Booth Saathi — Privacy Policy

Effective date: 18 October 2026

1. App and developer information

• Application name: Booth Saathi
• Developer: Tanishq Raj Mandowara (App Store seller name: Tanishq Mandowara), who develops the app for Digital Planet
• Business: Digital Planet, a sole proprietorship of Manish Kumar Mandowara, which provides and operates the Booth Saathi service and its server
• Address: R C Vyas Colony, Bhilwara, Rajasthan 311001, India
• Phone: +91 93527 67684
• Email: manishmandowara@edigitalplanet.info

Booth Saathi is an election booth management app. It helps candidates' election campaign teams and their booth workers manage the voter list and booth work for their constituency.

In this policy, "we", "us" and "our" mean Digital Planet. Tanishq Raj Mandowara builds the app for Digital Planet; Digital Planet operates the service and its server, and is responsible for the information described in this policy. Use of the app is also governed by our Terms of Use.

2. Who uses the app

Booth Saathi is used only by organisations that engage Digital Planet, such as a candidate's election campaign or a party unit for a constituency ("client organisations"). Digital Planet creates accounts as each client organisation requires, and the organisation decides who in its team gets one. There is no public sign-up. People who use the app are the client organisation's administrators and booth workers ("users").

The app is not an official app and is not affiliated with the Election Commission of India or any government body.

3. The voter list

The voter list in the app is provided by the client organisation. Digital Planet, as the client organisation's service provider, loads it into that organisation's own project on Digital Planet's server, and the app downloads it from there to the iPhones of that organisation's team. We process the voter list only on the client organisation's instructions, to provide the app. We do not sell, rent or share voter data with anyone else or use it for any other purpose.

The client organisation decides how its voter list is used in its campaign, and is responsible for having the right to use it and for using it lawfully.

4. What information the app handles

About users (administrators and booth workers)

• Sign-in details. Your name, mobile number and password are used to sign in. The app sends them to our server over HTTPS when you sign in, and again each time the app is opened or comes back to the screen, to check that your account is still active. If your account has been deactivated, the app signs you out and removes the voter list from the iPhone.
• Account identifiers. Your organisation's project ID and a sign-in key issued by our server. The app sends the project ID when it downloads the voter list or uploads the banner, and the sign-in key when it reports a location, loads the map or changes the slip message. The password and sign-in key are stored in the iPhone's Keychain.
• Location of booth workers.
  • When: each time a booth worker's home screen starts (after signing in, when the app is opened, and after changing the app language). The app asks for location permission if it has not asked before.
  • What is sent: if the worker allows it, the app sends the device's current location to our server, linked to the worker's account. The location is precise, or approximate if Precise Location is turned off in Settings.
  • No background tracking: the app does not track location in the background.
  • Who sees it: the organisation's administrators can see booth workers' reported locations on a map, labelled with each worker's mobile number, and can call a worker from the map.
• Location of administrators. An administrator's location is used only on their own iPhone, to centre the map, and is not sent to our server.
• Banner photo (administrators only). An image an administrator chooses and uploads. It is shown to the team's users when they open the app, and it is printed at the top of the voter slip images that users share with voters.
• Voter slip message (administrators only). Text an administrator sets. It appears on voter slips and at the end of voter-slip text messages.
• Connection data. Like any internet service, our server receives your device's IP address and the standard technical details that iOS adds to every web request: the app's name and build number, the iOS version and the device's language settings. We use these only to run and secure the service. The app does not collect advertising or device identifiers, the device model, your contacts or push-notification tokens.

About voters (the client organisation's voter list)

• Voter list details, downloaded to the iPhone of every team member who signs in:
  • name and father's or husband's name, in Hindi and English;
  • age, voter ID and house number;
  • section (shown in the app as the address), part (ward) number and serial number;
  • polling booth address;
  • our server's record number for the voter;
  • any marks, mobile numbers and survey answers already recorded by the team.

