Effective date: 2026-04-21 Last updated: 2026-07-28

Kattutharai (“we,” “us,” “our”) operates the Kattutharai mobile app (the “App”) which helps Tamil Nadu farmers buy and sell livestock directly. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

Our target audience is farmers and livestock buyers in Tamil Nadu, India. If you do not agree with this policy, please do not use the App.

1. Information we collect

1.1 You provide directly

Mobile phone number — used for OTP-based login and to let buyers contact sellers through chat, call, and WhatsApp.
Name — shown on your profile and on listings you create.
District and taluk — used to show your listings to nearby buyers.
Photos of livestock — uploaded to your listings.
Description, breed, age, weight, and price of listings you post.
Messages you exchange with other users in the chat.
Payment details for boost plans — collected and processed by Cashfree; we do not store card or bank information ourselves.

1.2 Collected automatically

Approximate and precise device location — used with your permission to show nearby listings and to help you set the location of a listing you’re creating.
Device-level diagnostic data — crash reports, error stack traces, and session metadata (app version, OS version, device model) used to debug and improve the App. We use Sentry for crash reporting.
App usage metadata — timestamps of listing views, favorites, and boost purchases, used to rank listings and fight abuse.
Usage events — we log which listings you see, tap, favorite, search for, and chat about, along with how long you spend on a listing, plus which screens you visit and how far you get through signing up, posting a listing, or buying a boost. These events carry your account ID, the listing ID, a rotating session ID, and non-identifying context (app version, platform, OS version). We do not log message content, phone numbers, or free text other than the search terms you type. These events are used to recommend livestock that matches your interest and to improve the feed for everyone.
Advertising identifier (Android only) — your device's Google Advertising ID, used only to measure whether people who install the App after seeing one of our ads go on to use it. You can reset or delete it at any time in Android Settings → Privacy → Ads. On iPhone and iPad we do not collect an advertising identifier at all, and the App never shows the "Allow tracking" prompt.

We do not collect contacts, browsing history outside the App, precise location in the background, microphone input, or health data. We do not track you across other companies' apps or websites.

2. How we use your information

To show nearby livestock listings based on your location.
To let buyers and sellers contact each other directly.
To verify your identity through phone-number OTP at login.
To operate paid boost features for sellers (via Cashfree).
To send you notifications about your chats, listings, and account.
To investigate abuse, fraud, and policy violations.
To debug crashes and improve the App’s reliability.
To understand how the App is used — which features help and where people get stuck — so we can improve it.
To measure our own advertising: whether someone who saw an ad for Kattutharai installed it and went on to post or find livestock.

We do not sell your personal information. We do not show ads inside the App, and we do not use your information to target ads at you on other services. We do share app-usage events with the analytics partners in §3 so we can measure how well the App and our own ads are working.

You can turn this off. Profile → Settings → Share usage data stops us sending anything to those partners. The App keeps recording what you view on our own servers, because that is what personalises your feed (§1.2).

3. Who we share it with

Processor	Purpose	Data shared
Supabase	Authentication, database, storage	Phone, profile, listings, chats, photos
Cashfree	Boost-plan payments	Name, phone, payment amount, order ID
Sentry	Crash & error reporting	Device model, OS version, app version, error stack (no PII)
Expo / EAS	App builds and over-the-air updates	App binaries; no user data
Google (Firebase)	Phone-number OTP login, push notification delivery, and app analytics	Phone number (login only), a pseudonymous app-instance ID, screen and feature-usage events, device and app version
Meta Platforms (Android only)	Measuring whether our own ads lead to installs and listings	Google Advertising ID, a pseudonymous user ID, and a small set of app events (signed up, listing posted, boost purchased, contacted a seller)

Each processor acts under a data-processing agreement with us and stores data in India or the nearest available region. We do not share your personal data with any other third parties except when required by law (court order, legal process, or enforcement request).

