Privacy Policy

AquaLog · Operated by Aditya Aquatic Foods Private Limited

Effective Date: 26 October 2026

This Privacy Policy describes how AquaLog (operated by Aditya Aquatic Foods Private Limited) collects, uses, stores, and protects your data when you use our mobile application or our website, aqualog.in. We are committed to protecting your personal data in compliance with:

• The Information Technology Act, 2000 and IT (Amendment) Act, 2008
• The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
• The Digital Personal Data Protection Act, 2023 (DPDPA 2023)
• All other applicable Indian data protection laws

1. Data We Collect

We collect the following categories of data:

• Personal Data: Name, mobile number
• Site Data: Site name and exact GPS location of the farming site
• Pond Data: Polygon boundary of each pond (mapped using GPS coordinates), pond dimensions and identifiers
• Farm Operations Data: Feed logs, water quality reports, average body weight (ABW) records, stocking details, pond applications (chemicals, probiotics, etc.), harvest records (including buyer name, rate and rebate), mortality records
• Inventory Data: Feed stock, chemical stock, and other farm input inventory
• Financial Data: Input costs, harvest revenue, and other farm financial records entered by the user
• Payment Data: Your plan, amount paid, payment date, transaction ID, and the details needed for your GST invoice. Card, UPI and bank details are handled by Razorpay or Apple; we do not store them
• Manager and Worker Data: Names and mobile numbers of managers you add, and names and salary payment records of workers you enter. Please make sure they know you are adding their details
• Task Data: Tasks you assign, their Done / Missed status, and the photos and notes managers add as proof that a task is done
• Change Log: A record of who changed an entry, what was changed, and when
• Device Data: Device type, operating system, app version, usage logs, and a notification ID used to send task and plan reminders to your phone
• Location Data (PondSafe): When a user submits a PondSafe disease alert, approximate location is recorded. Exact site or pond location is never displayed to other users — only a generalised area is shown. Location is not tracked continuously. Raw coordinates of the reporting farmer's site or ponds are never exposed to other users.
• Analytics Data: App usage behaviour collected via Firebase Analytics (Google Analytics for Firebase), used only in aggregated form

2. Grounds for Processing

Under DPDPA 2023, we process your personal data on the following grounds:

• Consent: You give consent when you register. Some features ask for separate consent, such as location access (PondSafe), AI Insights, and analytics. You can withdraw consent at any time (see Section 11)
• Legitimate uses: Where you have voluntarily given us data for a specific purpose — for example, entering farm records so the app can store and show them — and to comply with Indian law, court orders, or lawful government requests

Keeping your account secure and preventing fraud is part of providing the service you signed up for.

3. Third-Party Services Used

We use the following service providers. They process data only to deliver the services listed below and are contractually required to protect your data:

• Google Cloud: Database hosting, app infrastructure, and AI services
• Google Maps: Used for site location mapping, pond boundary (polygon) drawing, and displaying approximate PondSafe alert locations. Exact farmer site or pond coordinates are never shared with other users.
• MSG91: OTP authentication and SMS/WhatsApp notifications
• Razorpay: Processes subscription payments made in the Android app
• Apple (App Store): Processes subscription payments made in the iPhone app, under Apple's own privacy policy
• Firebase Analytics (Google Analytics for Firebase): In-app usage analytics and crash reporting
• Google and Apple push notification services: Deliver task and plan reminders to Android phones (Google) and iPhones (Apple)
• Google Fonts: Loads the fonts on our website. Your browser connects to Google's servers, which can see your IP address
• WhatsApp (Meta): If you contact us on WhatsApp, your messages are also handled under WhatsApp's own privacy policy

4. Cookies and Tracking Technologies

Our app uses the following tracking technology:

• Firebase Analytics (Google Analytics for Firebase): Collects usage data — screen views, session duration, crash logs

Our website does not use cookies or analytics tracking. It loads fonts from Google Fonts (see Section 3).

We do not use analytics data to identify you personally. Analytics data is used only for improving app performance and user experience. You may limit analytics data collection through your device settings, or withdraw consent by contacting us.