  The voter list does not include phone numbers. Neither Digital Planet nor the client organisation adds them; a voter's mobile number is recorded only when a team member types it in the app.

• Records added by the team in the app and sent to our server:
  • "vote cast" and "not available" marks (a mark can also be removed);
  • mobile numbers, entered in the Update Mobile box or typed in a voter's action box before calling, messaging or sending a slip. A new number may also be filled in for other voters of the same house who have no number recorded;
  • survey answers: WhatsApp number, education, livelihood and a description of the livelihood, outside address (state, district and address), and two free-text notes.

  Each record is sent with the voter's record number so that it is saved against the right voter. Survey answers and some mobile updates also include the part and house number.

Team members should not record sensitive information, such as caste, religion, health or political views, in the free-text notes.

5. How the information is used

Only to provide the app's features to the client organisation's team:

• signing in, and checking at each app start that your account is still active;
• showing, searching and updating the team's voter list;
• marking votes cast and voters not available;
• recording survey answers;
• preparing and printing voter slips, and showing the team's banner;
• contacting voters by phone, SMS or WhatsApp when a team member chooses to;
• exporting the list (administrators);
• showing booth workers' reported locations and mobile numbers to the team's administrators.

We do not use any of this information for advertising, marketing, profiling or tracking. The app contains no advertising, analytics or tracking services, and we do not sell, rent or trade personal information.

6. Where it is stored and who can see it

• Our server. Digital Planet's server is run for us by a hosting company, OVHcloud, which stores the data only to provide the server to us, does not use it for its own purposes, and protects it with security measures at least as strong as those described in this policy. Each client organisation's data is kept in its own project, and the app shows a project's data only after one of that organisation's users signs in. In the app, only administrators can open the map, change the slip message, upload the banner or export the list. Digital Planet staff can access the server only to run and support the service.
• On the device.
  • Voter list: the app keeps a copy of the team's voter list, including the team's marks and survey answers, in a database on the iPhone so that it can work quickly. This copy is protected by iOS file protection and is not included in iCloud or computer backups.
  • Settings and Keychain: the app keeps your name, mobile number, role, your organisation's project ID, the banner address, the slip message and the selected ward in its settings. Your password and sign-in key are kept in the Keychain.
  • Signing out: signing out deletes all of these, and so does being signed out by the server. Your language choice and the slip printer you selected stay on the device.
  • Shared slip image: the last voter slip image you shared may remain in the app's temporary storage until iOS clears it or the next slip replaces it.
  • Deleting the app: if you delete the app without signing out, iOS may keep your saved password in the Keychain until the app is installed again, when the app erases it.
• Exports (administrators only). Administrators can export the voter list, or a search result, to Excel or PDF.
  • Excel contains list details, marks, mobile and WhatsApp numbers, and survey answers.
  • PDF contains the main details with mobile and WhatsApp numbers.
  • Where it is saved: in Booth Saathi's folder on the iPhone, where the Files app can see it. It is included in the iPhone's backups.
  • Deleting exports: signing out does not delete exported files. The administrator can delete them in the Files app.
  • Responsibility: the client organisation is responsible for exported files.
• Encryption in transit. All communication between the app and our server uses encrypted HTTPS. The banner image is downloaded from the address our server provides, also over HTTPS.

7. Information shared only when you choose to

The app passes information to other apps or services only when a user taps a button to do so:

• Share sheet (voter slip image). The "WhatsApp" button opens the voter's slip preview. Tapping "Send" turns the slip into an image and opens the iPhone share sheet. The user chooses where the image goes, for example WhatsApp, Messages, Mail, AirDrop, Files or "Save Image". The image shows:
  • the banner and the slip message;
  • the voter's serial and part number;
  • name and father's or husband's name;
  • voter ID, age and house number;
  • booth address.
• Messages (SMS). The "Message" and "Voter Slip" buttons open a text message to the voter's mobile number. Nothing is sent until the user taps Send. The message contains either:
  • text the user typed; or
  • the voter slip text: the voter's serial and part number, name, father's or husband's name, age, house number, voter ID and booth address, and the slip message.
• Phone. A call to a voter's number or, for administrators, to a booth worker's number shown on the map. iOS asks the user to confirm first.
• Printers. The voter slip, sent to the Bluetooth printer the user has chosen or to an AirPrint printer the user selects.
• Exports (administrators only). After an Excel or PDF export, the share sheet opens so that the administrator can open, save or send the file with an app of their choice, Mail, AirDrop or Files.
• Apple Maps (MapKit). The administrator's Location screen uses Apple's map service to draw the map, so Apple receives the map area being shown.

