Effective date: 18 October 2026 | Last updated: 18 October 2026
This Privacy Policy (“Policy”) is a legally binding document that explains how Digital Hira Book (the “App”), operated by Hareshbhai Kalubhai Bhaskar, sole proprietor, trading as Bhaskar Digital, having its principal place of business at Bhaskar Digital, Kabir Street, Opp. Bus Stand, Surnagar, Ta. Gariyadhar, Dist. Bhavnagar, Gujarat – 364275, India (“Digital Hira Book”, “we”, “us”, “our”), collects, uses, stores, shares and protects your personal data when you use our mobile application, website digitalhirabook.in, rewards store, admin and related services (together, the “Services”).
Please read carefully. By installing the App, registering an account, or otherwise using the Services, you confirm that you have read, understood and agreed to this Policy and to our Terms & Conditions. If you do not agree, do not install or use the Services.
“Personal Data” means any data about an individual who is identifiable by or in relation to such data.
“User” / “you” means any person who installs, registers on or uses the Services.
“Data Fiduciary” means the person who determines the purpose and means of processing your Personal Data.
“Data Processor” means a third party that processes Personal Data on our behalf.
“Referrer / Upline” means a User whose referral code was used by another User to register; “Referee / Downline” means a User who registered using another User’s referral code.
“Reward Points / Coins” means promotional points credited under our rewards programme.
“Applicable Law” includes the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and rules made under it, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other laws in force in India.
2. Who is responsible for your data
For the purposes of Applicable Law, Digital Hira Book is the Data Fiduciary for Personal Data collected through the Services. Our contact and Grievance Officer details are in Section 20.
3. Data we collect
3.1 Data you provide
Account data: mobile number, name, profile details you choose to add, and the OTP / authentication data used to verify your mobile number.
Work-diary data: entries you record in the App (such as date, work details, quantities, amounts and notes).
Payout data: bank account details and/or UPI ID, and any verification details we are legally required to collect to process withdrawals.
Delivery data: name, mobile number and delivery address you give when you claim a gift or product from the Rewards Store.
Support data: messages, screenshots and other information you send to our support team.
Referral data: the referral code you enter at registration.
3.2 Data collected automatically
Device information (model, operating system, app version, language), device and advertising identifiers, push-notification tokens.
IP address, log data, crash and diagnostic data, and approximate location derived from IP address.
Usage data: login times, screens visited, number of entries per day, points earned, rewards claimed, ads viewed.
3.3 Data we do not seek
We do not intentionally collect biometric data, health data, or contents of your phone’s contacts, SMS, call logs or gallery, unless a specific feature expressly asks for your permission and explains why. You may refuse any device permission; features that depend on it may then not work.
4. Purposes of processing
We process Personal Data only for specified, lawful purposes:
to create and secure your account and verify your mobile number;
to provide the diary, record-keeping, calculation and summary features;
to credit, calculate, display and redeem Reward Points, referral rewards and levels;
to process claims of gifts / products, arrange delivery and handle returns or disputes;
to process withdrawals / payouts and to meet accounting, tax and audit requirements;
to send service, transactional and security messages (OTP, payout alerts, delivery updates) by in-app notification, SMS, WhatsApp or e-mail;
to send promotional messages, only where you have consented and subject to your right to withdraw consent;
to show advertisements and measure their performance (Section 8);
to detect, investigate and prevent fraud, abuse, multiple/fake accounts, referral manipulation and security incidents;
to provide customer support and to improve, test and debug the Services;
to comply with legal obligations, court orders and lawful requests of authorities, and to establish, exercise or defend legal claims.
We will not process your Personal Data for a purpose incompatible with the above without obtaining fresh consent or relying on another lawful ground.
5. Consent and legal basis
We process your Personal Data on the basis of (a) your free, specific, informed and unambiguous consent, given by installing and registering and by tapping on consent prompts in the App, and (b) “certain legitimate uses” permitted by Applicable Law, such as compliance with law, responding to medical or safety emergencies, and fraud prevention.
