सम्पदा
SAMPADA
Privacy Policy
Sampada is a heritage app: festivals, heritage sites, facts and festival reminders. Its content is published and verified by the municipalities and heritage bodies that publish through Sampada — Lalitpur Metropolitan City is the first of them. The app and the service behind it are built and operated by Sironik Tech Pvt. Ltd. ("Sironik", "we", "us") of Lalitpur-17, Lunkhushi, Lalitpur, Nepal, which is the company answerable for the personal data described here. This policy explains what personal data Sampada handles, why, and what you can do about it. Privacy questions go to support@sironik.com.
- You can use Sampada without an account.
- No ads, no analytics, no tracking. We never sell your data or use it for advertising.
- An account is optional. It only keeps your profile and favorites in sync.
- You can delete your account at any time, in the app or by asking us.
Using Sampada without an account
- The app downloads the published content and photos from our server and keeps a copy on your device, so it works offline.
- Your language, favorites and reminders are stored only on your device. Reminders are scheduled by your device's own notification system; nothing about them is sent to us.
- Like every web server, ours receives your IP address and basic details of each request (for example, which content was requested and when). We use these only to run the service, keep it secure and fix problems.
Permissions the app asks for
Sampada asks for a permission only when a feature needs it, and says why before your phone does. You can refuse any of them, or withdraw them later in your phone's settings, and the rest of the app keeps working.
| Permission | What it is for |
|---|---|
| Location, while you are using the app | Distances to heritage sites and festival routes, what is near you, and the blue dot on the map. It is used on your phone only and never sent to us. The app never asks for your location in the background. |
| Notifications | The festival reminders you switch on. Your phone schedules and shows them by itself — we send no push messages, and nothing about a reminder reaches our servers. On Android the app also asks to start after a restart, so reminders you already set survive a reboot. |
| Calendar, writing only | Only when you tap Add to calendar: your phone's own calendar editor opens with the festival filled in, and saves it if you confirm. Sampada never reads your calendar or your contacts. |
Your location (optional)
If you allow it, Sampada uses your phone's location to show how far heritage sites and festival routes are, what is near you, and where you are on the map. This happens on your phone only: your location is never sent to our servers or stored by us. You can turn it off at any time in your phone's settings, and everything else keeps working.
The map's images come from OpenStreetMap. Like any online map, their servers see which area of the map your phone downloads, but not your exact position or who you are.
If you create an account
An account is optional. If you create one, we store:
| Data | Why |
|---|---|
| How you sign in: your phone number, or your email address and password, or your Google account | To sign you in. Passwords are stored only as a salted hash. With Google Sign-In, Google shares your account identifier, name and email address with us. |
| Your name and preferred language | To show your profile. |
| Your favorite festivals and heritage sites | To keep them in sync across your devices. |
| When the account was created and last signed in, and your active sign-in sessions | To keep you signed in and to protect your account. Session tokens are stored only as a hash. |
| One-time sign-in codes | We send 6-digit codes by SMS or email to confirm it's you. We store only a hash of each code and delete it within two days. Our server logs record the phone number or email address each code was sent to. |
We use this data only to provide your account. We don't send marketing messages.
No ads, no tracking, no profiles
Sampada carries no advertising, no analytics and no crash reporting — the app contains no such software at all. We do not build profiles of you, we do not track you across other companies' apps or websites, and we never sell or rent personal data. Because there is nothing to track, the app does not ask for Apple's App Tracking Transparency permission and collects no advertising identifier on either platform.
Who else handles your data
- Sparrow SMS (Nepal) delivers the SMS codes to your phone number.
- Our email delivery provider delivers verification and password-reset emails.
- Google, only if you choose Sign in with Google.
- OpenStreetMap serves the map images (see "Your location" above).
- Our hosting providers run the servers and database, which may be located outside Nepal.
- Authorised administrators at the municipality whose content you are reading (today, Lalitpur Metropolitan City) can see basic account details — name, phone or email, role — in the Sampada dashboard, to run the service and act on requests such as account deletion.
Each of them acts on our instructions, under contract, and may not use your data for its own purposes. Google's policy covers Sign in with Google; the OpenStreetMap Foundation's covers the map images. We share personal data with nobody else, unless the law requires it.
Where your data is kept
Our servers and database are run by hosting providers whose data centres may be outside Nepal, and the services above may handle data in other countries, including outside the European Economic Area. Wherever it goes, the data stays limited to what this policy describes, travels encrypted, and is covered by contract terms that hold those providers to it.
How long we keep it, and deleting your account
We keep your account data for as long as your account exists. You can delete your account at any time:
- In the app: tap the person icon on the Home screen, then Delete account.
- Without the app: follow the steps on sampada.sironik.com/delete-account.
Deleting your account immediately removes your profile, sign-in details, synced favorites and sessions from our servers. Our internal change log keeps a record that an account was created and deleted, without your name, phone number or email. Server logs are kept only as long as needed for security and troubleshooting, and are then deleted automatically. Favorites saved on your device stay there until you remove them or uninstall the app.
Security
All traffic between the app and our servers is encrypted (HTTPS). Passwords, sign-in codes and session tokens are stored only as hashes, and the app keeps its sign-in session in your device's secure storage (the iOS Keychain or Android Keystore).
Children
Anyone can browse Sampada, and it holds nothing unsuitable for children. Accounts are not intended for anyone under 13, and we do not knowingly collect personal data from a child under 13. If you are a parent or guardian and believe a child has created an account, write to support@sironik.com and we will delete it and the data with it.
Your rights
You can ask us at any time to:
- tell you what personal data we hold about you, and give you a copy of it;
- correct anything that is wrong — you can also change your name in the app yourself;
- delete your account and the data with it, or restrict or object to how we use it;
- withdraw a permission you gave, such as location or notifications, in your phone's settings.
Write to support@sironik.com from the email address on the account, or with the phone number on it. We answer within 30 days. If you are in the European Economic Area or the United Kingdom, you may also complain to your national data protection authority.
Where the law asks for a legal basis: we handle account data to provide the account you asked for, we rely on your consent for location and notifications, and on our legitimate interest in a secure, working service for server logs and for stopping abuse.
What we tell the app stores
Our App Store privacy labels and our Google Play Data safety form say the same as this page: the only personal data collected is what an optional account needs — your name, your email address or phone number, your account identifier and your favorites — it is used only to run the app and your account, it is never used for advertising or tracking, it travels encrypted, and you can have it deleted.
Changes to this policy
If we change this policy, we will update it on this page and change the date at the top. If a change affects how your data is used, we will also tell you in the app.
How to reach us
Sironik Tech Pvt. Ltd.
Lalitpur-17, Lunkhushi, Lalitpur, Nepal
support@sironik.com