The "Privacy Policy & Terms" link on the sign-in screen opens this policy on our website in Safari.

These services handle information under their own privacy policies. We disclose information to anyone else only if Indian law, a court order or a lawful government request requires it.

Booth Saathi does not use any third-party service to collect personal information for advertising or profiling. If we add a third-party service to a future version of the app, we will update this policy first.

8. Device permissions

• Location (only while the app is in use):
  • Booth workers are asked when their home screen opens. Their location is sent to our server as described in section 4.
  • Administrators are asked the first time they open the Location (map) screen. Their location is used only on the device, to centre the map, and is not sent to our server.

  If location is refused, the rest of the app still works.

• Bluetooth. Used only to find and connect to a slip printer. While the printer list is open, the app shows the names of nearby Bluetooth devices on the iPhone. It does not send them anywhere. The printer you choose is remembered on the device.
• Photos. The app asks for permission only to add a voter slip image to your photo library when you choose "Save Image". To pick a banner photo, administrators use Apple's photo picker, which gives the app only the photo they choose, without access to the rest of the library.

Permissions can be changed at any time in the iPhone's Settings.

9. How long we keep information

A client organisation's voter list, the records added to it (marks, mobile-number updates, survey answers), its users' accounts and their reported locations are deleted from our server within 3 months after the election for which the client organisation engaged Digital Planet, or earlier if the client organisation asks. Banner photos and the slip message are deleted together with the rest of the client organisation's data. Server logs, which record IP addresses and the requests the app makes, are kept only as long as needed to run and secure the service, and no longer than the client organisation's data.

10. Your choices and requests

• Withdrawing consent. You can stop the app sending your location at any time by turning off Location for Booth Saathi in Settings > Privacy & Security > Location Services; the rest of the app keeps working. Locations already reported stay on our server until they are deleted under section 9, unless you ask us to delete them sooner. You can also sign out, delete the app, and ask for your account and data to be deleted as described below.
• Users. Digital Planet creates accounts at your organisation's request. To have your account and its data deleted, contact us using the details in section 1, or ask your organisation's administrator to request it.
• Voters. If you believe your details appear in Booth Saathi, you can contact us using the details in section 1. We will work with the client organisation that uses the voter list to respond to your request, including by correcting or deleting your details.

When we receive a valid deletion request, we will delete the account and the related personal information within 90 days. The only exception is information we must keep to meet a legal, regulatory or security requirement.

11. Children

Booth Saathi is meant for adult election workers. It is not intended for anyone under 18, and we do not knowingly collect personal information from children.

12. Security

We take reasonable technical and organisational measures to protect information:

• encrypted HTTPS connections;
• Keychain storage for passwords on the iPhone;
• an on-device voter list that is protected by iOS file protection and excluded from backups;
• voter data shown in the app only after a team member signs in;
• restricted access to our server.

No system is completely secure. We will act promptly if we learn of a security problem affecting your information.

13. Grievances and contact

For questions, complaints, or requests to delete an account or data, contact our grievance officer:

Manish Kumar Mandowara, Digital Planet
R C Vyas Colony, Bhilwara, Rajasthan 311001, India
Email: manishmandowara@edigitalplanet.info · Phone: +91 93527 67684

We will resolve your complaint within one month of receiving it. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

14. Changes to this policy

If this policy changes, we will publish the new version at this address with a new effective date.