5. Purpose of Data Collection

• App functionality and farm record keeping
• AI Insights generation and personalised recommendations
• PondSafe disease alerts
• OTP-based login and account security
• Subscription billing, payment reminders and GST invoices
• Task and plan reminders sent as phone notifications
• Analytics and service improvement
• AI model improvement using anonymised and aggregated farm data
• Legal and regulatory compliance

6. Data Sharing

• We do not sell personal or farm data
• Data is shared only with service providers listed in Section 3
• Data may be disclosed to government authorities if required by applicable law
• In the event of a business restructuring or acquisition, data may be transferred to the successor entity

7. Cross-Border Data Transfer

Your data is stored and processed on Google Cloud infrastructure, which may be located in India or other countries. We ensure appropriate safeguards are in place including contractual data protection obligations with Google Cloud, consistent with DPDPA 2023 requirements for cross-border data transfers.

8. Data Security

We implement the following security measures to protect your data:

• Data is encrypted in transit using HTTPS/TLS provided by Google Cloud
• Data is encrypted at rest using Google Cloud's default encryption
• Access to personal data is restricted to authorised team members only
• App login is secured via OTP-based authentication through MSG91
• Security practices are reviewed periodically as the platform scales

9. Data Breach Notification

If a data breach affects your personal data, we will inform you without delay through in-app notification and/or SMS. We will tell you what happened, the likely impact, and the steps we are taking and you can take. We will also report the breach to the Data Protection Board of India as required under DPDPA 2023 and its rules.

10. Data Retention

• Active farm data is stored while your account is active
• Operational logs (feed, water quality, ABW, mortality) are archived after cycle completion — they are hidden from the active screens but kept securely and can be restored on request while your account is active
• Financial summaries and cycle reports are kept for reporting purposes while your account is active
• When you delete your account or withdraw consent, we delete or anonymise your personal data within 90 days, unless Indian law requires us to keep it longer
• Payment records and GST invoices are kept for as long as Indian tax law requires, even after an account is deleted
• Anonymised data, which can no longer identify you, may be kept for AI model improvement and reporting

11. Your Rights

Under DPDPA 2023, you have the right to:

• Access your personal data held by AquaLog
• Request correction of inaccurate or incomplete data
• Request deletion of your data (see Section 12)
• Withdraw consent at any time (certain features may become unavailable)
• Nominate a representative to exercise rights on your behalf
• Lodge a complaint with the Data Protection Board of India, after first contacting our Grievance Officer

To use any of these rights, contact our Grievance Officer (Section 15). We will acknowledge your request within 24 hours and resolve it within 15 days.

12. Account Deletion

• In the app: Go to Settings and delete your account
• Without the app: Email info@aqualog.in or send a WhatsApp message to +91 93925 67223 from your registered mobile number, asking us to delete your account. We will confirm the request comes from you before deleting
• Upon deletion, personal data will be removed or anonymised within 90 days
• Archived operational data will be anonymised or deleted as per retention policy
• Anonymised farm summary data may be retained for regulatory reporting

13. Children

AquaLog is meant for farmers and farm staff aged 18 or over. Under DPDPA 2023, anyone under 18 is a child. A child may use AquaLog only with verifiable consent from a parent or lawful guardian. If we learn that we have collected a child's data without such consent, we will delete it promptly. We do not track children or show them targeted advertising.

14. Policy Updates

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification. Continued use of the app after notification constitutes acceptance of the updated policy.

15. Grievance Officer and Contact

Under the IT Rules 2021 and DPDPA 2023, our Grievance Officer is:

• Name: Aditya Naga Varma Mantena
• Email: info@aqualog.in
• Phone / WhatsApp: +91 93925 67223
• Address: Aditya Aquatic Foods Private Limited, SLV Gangothri Towers, ASR Nagar, Bhimavaram, Andhra Pradesh, India
• Hours: Mon – Sat · 9:00 AM – 6:00 PM IST