You may withdraw consent at any time by following Section 14 or contacting us under Section 20. Withdrawal does not affect processing done before withdrawal and may mean we can no longer provide the Services to you. Where consent is withdrawn, we may still retain data that the law requires or permits us to keep.
6. Referral, team and leaderboard data
To operate the referral programme we record who referred whom, and the points generated through that relationship.
Referrers may see limited information about their direct referees, such as a masked mobile number or display name and registration status. We never show your bank / UPI details, address, or full mobile number to other Users.
Leaderboards and public statistics on our website show only ranks, points or referral counts with a masked mobile number (first two digits, four masked characters, last four digits). By using the Services you agree to such masked display. If you do not want to appear on a leaderboard, contact us under Section 20 and we will take reasonable steps to hide your entry.
Aggregate counts (for example, total members and total points) are shown publicly and do not identify you.
7. Sharing and disclosure
We do not sell your Personal Data. We share it only as follows:
Recipient
Purpose
Cloud hosting and database providers
Hosting, storage, backup of the Services
Messaging providers (SMS gateways, WhatsApp Business API providers, push-notification services such as Firebase Cloud Messaging)
OTP, transactional and (with consent) promotional messages
Payment and payout partners (payment gateways, banks, UPI networks)
Processing withdrawals and verifying payout details
Delivery and courier partners
Delivering gifts / products you claim (name, phone, address)
Advertising and analytics providers (such as Google AdMob / Firebase)
Showing ads, measuring usage, crash reporting
Professional advisers, auditors, insurers
Legal, accounting and audit purposes, under confidentiality
Government, regulators, courts, law-enforcement
When required by law or to protect rights, safety and property
Successor entity
In a merger, acquisition or sale of assets, subject to this Policy continuing to apply
All Data Processors act on our documented instructions and are required to keep Personal Data confidential and secure. They may be independently responsible for their own privacy practices where they act as separate controllers (for example, Google for advertising); please see their policies.
8. Advertising
The App may show rewarded and other advertisements through third-party ad networks. These networks may use device or advertising identifiers to serve and measure ads. You can reset or limit the advertising ID in your device settings. We do not give advertisers your name, mobile number, bank or address details. We do not show targeted advertising to Users whom we know to be children.
9. Payments, rewards and withdrawals
Payout details are used only to process eligible withdrawals and are stored in encrypted form and displayed in masked form to staff who do not need the full value.
Reward Points are promotional, have no cash value unless and until a withdrawal is approved under our Terms, and may be adjusted, withheld, reversed or forfeited where they were earned in breach of our Terms, by error, or through fraud.
We may require identity or bank verification before payout. We may deduct taxes or charges required by law.
We do not store full card numbers, CVV or net-banking passwords; such data is handled by regulated payment partners.
10. Fraud prevention and misuse
Strict enforcement. The following are prohibited and may result in immediate suspension or termination of your account, forfeiture of Reward Points and pending payouts, reporting to authorities and civil or criminal action:
creating multiple, fake, duplicate or automated accounts, or registering with another person’s mobile number without authority;
manipulating referrals, entries, ads or points, including self-referral, use of bots, emulators, scripts, VPN/GPS spoofing or modified apps;
providing false identity, bank, UPI or address details;
attempting to access other Users’ data or to disrupt, reverse-engineer or attack the Services;
using the Services for any unlawful purpose.
To enforce these rules we may analyse device, IP, usage and referral patterns, and we may retain related data even after account closure for as long as needed to prevent repeat abuse and to defend legal claims.
11. Retention
We keep Personal Data only for as long as your account is active and as necessary for the purposes in Section 4.
After account deletion we erase or anonymise your Personal Data, except data that we must or may retain under Applicable Law, including transaction, payout and accounting records (generally up to 8 years or the period required by tax and company law), data needed for dispute resolution, fraud prevention and legal claims, and backups that are overwritten in the ordinary course (generally within 90 days).
Inactive accounts may be notified and then erased after a reasonable period as permitted by law.
Anonymised or aggregated data that no longer identifies you may be kept indefinitely.
