1. Who we are
SOI is operated by Swag Of India, a non-profit organisation based in India.
Contact: support@swagofindia.org
Grievance Officer (India's Digital Personal Data Protection Act, 2023):
grievance@swagofindia.org
2. What SOI is for
SOI connects volunteers with NGOs, schools and companies running volunteering drives. Its purpose is to record volunteering hours in a way the organising NGO has confirmed, so those hours can be trusted by colleges, employers and funders.
3. What we collect
We collect only what the service needs to work.
| Data | Why | Required? |
|---|---|---|
| Email address | To create your account and sign you in | Yes |
| Name | So coordinators can identify you and issue certificates | Optional |
| City | To show you drives near you | Optional |
| Organisation membership and role | To determine what you can do in the app | Only if you join one |
| Event registrations | To reserve your place at a drive | Only when you register |
| Attendance records — check-in time, hours, certification status | The core record the product exists to create | Only when you check in |
| Reports you submit about content | To review and act on them | Only when you report |
What we do not collect
- We do not collect your location. Location permissions are blocked in the app.
- We do not use advertising, ad networks, or behavioural tracking.
- We do not use third-party analytics.
- We do not collect payment or financial information — the app has no payments.
- We do not read your contacts, photos, files, microphone, or call history.
Camera
SOI requests camera access for one purpose: scanning a QR code — either the one your event coordinator displays so your attendance can be recorded, or a campaign pledge code. No image or video is ever captured, stored, or transmitted. The code is decoded on your device and nothing else. You can refuse this permission and still use the rest of the app.
3a. People enrolled by a school or organisation
Schools and organisations can enrol participants — students or volunteers — who do not have a SOI account. This exists so that a child never has to create an account, hand over an email address, or use a phone to take part.
| Data | Why | Required? |
|---|---|---|
| Full name | So the organising NGO can certify who attended | Yes |
| Class and roll number | To identify a student within their school | Optional |
| Email address | Optional. If given, the record links automatically when that person later creates an account | Optional |
| Mobile number | Optional, for the enrolling organisation's own contact | Optional |
| A one-time claim code | So the person can attach these records to their own account later | Generated automatically |
We deliberately do not collect date of birth, photographs, addresses, or any identity document for enrolled participants.
For participants under 18, we recommend organisations leave email and mobile empty. The record works fully without them, and the app says so at the point of entry.
Who can see an enrolled participant's details:
- Coordinators of the organisation that enrolled them
- Coordinators of an organisation running a drive they were marked as attending — they need this in order to certify the record, which is the point of the system
- The participant themselves, once they claim the record
Nobody else. Participants are not publicly listed and cannot be searched for.
Responsibility for children's data
Where a school enrols students, the school is responsible for obtaining any consent required from parents or guardians, as it already does for trips, photographs and similar activities. SOI processes this data on the school's instruction. If you are a parent and want your child's record removed, contact the school, or write to us and we will act on it.
4. Who can see your information
Event coordinators of an organisation whose drive you check into can see your name, email address, check-in time and hours — they need this to confirm you attended and certify your hours.
Other volunteers cannot see your personal information. There is no public profile, no messaging, and no directory of users.
We do not sell your data, and we do not share it with advertisers or data brokers.
We use Supabase for database, authentication and hosting, and Brevo to deliver sign-in emails. Both process data on our instructions as service providers.
5. How long we keep it
- Account data: until you delete your account.
- Attendance and certification records: retained as part of the volunteering record — see the note in section 6.
- Content reports: up to 24 months.
6. Your rights
You can at any time:
- See and correct your profile information, in the app under Profile.
- Delete your account — in the app under Profile → Delete my account, or via our account deletion page.
- Withdraw consent by deleting your account.
- If you were enrolled by a school or organisation and have no account, ask that organisation to remove your record, or write to us and we will remove it. You do not need an account to make this request.
- Complain to our Grievance Officer, or to the Data Protection Board of India.
One important limit on deletion. When an NGO certifies your hours, that certification becomes part of their record of who attended their event — a record they may need for their own funders or auditors. Deleting your SOI account removes your account and personal data from SOI, but does not retract a certificate an NGO has already issued. This is stated in the app before you confirm deletion.
7. Children
You must be 13 or over to create a SOI account. We do not knowingly allow anyone under 13 to sign up, and we do not knowingly collect personal data directly from children. If you believe a child under 13 has created an account, contact us and we will delete it.
Children under 13 can still take part — without an account. That is the whole point of school enrolment: a teacher records the student on their school's roster, and the child never signs up, never gives us an email or a phone number, and never uses the app. What we hold about them is described in section 3a, and the school remains responsible for any parental consent required.
Where volunteers under 18 take part through a school or college, the school is responsible for obtaining any parental consent required.
8. Security
Access to data is enforced at the database level using row-level security, so a user can only read records they are entitled to. Attendance records cannot be created or altered from the app directly — check-in and certification are validated on our servers, which is what makes a certified hour meaningful. All traffic is encrypted in transit.
No system is perfectly secure. If we become aware of a breach affecting your personal data we will notify affected users and the Data Protection Board as required.
9. Changes
If we change this policy we will update the date above and, for significant changes, notify you in the app.