and the reason for it, is kept in a permanent internal log so we can spot patterns over time. Your profile and any business you list are each reviewed independently.

We use PostHog to understand how the site is used - page views, contact-reveal clicks, and submission events. The events we send carry only internal record identifiers, never your name, phone number or email. Where we need a visitor identifier for a server-side event, we use a one-way, non-reversible hash of your IP address rather than the address itself. Like most analytics tools, PostHog also automatically records basic page-view and click activity in the browser, on its own default settings.

We use a session cookie to keep you signed in. We also set a few short-lived (six-hour), technical cookies that exist only to avoid double-counting your own private view and contact-click statistics - they don't track you across other sites and never gate what you can see or do.

• Google Places API - powers city autocomplete. Only the text you type is sent; never your name, phone number or profile.
• Resend - sends you transactional email, such as approval or rejection notices, and replies to messages you send us through the "Contact us" form. Your email address and name are also kept on a contact list held at Resend so we can send you occasional updates about Hunar Circle. Every update has an unsubscribe link.
• PostHog - analytics, described above.
• Firebase App Hosting - the infrastructure that runs and serves the site.

If a submission is rejected, we keep it (rather than delete it) so you can see the reason and fix it for resubmission. We don't yet offer a self-service way to delete your account - email us and we'll action a removal request by hand. If your account is removed, your profile and any businesses under it are deleted with it.

You can ask to access, correct or erase your personal data, or raise a grievance about how it's handled, at any time. Write to Tappstudio at tappstudio.in@gmail.com, or use our Contact & Grievance page. We aim to respond within 5-7 business days.

Hunar Circle is not directed at, or intended for, anyone under the age of 18.

If this policy changes, we'll update the "Last updated" date at the top of this page. At our current scale, we don't promise a separate notification for every change.