manzil is a group-travel companion app for friend groups in India, operated by Forty Two Services ("we", "us"). This policy explains what we collect, what we don't, and how the few things we do collect get used. It's written to be readable in one sitting.
What We Collect
- Your email address and password. manzil uses email and password as your sign-in credential. Your password is stored as a salted hash, we never see or store it in plain text.
- A display name. Whatever you set so trip-mates can recognise you. Change it anytime.
- Your phone number, only if you choose to add one. It's an optional profile field, contact information, not a credential, and only you can see it on your own profile.
- Trip data you put in. Trip names, expenses, settle-ups, photos, and notes you create or share.
- Location, only when you turn it on. Location sharing is strictly opt-in and time-bounded, you pick a duration (e.g. 4 hours) and the share ends automatically. Pings are visible only to other members of the same trip.
What We Don't Collect
- No social-network identity. We don't offer Google, Facebook, or any other social login.
- No location data outside of explicit, time-bounded shares. We never track you in the background.
- No GPS coordinates in your photos. EXIF location metadata is stripped both on your device and on our servers before storage.
- No location data is ever sent to our analytics provider. Coordinates stay inside your trip, they never leave for any third-party tool.
How Your Data Is Used
- To run the app. Your email and password authenticate you. Your trip data syncs to other members of trips you join.
- To send verification and password-reset codes. We email a six-digit code to confirm your address when you sign up, and again if you ever reset your password. No SMS is sent as part of this.
- To improve the product. We use PostHog to record product-usage events tied to your account (for example, that you created a trip or added an expense) so we can see which parts of manzil people actually use. Every event carries only enum, number, or boolean properties, plus a trip id where relevant. We never send free text (expense descriptions, board posts, checklist items), coordinates, your email, or your phone number to PostHog, and we don't record session replays or turn on autocapture. There is currently no analytics opt-out.
How Long We Keep It
- Active trips: kept as long as the trip exists.
- Archived trips: location pings are purged within 24 hours of archival. Expenses and photos are kept indefinitely, they're the memory keepsake of the trip and trip-mates may still need them.
- Deleted accounts: see the next section.
Your Rights, Account Deletion (DPDP Act 2023)
Forty Two Services is the Data Fiduciary for your manzil account under India's Digital Personal Data Protection Act 2023. The Act gives you a right to delete your account, free of cost. Here's how:
- How to ask: in-app, from Me → Delete Account. If you can't get into the app, email support@saathmanzil.com from the email address on your account with the subject line "Delete my manzil account".
- 7-day cooling window. Your account enters a "deletion-pending" state for 7 days. You can cancel anytime in that window, in-app or by replying to the same email.
- What gets erased: your email, password, phone number (if you added one), display name, avatar, and UPI VPA. After erasure, you cannot be looked up by that email or phone again.
- What stays (anonymised): expenses you paid for or were split on, and photos you uploaded to shared trips. Your name on these is replaced with "(deleted user)" so that your trip-mates' settle-up math and shared memories stay intact. This is allowed under the DPDP Act's "legitimate purpose" carve-out for shared-context data.
- How fast: we'll confirm initiation within 48 hours and complete the erasure within 7 days of the cooling window ending.
Third Parties We Use
- Amazon SES, sends the verification and password-reset emails.
- PostHog Cloud, product analytics tied to your account id (never location).
- AWS, hosting (servers, database, photo storage in the Mumbai region).
We don't sell your data. We don't share it with advertisers. We don't have advertisers.
Children
manzil is for users aged 18 and over. We do not knowingly create accounts for minors. If you believe a minor has signed up, email support@saathmanzil.com and we'll remove the account.
Contact
Questions, requests, or anything that feels off, email support@saathmanzil.com. A real person at Forty Two Services reads every message.