Unigram is an independent, non-commercial student-run software project. It is NOT officially affiliated with, endorsed, operated, or sponsored by Chaudhary Ranbir Singh University (CRSU), Jind, or any government university body. All student information collected is managed solely by the student developer team to operate the student network. For all privacy inquiries or data requests, contact our designated privacy desk at unigramjind@gmail.com.
2. Personal Data We Collect
We adhere to strict data minimization principles under the Digital Personal Data Protection Act, 2023 (DPDP Act 2023). We only collect data that is strictly necessary to authenticate students, safeguard the campus network, and operate platform features:
Mandatory Verification Data: Full Name, University Roll Number, Academic Department, and 10-digit Mobile Phone Number. This data is collected to verify that every user is a bona fide CRSU student and prevent unauthorized outsiders from entering the network.
Authentication Data: Email address and encrypted authentication tokens provided through Supabase Auth or Google OAuth.
User Profile Data (Optional): Custom profile bio, avatar photograph, and graduation year (if provided voluntarily).
User-Generated Content: Posts published on the campus feed, anonymous posts, comments, study notes, past papers, and direct messages (DMs).
Push Notification Subscriptions: Standard browser Web Push endpoint tokens (via Firebase Cloud Messaging / Apple Push Notification service) required solely to deliver notification alerts for direct messages, notices, and interactions you opted into.
What We NEVER Collect: We do NOT collect GPS location data, phone contacts, call logs, SMS contents, browsing history outside Unigram, or payment/banking information.
3. Lawful Purpose of Data Processing
Your personal data is processed solely for lawful, student-focused operational purposes:
Campus Safety & Verification: Validating student identities to ensure the community remains safe, civilized, and protected against trolls, spam, and non-student harassment.
Account Recovery: Using your registered roll number and phone number to verify and process administrative password reset requests.
Legal & Moderation Compliance: Ensuring compliance with the Information Technology (Intermediary Guidelines) Rules, 2021 and maintaining auditability to investigate verified reports of cyberbullying, harassment, or ragging.
4. The Anonymous Feed & Audit Trail Notice
STATUTORY TRANSPARENCY NOTICE: When you post in the Anonymous Feed, your name and department are masked from public view in the user interface. However, your post is internally linked to your authenticated user ID in our secure database.
This internal linkage is mandatory under Rule 3(1)(h) of the Information Technology (Intermediary Guidelines) Rules, 2021. Anonymity on Unigram is an interface courtesy designed to foster honest questions without social hesitation — it does NOT grant immunity for unlawful acts, defamation, threats, or harassment.
Author identification is strictly restricted: no regular user or standard moderator can view author identities. Identity logs are examined solely by super-administrators under formal grievance proceedings or upon receipt of a lawful order issued by law enforcement or competent courts.
5. Data Storage, Hosting & Cloud Security
We implement industry-standard cryptographic and architectural measures to safeguard student information:
Encrypted Transport: All data transmitted between your browser or phone and Unigram servers is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
Cloud Database & Storage: Our primary databases and file storage buckets are hosted on Supabase enterprise infrastructure (PostgreSQL) with strict Row Level Security (RLS) policies preventing unauthorized cross-user access.
Password Protection: Passwords are never stored in plain text. They are hashed using one-way salted cryptographic hashing algorithms (bcrypt/Argon2). Platform administrators cannot see or retrieve your original password.
🚫 6. Absolute Zero Data-Selling Policy
Unigram will NEVER sell, lease, rent, monetize, or trade your personal data, phone number, email, or chat logs to any third-party marketing agency, advertiser, or data broker.
Unigram is built by students as a non-commercial academic social utility. We do not use third-party behavioral ad trackers or cross-site commercial profiling tools.
7. Your Data Rights Under DPDP Act 2023
As a student and data principal under the Digital Personal Data Protection Act, 2023, you enjoy statutory rights regarding your personal information:
Right to Access: You may request a summary of the personal data processed by Unigram associated with your account.
Right to Correction: You may request the correction of inaccurate, outdated, or misleading details (e.g., updating your full name or department) through the in-app profile editor or via email.
Right to Erasure / Account Deletion: You have the right to request the complete deletion of your account, profile, and personal identifiers.
Right of Grievance Redressal: You have the right to lodge a grievance with our privacy desk regarding any concern related to personal data processing.
To exercise any of these rights, email us at unigramjind@gmail.com with the subject line "Data Request: [Access / Correction / Deletion]". We respond to verified student requests within 7 business days.
8. Data Retention & Erasure Timelines
Your account data is retained as long as your account remains active on Unigram. When you submit a verified deletion request:
Your account profile, login credentials, phone number, and roll number are permanently expunged from active user records within 30 days.
Direct messages sent to other users will display your profile as "Deleted Student".
Certain server audit and moderation logs may be preserved in an anonymized, non-personally identifiable state for a period mandated by Rule 3(1)(h) of the IT Rules 2021 solely to comply with statutory legal requirements.
🏛️ 9. Disclosure to Law Enforcement Authorities
Unigram cooperates with legal authorities strictly in accordance with Indian law:
We do NOT volunteer or hand over user data arbitrarily.
We disclose relevant user logs only upon receiving a formal, lawful notice issued by an authorized officer or court of competent jurisdiction under Section 91 of the Code of Criminal Procedure, 1973 (or Section 94 of Bharatiya Nagarik Suraksha Sanhita, 2023) or pursuant to valid directives under the Information Technology Act, 2000.
🎓 10. University Age Requirement
Unigram is designed exclusively for enrolled collegiate students in undergraduate, postgraduate, or research programs (typically aged 18 and older). We do not knowingly collect personal data from minors below 18 years.
📬 11. Privacy Contact Desk
For any questions, clarifications, or requests concerning this Privacy Policy, contact: