Privacy Policy — VAV

Last updated: 2 July 2026

VAV (“the App”, “we”, “us”, “our”) connects event organizers with volunteers for event staffing. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have.

This policy is provided by BNP GROUP (“the Developer”), the operator of VAV. If you do not agree with this policy, please do not use the App.

1. Who this applies to

This policy applies to everyone who uses VAV, whether as a Volunteer or an Event Organizer.

2. Information we collect

a) Account & identity. Your name, email address, and profile photo — obtained when you sign in with Google, or as you set them in the App — and the role you choose (Volunteer or Organizer).

b) Volunteer profile (if you use the App as a volunteer). City/location, a short bio, skills, languages, available days and time slots, travel radius, and whether you have a vehicle.

c) Identity verification documents. If you choose to verify your identity, an image of a government-issued ID that you upload. This is sensitive information — see Section 8.

d) Activity & reliability data. Events you create (organizers) or apply to (volunteers), your application status, check-in and check-out times, hours logged, and a computed reliability score together with the counts behind it (events applied to, accepted, attended, no-shows, late cancellations, and total hours).

e) Sign-in logs. We keep a record of sign-ins (your user ID, email, role, and a timestamp) for security and operational purposes.

f) Technical data. Our infrastructure providers (see Section 6) may process technical information such as device and connection data as part of delivering the service.

We do not show third-party advertising, and we do not currently use third-party analytics or tracking SDKs. If this changes, we will update this policy.

3. How we use your information

4. How information is shared

With other users of the App. If you are a volunteer, organizers can see your profile (name, photo, city, skills, languages, availability) along with your reliability score and activity when you apply to, or are invited to, their events. If you are an organizer, volunteers can see your name and the details of the events you publish.

With service providers. We host the App’s data with Google Firebase (see Section 6). We do not sell your personal information.

For legal reasons. We may disclose information if required by law, or to protect the rights, safety, or property of our users or the public.

5. Legal bases (where applicable)

Where data-protection law applies, we process your information to perform our contract with you (providing the App), on the basis of your consent (for example, uploading an ID document), for our legitimate interests (security and preventing abuse), and to comply with legal obligations.

6. Third-party services

VAV is built on Google Firebase (Authentication, Cloud Firestore, and Cloud Storage) and uses Google Sign-In, all provided by Google LLC. Your use of Google Sign-In and the storage of your data on Firebase are subject to Google’s Privacy Policy: https://policies.google.com/privacy

7. Data storage & security

Your data is stored on Google Firebase’s cloud infrastructure. Access is restricted to authenticated users through security rules, and uploaded files are kept in access-controlled storage. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

8. Identity documents (sensitive data)

Government-ID images are collected only if you choose to verify your identity, are used solely for that purpose, and are stored in access-controlled Firebase Storage. They are deleted when you delete your account (see Section 10).

9. Data retention

We keep your personal information for as long as your account is active. When you delete your account, we delete your profile, your applications, the events you organized and their applicant records, and your uploaded files. Certain limited sign-in log entries may be retained for a reasonable period for security and audit purposes.

10. Your rights and choices

Access & correction. You can view and edit your profile information at any time in the App (Profile → Edit).

Account & data deletion. You can permanently delete your account and its data from within the App: go to Profile → Delete account and confirm. This removes your profile, your applications, any events you organized (and their applicant records), your uploaded photo and ID document, and your sign-in account. This action cannot be undone.

Depending on where you live, you may have additional rights (such as access, correction, deletion, portability, or objection) under laws like India’s Digital Personal Data Protection Act, 2023, or the EU/UK GDPR. To exercise these, contact us (Section 13).

11. Children’s privacy

VAV is intended for users aged 18 and older and is not directed to children. We do not knowingly collect personal information from children.

12. International transfers

Google Firebase may store and process data on servers located outside your country. By using the App, you understand that your information may be transferred to and processed in such locations, with safeguards as required by applicable law.

13. Contact us

For any questions, or to exercise your rights, contact:

BNP GROUP
Email: nikhil@bnpgroup.in
Bangalore, Karnataka, India

14. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you in the App.