Privacy Policy

AromaSetu · Effective date: 8 September 2026

AromaSetu ("AromaSetu", "we", "us") is operated by Aurashine Essentials Private Limited, Mumbai, Maharashtra, India. AromaSetu is a farmer-led data integration tool, library and standing-crop registry for Indian essential-oil and aromatic crops. It is not a buying-and-selling marketplace. This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

• Account and identity: mobile number, name, account identifier, role and language preference. Mobile sign-in uses an SMS one-time password. If you choose Google sign-in, we also receive your Google account identifier, name and email address and link your mobile number.
• Crop and registry records: crop, variety, quantity, farm size, location descriptions, harvest dates, verification status, photos, notes and standing-tree registration details that you submit.
• Location: state, district and village, and precise GPS coordinates when you choose a feature that needs farm or site verification. The public crop map uses coordinates rounded to two decimal places, approximately one kilometre resolution, rather than the stored GPS point. Rounded locations still reveal the general area of a farm. We do not collect background location.
• Photos and documents: crop and farm photos, verification selfies, land-ownership documents and field-visit evidence. Private verification material is access-controlled and is not included in the public crop view. LeafScan processes a photo you select for AI analysis.
• Messages and activity: enquiries, booking requests, service requests, support messages, reports and blocks. Firebase Analytics records app interactions and app-instance identifiers. Push notifications use a device registration token. Saved-listing bookmarks remain on your device.
• Subscriptions: where paid subscriptions are available, Google Play Billing and RevenueCat process purchases and entitlement records. AromaSetu does not receive your card or bank account details.

2. How we use your information

We use this information to sign you in, maintain crop records, display the crop map, support enquiries and field verification, deliver requested notifications and services, manage subscriptions, answer support requests, prevent abuse and understand app usage. We do not sell your personal information or use advertising identifiers in this Android release.

AI photo processing

LeafScan sends the selected crop photo through our backend to Google Gemini for crop identification and visible leaf-condition analysis. Farm-photo validation also uses Google Gemini when the service is configured. Do not submit identity documents or unrelated personal information for AI analysis. AromaSetu does not save LeafScan images on its servers; crop and farm photos submitted with a listing are stored as part of that record. Google handles API inputs according to its applicable service terms and retention settings; this policy does not promise zero retention by Google. AI output may be inaccurate and is not a substitute for a qualified field assessment.

3. What other users can see

Approved crop records can be browsed without signing in. The public view includes crop details, district and state, quantity bands, harvest month, status and a rounded map location. It excludes raw GPS, village, phone number, email and private verification documents. Signed-in users may receive additional listing and contact information through the app where their access permits it. Only publish information and photos you intend to make available with your crop record. Authorised staff and field agents can access information needed for verification and support.

4. Service providers

• Supabase: database, storage and backend functions.
• MSG91: mobile-number processing and delivery of login OTP messages.
• Google Identity Services: optional Google sign-in.
• Google Firebase: app analytics and Cloud Messaging notifications.
• Google Maps: map display and related location services.
• Google Gemini API: crop identification and farm-photo validation.
• Google Play Billing and RevenueCat: subscription purchases and entitlement management where enabled.

These services receive information needed for their functions and handle it under applicable service terms. Processing may occur outside India. Razorpay is not used by this Android release.

5. Data retention and deletion

We retain account information while your account is active and as needed to provide the service. Account deletion removes your personal profile fields, associated crop records, account-linked requests, sessions and stored uploads as described on our account-deletion page. A deleted-account marker remains to maintain database integrity; it no longer contains your name, mobile number, email or sign-in identity. Records required by law may be retained for the applicable statutory period. Moderation records may be retained with account links removed for abuse handling. One-time codes expire within minutes.

Deletion of your AromaSetu account does not automatically cancel a Google Play subscription. Manage or cancel it in Google Play. Google Play and other providers may keep their own transaction or service records under their policies.

6. Your choices and requests

You can browse without creating an account. You may decline camera, location and notification permissions; features needing those permissions may then be unavailable. Google sign-in, AI photo analysis and publishing a crop record are optional. You can edit your profile, request a data export and delete your account from Profile. For access, correction, deletion or withdrawal requests, email info@aurashinearomatics.com. See Delete your AromaSetu account for the in-app and email methods and processing timeline.

7. Security

We apply reasonable technical and organisational measures, including encrypted transport, access controls, and hashed one-time passwords. No system is perfectly secure, but we work to protect your data.

8. Children

AromaSetu is a business platform intended for users aged 18 and above. We do not knowingly collect information from children.

9. Changes

We may update this policy from time to time. Material changes will be reflected by an updated date above and, where appropriate, an in-app notice.

10. Contact