Privacy Policy

1. Introduction

ISKCONapps ("we," "our," or "us") is a voluntary digital service initiative created to support ISKCON temples and devotee communities. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform at iskconapps.com and its subdomains (collectively, the "Service").

We are committed to protecting the privacy of our users and handle all data with care and respect, in the spirit of service to the devotee community.

2. Information We Collect

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process event registrations and manage attendance
• Send registration confirmations and event-related notifications
• Process and track payments for temple events and services
• Enable temple administrators to manage their events and community
• Provide check-in and attendance tracking at events
• Generate reports and analytics for temple administrators
• Respond to your inquiries and provide support
• Detect and prevent fraud or abuse

4. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

• Temple Administrators: Registration and attendance data is shared with authorized administrators of the temples you register with.
• Payment Processors: Payment details are shared with Square, Stripe, and other payment processors to complete transactions.
• Service Providers: We use Supabase for database hosting, Vercel for application hosting, and Resend for transactional emails.
• Error Monitoring: We use Sentry for application error tracking, which may include anonymized technical data.
• Legal Requirements: We may disclose information if required by law or to protect the rights and safety of our users.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing (bcrypt)
• JWT-based authentication with token expiration
• Role-based access controls for administrative functions
• Row-level security policies on database tables

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Service. Registration and payment records are retained for temple administrative purposes and financial record-keeping. You may request deletion of your account and associated data by contacting us at admin@iskconapps.com.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate information in your profile.
• Deletion: Request deletion of your account and personal data.
• Portability: Request your data in a portable format.
• Opt-out: Unsubscribe from non-essential communications.

To exercise any of these rights, please contact us at admin@iskconapps.com.

8. Cookies and Tracking

We use minimal cookies and local storage for essential functionality:

• Authentication tokens: To keep you signed in across sessions.
• Preferences: To remember your selected module or tenant.

We do not use third-party advertising cookies or cross-site tracking technologies.

8a. Japa Voice Detection

The Japa Counter offers an optional voice-detection feature that uses your device's microphone to automatically count mantras as you chant. This feature is entirely opt-in and off by default.

• On-device only: All audio analysis is performed locally in your browser using the Web Audio API. No audio data — raw or processed — is ever transmitted to our servers.
• No recordings: We do not record, store, or have any access to your voice or audio.
• Calibration data: Optional calibration measurements (timing intervals and volume thresholds you set during calibration) are stored only in your browser's local storage. If you are signed in, this calibration profile may be saved to your account to restore your settings across devices — no audio is involved.
• Telemetry: If you are signed in, the count of voice-detected mantras per session is saved alongside your session record for your own tracking purposes only.
• Permissions: Microphone permission is requested by your browser only when you activate voice detection and is released when you stop listening.

You can disable voice detection at any time from the Japa Counter settings. Revoking microphone permission in your browser settings also immediately prevents the feature from accessing your microphone.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. Family member information (including children) is provided by the parent or guardian during event registration and is managed under their account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.