Privacy Policy
Last updated: 5 October 2026 • LaxmiPath app and portal
1. Who we are and what this covers
LaxmiPath is a directory of women-led businesses in Gujarat, run as a mobile app for Android and iOS and a web portal. This policy covers both. It explains what we collect, why, who we share it with and what you can ask us to do with it. It is written to the Digital Personal Data Protection Act, 2023.
2. What we collect, and why
To create your account: your mobile number, and the one-time code we send to it. We ask for your name, email address and gender when you sign up.
If you list a business: the business name, description, category, full address including the latitude and longitude you choose, working hours, contact numbers and social media handles, and the photographs you upload — logo, cover, gallery, your own photograph and product pictures.
Identity documents, if you choose to verify: your Aadhaar number and a photograph of the card, and where applicable PAN, GST and a trade licence. These are sensitive, and they are treated differently from everything else — see section 5.
When you use the app: the enquiries you send or receive, the businesses you save, the reviews you write and the ratings you give.
Automatically, with every request: a per-install device identifier, your app version, platform and chosen language, and your IP address. We use these to serve the right content and to find faults.
3. Permissions the app asks for
Each one is asked for at the moment it is needed, never at startup, and the app works without any of them.
Camera and photo library — only to let you take or pick the pictures and documents you upload.
Microphone and speech recognition — only while you hold the voice-search button. We do not record or store audio; the words are turned into text on your device by the operating system.
Location — only when you tap to use your current location while filling an address, or to sort results by distance. We do not track you in the background.
Notifications — to send your sign-in code and to tell a business owner when an enquiry arrives.
4. Third parties we use
We do not sell, rent or trade your data, and we do not use advertising networks. We do use these processors:
Google Firebase Cloud Messaging — delivers your sign-in code and your notifications. It receives a push token tied to your installation.
Google Firebase Analytics — counts which screens and categories are used, so we know what to improve. Events are tied to an app-instance identifier, not to your name or number.
Google Firebase Crashlytics — records a diagnostic report when the app crashes, which includes the device model, operating system version and where in the code the fault happened.
Google Maps — draws the maps in the app.
Each of these is governed by Google's own privacy terms in addition to this policy.
5. How identity documents are handled
An Aadhaar, PAN, GST or licence document you upload is stored privately and is never part of your public listing. It can only be opened through a short-lived signed link, which expires, and only by you and the team member reviewing your application. It is used for one purpose — confirming that a business is real before it carries a verified mark — and for nothing else.
On Android the app blocks screenshots and screen recording throughout, so these pages cannot be captured. Apple does not allow an app to block screenshots; there the app hides its preview when it is backgrounded.
6. Who can see what
Your public listing — business name, category, description, address, working hours, contact numbers, photographs and reviews — is visible to anyone using the app or the portal. That is the point of a directory.
When you send an enquiry, the business owner sees your name, your mobile number, your email address if your account has one, and your message, so that she can reply.
Your identity documents, your saved businesses and your account settings are never public.
7. How long we keep it
Your account and listing are kept while your account is open. Enquiries and reviews are kept while the account that created them is open. Crash and analytics records are kept by Google for the period their terms set.
When you delete your account we remove your profile, your listing, your documents, your enquiries, your saved businesses and your reviews. Records we are required by law to retain — for example a tax record of a payment — are kept for the period the law requires and nothing longer.
8. Deleting your account
You can delete your account from inside the app: Profile → Delete Account, at the foot of the Profile screen. Full instructions, including how to ask us to delete it if you cannot sign in, are on our account deletion page. It is permanent, it takes effect immediately, and it needs no email to anybody. If you would rather write to us, use the address in section 11 and we will complete it within thirty days.
9. Your rights
You can ask us to show you the personal data we hold about you, to correct anything that is wrong, to erase it, and to withdraw a consent you gave earlier. Most of it you can do yourself in the app — Edit Profile corrects your details and Delete Account erases them. For anything else, write to the Grievance Officer in section 11. We answer within thirty days.
10. Children
LaxmiPath is for adults running or looking for a business. We do not knowingly collect data from anyone under 18. If you believe a child's data has reached us, write to us and we will remove it.
11. Grievance Officer and contact
If something about your data is wrong, or you want to exercise a right in section 9, write to the Grievance Officer and we will respond within thirty days.
Email: laxmipath.india@gmail.com
Phone: +91 90163 03444
Post: LaxmiPath, Ahmedabad, Gujarat, India
12. Changes to this policy
If we change what we collect or why, we will update this page and change the date at the top. Where the change is significant we will tell you in the app before it takes effect.