About this notice
This Privacy Notice explains how Khemraj Maniklal Shrisharimal Charitable Trust ("we", "us"), the Data Fiduciary for My Joy of Giving (https://myjoyofgiving.com and the My Joy of Giving Android app), processes your personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules).
Registered address: 5, South Avenue, Choubey Colony, Raipur, Chhattisgarh – 492001
Effective date: 21 October 2026
Who can create an account
Anyone can take part in giving. If you are 18 or older, you create the account yourself. If you are under 18 (a "child" under the DPDP Act), you may create an account only with the verifiable consent of your parent or lawful guardian: at signup you choose "I am under 18 and my parent/guardian consents" and give your parent/guardian's name and email, and we may contact them to verify that consent before or after the account is activated.
For children's accounts:
- We process a child's personal data only with verifiable parent/guardian consent, and only to run the account and the donations, food rescue or help requests the child takes part in.
- We do not track or monitor the behaviour of children, and we do not show them targeted advertising.
- A parent or guardian can ask to see, correct or delete the child's data, or withdraw consent, by writing to the Grievance Officer.
If you believe a child has registered without parent/guardian consent, contact our Grievance Officer and we will suspend or delete the account.
Personal data we collect, why, and how long we keep it
We ask for your consent when you create an account. Each item below lists what we collect, the purpose, and how long we keep it.
Account details
- What: name, email address, mobile number, account type (donor, receiver, NGO, volunteer, food provider) and password (stored only as a one-way hash). If you sign in with Google, we receive your name and email from Google.
- Purpose: create and secure your account, sign you in, and contact you about your donations, requests and account.
- Retention: while your account is active. When you delete your account, your name, email, mobile number and password are removed and replaced with anonymous values straight away.
Location and address
- What: country, state, city, locality and address; your current location only when you choose "Use current location".
- Purpose: show nearby donations, food and help requests, and arrange pickups.
- Retention: while your account is active; removed straight away when you delete your account.
Profile photo (optional)
- What: a photo you upload.
- Purpose: show your profile to other users you work with.
- Retention: until you remove it or delete your account.
Donations, food rescue and requests
- What: listings, photos, descriptions, pickup addresses and times, requests, status updates, comments and feed posts you create.
- Purpose: match donors with receivers and NGOs, coordinate pickup and delivery, prevent duplicate claims, and show community impact.
- Retention: kept as part of the donation history. After you delete your account these records stay linked only to an anonymous "Deleted User" account.
NGO and food provider profiles
- What: organisation name, contact person, registration details and documents you submit for verification.
- Purpose: verify organisations before they receive donations and show their public profile.
- Retention: while the organisation account is active; personal contact details are removed when the account is deleted.
Emergency help campaigns
- What: beneficiary details, supporting documents and bank details you submit.
- Purpose: verify that a campaign is genuine and prevent fraud. Bank details are visible only to platform administrators.
- Retention: until the campaign is closed, and after that only for as long as Indian law requires us to keep fraud-prevention or financial records.
Support, feedback and grievances
- What: messages you send through Contact, Help / Support, feedback, grievance and account deletion forms.
- Purpose: answer your request and keep a record of how it was resolved.
- Retention: one year after the request is closed, then deleted.
Device, log and security data
- What: IP address, browser or device type, pages visited, sign-in times and error logs.
- Purpose: keep the service secure, prevent abuse and fraud, and meet legal obligations.
- Retention: one year, then deleted unless needed for an ongoing investigation.
App error reports and problem reports
- What: when the app crashes or a request fails, a technical report with the error message, the screen, the app version and device platform. It contains no name, email or phone number; your account is stored only as a one-way code. If you use "Report a problem", your description and, only if you tick the consent box, a screenshot you choose.
- Purpose: find and fix bugs so the app works reliably.
- Retention: error reports 90 days after they were last seen; problem reports and screenshots like other support messages (one year after the request is closed), then deleted.
Consent records and data rights requests
- What: the version of this notice and the Terms you accepted, when and from which channel (web, app or Google), and your age choice (18 or older, or under 18 with parent/guardian consent, with the parent/guardian's name and email), whether you withdrew consent, and the data rights requests you make (download, correction, consent withdrawal, erasure).
- Purpose: show that we have your consent and that we handled your requests.
- Retention: kept with your account record, including after account deletion, as proof of consent.
Who we share your data with
- Other users, only when you take part in a donation, food rescue or help request with them (for example, contact details needed to arrange a pickup after a request is approved).
- Visitors to the site and app, for content you choose to publish (listings, campaigns, NGO profiles, comments and feed posts).
- Platform administrators, to verify NGOs and campaigns and to handle reports.
- Service providers (Data Processors) who host the service, send email and provide Google Sign-In, under contract and only on our instructions.
- Government or law enforcement authorities, when required by law.
We do not sell your personal data. Some service providers, such as Google, may process data outside India; any transfer follows the restrictions notified by the Government of India under the DPDP Act.
Your rights
Under the DPDP Act you have the right to:
- Access: get a summary of the personal data we hold about you, how we process it, and who we have shared it with. Under Profile, then Your data and privacy, choose Download my data: we email you a download link that works for 7 days.
- Correction: correct, complete or update your data. You can edit most details under Profile, or send a correction request from Your data and privacy.
- Erasure: delete your account (Profile, then Delete account, or the Account Deletion page). If you sign in with Google and have no password, we confirm it is you with a code sent to your email. We keep only what the law requires.
- Withdraw consent: withdraw your consent at any time, as easily as you gave it, from Profile, then Your data and privacy, or by writing to the Grievance Officer. We stop optional notifications straight away. Your account cannot work without your personal data, so if you do not want us to process it any more, delete your account. Processing done before withdrawal stays lawful.
- Nominate: name another person to exercise these rights for you if you die or become unable to act.
- Grievance redressal: complain to our Grievance Officer. We will respond within 90 days.
You can also use any of these rights by contacting the Grievance Officer below. We may ask you to verify your identity first.
Grievance Officer
- Name: Naman Khampariya
- Email: contactus@myjoyofgiving.com
- Phone: +91 93038 73141
- Address: Khemraj Maniklal Shrisharimal Charitable Trust, 5, South Avenue, Choubey Colony, Raipur, Chhattisgarh – 492001
You can also raise a grievance from Help / Support on the website or app.
Complaint to the Data Protection Board of India
If you are not satisfied with our response to your grievance, you have the right to file a complaint with the Data Protection Board of India under the DPDP Act.
Personal data breach
If a personal data breach affects you, we will tell you without delay by email, SMS or in-app notice. We will describe what happened, the likely consequences, what we are doing about it, the steps you can take to protect yourself, and who to contact. We will also report the breach to the Data Protection Board of India as the DPDP Rules require, including a detailed report within 72 hours.
How we protect your data
We use HTTPS encryption, hashed passwords, role-based access for administrators, and activity logs to protect your data.
Changes to this notice
When we change this notice we update the effective date above and ask you to accept the new version before you continue using your account.