Privacy Policy

Last updated: June 2026  |  B The Change Welfare Society, Hyderabad, India

1. Who we are

B The Change Welfare Society ("we", "our") is a non-profit welfare society registered in Telangana, India. We operate the website and mobile application at bthechange.in ("the App"). Our programs serve school children, volunteers, and community members across India.

2. What data we collect

• Phone number — used to send a one-time password (OTP) for login. We do not store your phone number on our servers beyond what Supabase Auth requires for authentication.
• Display name and role — entered during profile setup (kid, volunteer, beneficiary, partner).
• Story or impact submissions — text, photos, and links you voluntarily submit through the app.
• Video call attendance — records of online class participation (date and session joined).
• Progress data — coding module completions and quiz scores for the Kids portal.
• Event attendance — if you register to volunteer at an event.
• Award nominations — contact details and descriptions submitted through the nominations form.

We do not collect payment information, precise location, device contacts, or browsing history outside the App.

3. How we use your data

• To authenticate you and keep your session secure.
• To show your progress, certificates, and submitted stories within your own portal.
• To allow our program staff to review and approve submissions.
• To issue certificates of completion to children who finish coding modules.
• To communicate program updates via the in-app video call scheduler.

We do not sell, rent, or share your personal data with advertisers or third-party marketing platforms.

4. Children's privacy

The Kids portal is intended for use under parental or teacher supervision. We do not knowingly collect personal information from children under 13 without verified parental consent. Children use a shared login managed by their school or program coordinator. If you believe a child's data has been collected without proper consent, contact us immediately at the address below.

5. Third-party services

• Supabase (supabase.com) — database and authentication. Data is stored in Supabase's EU/US data centres. See Supabase Privacy Policy at supabase.com/privacy.
• Authkey.io — OTP SMS delivery. Your phone number is transmitted to Authkey solely to deliver the login OTP and is not stored by them beyond regulatory requirements for telecom operators.
• Google Fonts — font files are loaded from fonts.googleapis.com. Google may log request metadata per their privacy policy.

6. Data retention

Your account and associated data are retained for as long as your account is active. You may request deletion of your account and all associated data by contacting us. Submissions that have been publicly approved (stories, blog posts) may be retained in anonymised form for our program archive.

7. Security

All data is transmitted over HTTPS. Our database uses row-level security (RLS) so users can only access their own records. Admin access is restricted to verified organisational staff. We do not store passwords — authentication is entirely OTP-based.

8. Your rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us using the details below. We will respond within 30 days.

9. Changes to this policy

We may update this policy as our app evolves. The "last updated" date at the top will reflect any changes. Continued use of the App after a policy update constitutes acceptance of the new terms.