1Overview & Scope
Khidmath CRM (“we”, “us”, or “our”) is dedicated to facilitating community welfare, volunteer mobilization, and non-profit coordination. This Privacy Policy governs your use of the website located at https://khidmathcrm.com, its tenant workspaces, the volunteer portal (volunteer.khidmathcrm.com), and the Khidmath Volunteer mobile applications for iOS and Android.
By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.
2Information We Collect
We only collect information necessary to deliver transparent, accountable volunteer coordination and event management:
When you sign up or log in via Google OAuth or email, we receive your name, verified email address, profile picture (if provided), contact phone number, and optional emergency contact details.
Information regarding shifts you accept, task assignments, on-site check-in and check-out timestamps, accumulated service hours, and supervisor verification feedback.
Device model, operating system version (iOS/Android), application version, and standard anonymized crash metrics used solely to diagnose software crashes and ensure stability.
3. Camera & Hardware Access (Mobile App)
Strictly limited to event attendance verification
How Camera Permission is Used:
The Khidmath Volunteer mobile app requests permission to access your device’s camera exclusively to scan physical or on-screen QR codes at event kiosks for automated check-in and check-out.
- We do not record video or take background photos.
- Camera frames are analyzed locally in real-time memory on your device to decode the QR text and are immediately discarded.
- No camera imagery or video feeds are ever stored on your device or uploaded to our servers.
4How We Use Your Information
We use the data we collect solely for legitimate community operations:
- Matching volunteers with relevant relief tasks and shifts.
- Recording certified service hour transcripts and milestone certificates.
- Sending critical shift updates, reminders, and check-in confirmation alerts.
- Preventing fraudulent check-ins and maintaining audit integrity for sponsors.
6Security & Data Retention
We implement industry-standard administrative, physical, and technical safeguards. All transmissions are encrypted using modern Transport Layer Security (TLS 1.3). Database secrets and sensitive tokens are encrypted using enterprise AES-256 standards.
We retain volunteer profile records and verified service history for as long as your account remains active or as needed to furnish academic/civic volunteer hour verification.
7. Account Deletion & Your Privacy Rights
Apple App Store & Google Play compliance
In compliance with Apple App Store Guideline 5.1.1 (v) and Google Play Developer Policies, volunteers have complete autonomy over their personal data:
- From the Volunteer Portal: Navigate to your Profile & Skills page and select "Request Account Deletion".
- Via Email: Send an email from your registered address to [email protected] with the subject "Account Deletion Request".
Upon receiving a deletion request, we will permanently purge your profile, contact information, credentials, and historical logs within 30 days, retaining only anonymized aggregated audit totals if mandated by law.
8Children’s Privacy
Our services are designed for general public volunteer participation. We do not knowingly collect personal identifiable information directly from children under 13 without verified parental or organizational guardian consent. If you believe a child under 13 has registered without consent, please contact us immediately for prompt removal.
9. Contact Us
If you have questions, inquiries, or privacy concerns regarding this Privacy Policy or our mobile applications, please contact our data privacy officer: