Privacy
What Awajdo collects, why, and what protects it. This is a plain-language summary of how the system actually behaves — it describes the code, not an aspiration.
What we store about you
| Required. Used for verification and account recovery. Never shown publicly. | |
| Phone | Optional. Encrypted at rest. Never shown publicly. Searchable only through a keyed index, so the number itself is not readable in the database. |
| Date of birth | Encrypted at rest. Only your birth year is kept in readable form, which is all we need to enforce the 13+ rule. |
| Password | Never stored. We keep an Argon2id hash combined with a secret that is not in the database, so a stolen database alone cannot be used to crack passwords. |
| Your posts and comments | Stored as you typed them, in plain text. They are public by design. |
| Post location | The place you tag is public. Precise GPS coordinates are attached only if you deliberately turn that on for a post. |
| Photos and videos | Re-saved by our server before anyone sees them, which removes EXIF metadata — including your camera's GPS tag and device identifiers. |
| IP address | Used for rate limiting and abuse detection. Stored as a keyed hash plus a coarse network prefix, not as the full address, and expires after 90 days. |
Anonymous posts
When you post anonymously, your name and photo are hidden from every other user, including on your own profile — anonymous posts are never listed there, because that would let anyone match your activity to them.
We do still record that the post is yours. Indian law requires an intermediary to be able to respond to a defamation complaint or a lawful order. Accessing that record requires a specific staff permission that almost nobody has, a written reason, a fresh identity check, and it is written to a tamper-evident log. If you need protection stronger than that, do not rely on this — or any — platform.
Who we share with
Nobody, commercially. Awajdo does not sell data, does not run third-party advertising or analytics scripts, and loads no code from other companies' servers — the CAPTCHA is generated on our own server rather than by a third party, specifically so that reading a civic complaint does not send your details somewhere else.
We disclose information only when compelled by a lawful order, and we log it when we do.
Your control
- Export — download everything we hold about you as JSON, from Account settings.
- Delete — request deletion at any time. Your account is recoverable for 60 days, then erased permanently.
- Sessions — see where you are signed in and sign out everywhere else.
- Notifications — everything beyond direct interactions is off unless you turn it on.
Questions
Contact the grievance officer.