Legal

Privacy Policy

How Digi Swagat handles personal information across our platform and the DiGi Check-In app — what we collect, why we collect it, and the choices you have.

Last updated: 27 August 2026

Digi Swagat provides event check-in, badging and registration software. This policy explains, in plain terms, how personal information is handled in our platform and in the DiGi Check-In mobile app (Google Play package com.digiswagat.checkin) — the app event crews use at the door to scan passes, register walk-ins and print badges.

Who we are

In this policy, “Digi Swagat”, “we”, “us” and “our” refer to the operator of the Digi Swagat platform and the DiGi Check-In app. You can reach us at hello@digiswagat.com for any privacy question or request.

Two roles, two kinds of data

Our service handles two different kinds of personal data, and our responsibility differs for each. This distinction matters, so we state it up front:

Attendee data belongs to the event organiser

The guest list our software processes for an event — attendee names, email addresses, phone numbers, and the record of their check-ins — belongs to the event organiser. We process it only on that organiser’s instructions, to run their event. For this data the organiser is the controller (a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023) and Digi Swagat acts as a Data Processor. Giving attendees notice and collecting their consent is the organiser’s responsibility; ours is to handle the data only as instructed and keep it secure.

Operator accounts belong to us

The crew and operator accounts used to sign in to the app are created and managed by us and by event administrators. For this account data we are the controller and decide how it is used, as described below.

What the DiGi Check-In app collects

Operator sign-in: The crew account you sign in with (an identifier and your authentication). Accounts are provisioned by an organiser or administrator — the app has no public sign-up.
Attendee details: Name, email address and phone number, captured when an operator registers a walk-in or corrects an attendee’s contact details, and sent to the event’s backend to issue or update a pass.
Check-in activity: Which pass was scanned, at which gate or zone, and when — recorded to admit attendees and to prevent duplicate entry.
A device identifier: A random value the app generates on the device — not your phone’s hardware or advertising ID — used only to de-duplicate print jobs and reconcile actions taken while offline.

What the app does not collect

No photos or video. The camera is used only to read QR codes. Frames are decoded on the device; no image is stored or sent anywhere.
No audio. The app plays check-in tones through the speaker but does not record audio, and does not request the microphone permission.
No location, contacts or files are accessed.
No advertising IDs and no third-party analytics, advertising or tracking SDKs. We do not sell personal information and do not share it with advertisers.

Working offline — data stored on the device

Venue Wi-Fi fails; the door cannot. So the app downloads a copy of the event’s attendee roster — names, email addresses, phone numbers and pass details — and keeps it on the device so scanning and registration keep working without a connection. This copy:

exists only for the one event the device is set up for;
is held in the app’s private, sandboxed storage that other apps on the device cannot read; and
is removed when the operator clears the station or signs the device out, and when the organiser resets the event’s data.

How we protect information

All communication between the app and our servers uses encrypted connections (HTTPS/TLS).
Sign-in credentials are stored using the device’s hardware-backed secure keystore, not general app storage.
Access is role-based: an operator sees only the event and the actions their assigned role permits.

Who we share data with

We do not sell personal information. We share it only where necessary to run the service:

With the event organiser who owns the attendee data — it is theirs.
With the infrastructure providers that host our servers, strictly to operate the service on our and the organiser’s instructions.
Where required by law, or to protect the rights and safety of people and our service.

How long we keep it

Attendee data is retained for as long as the organiser’s event and account require, and is deleted or returned on the organiser’s instruction or when their agreement with us ends. The copy stored on a device is transient and is cleared as described in Working offline above. Operator account data is kept for as long as the account is active.

Your choices and rights

Because the guest list is controlled by the event organiser, an attendee who wants to access, correct or delete their information should contact the organiser of the event they attended; we will support the organiser in fulfilling that request. Under India’s Digital Personal Data Protection Act, 2023 you may have rights of access, correction and erasure, and the right to grievance redressal.

For operator accounts, or any request you cannot route through an organiser, contact us at hello@digiswagat.com. The app has no self-service sign-up, so there is no in-app account to delete; to close an operator account or request deletion of associated data, contact us or your administrator.

Children

The service is intended for event staff and adult attendees. It is not directed at children, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the current version, and we will post material changes on this page.

Contact & grievances

For any privacy question, request or complaint, reach our privacy contact at hello@digiswagat.com. You can also message us on Instagram. We aim to respond within a reasonable time and, where the law sets one, within the required period.