12. Security
We implement reasonable security safeguards, including HTTPS/TLS in transit, encryption or masking of sensitive fields, role-based access control and audit logging for administrators, access restrictions, regular updates and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your phone, OTP and account access confidential. Never share your OTP with anyone; our staff will never ask for it.
13. Your rights
Subject to Applicable Law, you have the right to:
Access a summary of the Personal Data we process and the identities of recipients with whom it has been shared;
Correct, complete or update inaccurate or incomplete Personal Data;
Erase your Personal Data, subject to Section 11;
Withdraw consent at any time;
Grievance redressal through the Grievance Officer in Section 20, and the right to approach the Data Protection Board of India after exhausting our grievance process;
Nominate another individual to exercise your rights in the event of your death or incapacity.
We may need to verify your identity before acting on a request, and may decline requests that are unlawful, excessive, abusive, or that would infringe others’ rights. You can ask in-app, by e-mail, or by phone as stated in Section 20. We aim to respond within 30 days (or sooner where the law requires).
By e-mail: send a request to info@digitalhirabook.in from, or mentioning, your registered mobile number, with the subject “Delete My Account”.
On verification we will delete or anonymise your account and Personal Data as described in Section 11. Deletion is permanent and irreversible: unredeemed Reward Points, pending claims and pending withdrawals will be forfeited unless a withdrawal has already been approved. We may refuse or delay deletion where an investigation, dispute or legal obligation requires us to keep data.
15. Children
The Services are intended only for persons who are 18 years of age or older and competent to contract under the Indian Contract Act, 1872. We do not knowingly collect, track or process Personal Data of children (persons under 18), and we do not offer the Services to them. If you believe a child has provided us Personal Data, contact us immediately under Section 20 and we will delete it and close the account. We may request proof of age at any time.
16. Cross-border transfer
Our servers are intended to be located in India. Some service providers (for example, messaging, analytics or advertising providers) may process data outside India. We transfer Personal Data outside India only to countries and entities not restricted by the Government of India under Applicable Law, and with appropriate contractual safeguards.
17. Data breach
If a Personal Data breach occurs that is likely to affect you, we will, as required by Applicable Law, notify you and the Data Protection Board of India without undue delay, describing the nature of the breach, likely consequences and steps taken. This does not constitute an admission of fault or liability.
18. Third-party links and services
The Services may contain links to third-party websites or services. We are not responsible for their content or privacy practices. Please read their policies before providing any data to them.
19. Changes to this Policy
We may amend this Policy from time to time to reflect changes in law or in our Services. The updated Policy will be published at digitalhirabook.in and in the App with a revised “Last updated” date, and where the change is material we will notify you by in-app notice or message. Continued use of the Services after the effective date constitutes acceptance of the revised Policy; if you disagree, you must stop using the Services and may delete your account.
20. Grievance Officer and contact
In accordance with the Information Technology Act, 2000, the DPDP Act and rules made under them, the details of our Grievance Officer are:
Name
Hareshbhai Kalubhai Bhaskar
Designation
Proprietor and Grievance Officer
Address
Bhaskar Digital, Kabir Street, Opp. Bus Stand, Surnagar, Ta. Gariyadhar, Dist. Bhavnagar, Gujarat – 364275, India
We will acknowledge complaints within 48 hours and endeavour to resolve them within 15 days of receipt, or such shorter period as the law requires.
21. Governing law and jurisdiction
This Policy and any dispute arising out of it are governed by the laws of India. Subject to any mandatory rights available to you, the courts at Bhavnagar, Gujarat shall have exclusive jurisdiction. Disputes should first be raised with the Grievance Officer so that we can attempt an amicable resolution.
22. General provisions
Severability: if any provision of this Policy is held invalid or unenforceable, the remaining provisions continue in full force.
No waiver: our failure to enforce any right is not a waiver of that right.
Entire understanding: this Policy, together with our Terms & Conditions, forms the entire understanding between you and us regarding your Personal Data.
Assignment: we may assign our rights and obligations under this Policy; you may not.
Language: in case of conflict between this English version and any translation, the English version prevails.
Electronic record: this Policy is an electronic record under the Information Technology Act, 2000 and does not require any physical or digital signature.