Khichdi App Privacy Policy
What the preview app does
The app lets an existing Khichdi Community Portal (KCP) user sign in, view the modules enabled for that account, open a limited K-Mail inbox preview, and check app release information. The app does not create KCP accounts. Signing in and loading online services require an internet connection.
Information handled
- Account and sign-in: your email address and password are submitted over HTTPS to Khichdi.org to authenticate. The app does not save the password after the sign-in request. The app receives an account ID, display name, email address and role to show the signed-in account and enforce access.
- Enabled modules: the app requests the names, descriptions and access status of modules enabled for your account.
- K-Mail preview: when opened, the app requests the first page of your mailbox and displays message sender, subject, date and unread status. The app's current native preview does not download or persist message bodies or attachments on the device. K-Mail services may process and store mail on their servers under relevant mailbox settings and K-Mail policies.
- Security log: KCP records sign-in success, the account, IP address, device/browser user-agent and time in its server-side login history to protect accounts and investigate access issues.
- Release check: the app requests public version and release-note information from Khichdi.org. The app does not link this request to an advertising profile.
How information is used and shared
Information is used to authenticate your account, provide the requested KCP and K-Mail preview, enforce account access, protect the service and respond to support requests. Requests go to Khichdi.org and its KCP/K-Mail hosting and infrastructure providers as needed to operate those services. The preview build contains no advertising or analytics SDKs, and the developer does not sell personal information. Mail content is also subject to the sender's and recipient's email service providers and your K-Mail settings.
Storage and security
Network requests use HTTPS. The app stores its KCP session cookie in app-private preferences encrypted with a key held in Android Keystore. Android backup is disabled for the app. The current native inbox preview is held in app memory while the screen is open; it is not intentionally written to an app database. KCP server-side account, login-history and mail data remain subject to the retention needed to operate those services and their applicable policies.
No method of online storage or transmission can be guaranteed completely secure. Keep your password private, use a device lock, and sign out on a shared device.
Retention and deletion requests
The app session remains available for up to seven days under the KCP session policy, unless it is revoked earlier or you sign out. Uninstalling the app removes its app-private device data but does not delete a Khichdi account or server-stored mail. To ask about, access, correct or request deletion of your KCP account and associated data, contact support@khichdi.org from the account's registered email address. We may ask for reasonable verification. Some records may need to be retained for security, legal or service-operation reasons; support will explain any applicable retention.
Children's privacy
The preview is a general community account client and is not designed specifically for children. KCP account eligibility and any required guardian or administrator approvals are governed by the KCP signup process.
Changes and contact
Material changes will be reflected on this page with an updated effective date. For privacy questions, email support@khichdi.org.