4. How long we keep it

Listings, chat messages, favorites, and profile: until you delete them, or for 30 days after you delete your account (then permanently removed from backups).
Usage events (views, clicks, favorites, chats, searches) on our own servers: 90 days. Your events are permanently deleted when you delete your account, except for a small set of ranking records that we keep for up to 30 days with your account identifier removed, so they can no longer be linked to you.
Usage events held by Google (Firebase Analytics): 14 months, then automatically deleted by Google.
App events held by Meta: per Meta's own retention policy for advertising measurement.
Crash/diagnostic data: 90 days.
Payment records: 7 years, as required by Indian tax law.
Registration details after you delete your account: 180 days. Indian law (Rule 3(1)(h) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021) requires us to keep the details you registered with — your phone number, email, name, district and taluk, and the dates you joined and left — for 180 days after you close your account. They are then deleted automatically.
Deleted listings, and the listings of a deleted account: 180 days. When a listing is permanently deleted — either because you deleted it and the 5-day restore window passed, or because you deleted your whole account — we keep a copy of what the listing said (category, breed, age, weight, price, description, district and taluk) together with its photos and video for 180 days, then delete them automatically. We do not keep the listing's precise GPS location. Why we keep this at all: it is the only way we can act on a complaint about a listing that arrives after it was taken down — a report of a scam, or a lawful request from the police. Nobody can browse or search this copy; it is not visible in the app or on our website. Your chats and messages are not kept — those are removed straight away.
Reports of abuse: kept after the account or listing they concern is deleted. If someone reports a listing or a person for a scam, spam or a fake account, we keep that report and a copy of what was reported. This is how we act on abuse and stop it repeating, and it is not something a person can erase by deleting what they posted. Such a report holds no phone number. It can only be connected back to a named person during the 180-day window above; after that it stays as a record of what was posted, with no way to identify who posted it.

5. Your rights

You can:

View and edit your profile at any time in the Profile tab.
Delete an individual listing from My Listings → Edit → Delete.
Delete your entire account from Profile → Delete account. This permanently removes your profile, all your listings, favorites, chats and photos from our active systems, and nobody can see any of it again. Residual backups are purged within 30 days. Three things are kept, and only these: the registration details Indian law requires us to hold for 180 days; a copy of your listings and their photos, also for 180 days, so that a complaint arriving after the fact can still be investigated; and any report of abuse made against you. All three are described in section 4. Your chats and messages are not among them.
Export a copy of your data on request to the email below.
Correct inaccurate data by editing your profile, or by writing to us.
Withdraw location consent at any time from your device settings (iOS: Settings → Privacy → Location; Android: Settings → Apps → Kattutharai → Permissions).
Stop sharing usage data with our analytics partners at any time: Profile → Settings → Share usage data. Turning it off also clears the analytics identifiers already stored on your device.
Reset your advertising ID (Android): Settings → Privacy → Ads → Delete advertising ID.

6. Children

The App is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has registered, contact us and we will remove the account.

7. Security

All traffic between the App and our servers uses HTTPS.
Phone-number OTPs are time-limited and verified server-side.
Payment verification uses HMAC-SHA256 signatures — we never trust client-claimed successful payments.
Row-level security (RLS) policies in our database restrict access to only your own data.
Access to production systems is limited to the project owner and is gated behind key-based authentication.

No system is fully immune to breach. If a data breach occurs and affects you, we will notify you within 72 hours of discovery.

8. Changes to this policy

We may update this policy as the App evolves. Material changes will be announced in-app and by updating the “Last updated” date above. Continued use of the App after a change constitutes acceptance.

9. Contact

Questions, complaints, data-access requests, deletion confirmations:

Email: support@kattutharai.com Address: Coimbatore, Tamil Nadu, India

For Grievance Officer (as required under the IT Act, 2000 and DPDP Act, 2023):

Name: Suryaprakash Email: support@kattutharai.com Response time: within 30 days of receipt.