Privacy Policy & Applications Ecosystem

01. Scope & Corporate Identity

This Privacy Policy applies to all digital interfaces, software platforms, online services, and mobile applications operated by Dhruva Defence Systems Ltd. ("Dhruva Defence", "we", "us", or "our"), headquartered at Defence Technology Park, Sector 4, Pune, Maharashtra 411001, India.

We specialize in electro-magnetic sensing, lightning warning networks, early-warning radars, tactical communications, and high-reliability field software. We are firmly committed to safeguarding personal, institutional, and telemetry data entrusted to us, adhering strictly to the Digital Personal Data Protection (DPDP) Act, 2023 (India), ISO/IEC 27001 data protection standards, and aerospace data security best practices.

DEFENCE-GRADE PRIVACY COMMITMENT We do not sell, rent, monetize, or commercialize any personal or organizational data to data brokers, advertisers, or unaffiliated commercial entities under any circumstances.

02. Information We Collect

Depending on your interaction with Dhruva Defence, we collect the following categories of data:

A. Information You Voluntarily Transmit

Inquiry & Trans-Portal Data: Name, institutional designation, verified official email address, telephone contact, operational subject matter, and message payloads transmitted via our encrypted communications portal.
Contractual & Procurement Records: Enterprise credentials, NDA records, and authorized personnel identifiers for client organizations deploying hardware or software suites.

B. Automated Technical & Diagnostic Information

Network & Request Metadata: Internet Protocol (IP) address, approximate geographic origin, browser type, operating system build, referring URLs, and request timestamps to prevent unauthorized penetration attempts.
Security Telemetry: Anonymized honeypot triggers, rate-limit statistics, and cryptographic handshake status to mitigate automated bot incursions.

03. Mobile & Tactical Applications Ecosystem

Dhruva Defence develops specialized mobile and field applications designed for defense personnel, industrial hazard teams, meteorology stations, and field operations. Our software portfolio encompasses both actively published applications and pipeline applications currently in development.

LIVE ON GOOGLE PLAY

Dhruva LDS (Lightning Detection)

Package: com.dhruva.lds

Real-time atmospheric electrostatic discharge monitoring client. Delivers instant lightning proximity alerts, strike intensity diagnostics, and storm vector tracking directly to field operators and asset custodians.

Critical Permissions Required

ACCESS_FINE_LOCATION POST_NOTIFICATIONS INTERNET WAKE_LOCK

GET IT ON Google Play Store

IN DEVELOPMENT

Dhruva Radar EW Mobile Viewer

Identifier: com.dhruva.ewradar (Internal)

Tactical handheld situational awareness client providing encrypted situational feeds from EW-09 AESA radar arrays for distributed air and perimeter surveillance.

Planned Permissions Scope

SECURE_NETWORK_SOCKET HARDWARE_KEYSTORE BIOMETRIC

RESTRICTED / CLOSED FIELD TESTING Deployment is restricted to authorized defense testbeds and accredited security evaluators under non-disclosure agreements.

IN DEVELOPMENT

Dhruva Tactical Comms (Secure Mesh)

Identifier: com.dhruva.tacticalcomms

Zero-trust, peer-to-peer ad-hoc battlefield communication matrix incorporating asymmetric post-quantum encryption for mission squads operating beyond conventional cellular range.

Planned Permissions Scope

NEARBY_WIFI_DEVICES RECORD_AUDIO (Push-to-Talk) BLUETOOTH_ADVERTISER

R&D PIPELINE PHASE Zero voice or transmission audio is cached on external cloud infrastructure. All packets are ephemerally routed with hardware-level zeroization.

Detailed App Permissions Disclosure (Dhruva LDS - com.dhruva.lds)

In strict alignment with Google Play Developer Program Policies and international privacy guidelines, below is the transparent disclosure of why each permission is requested by our live application:

Permission	Technical Identifier	Operational Necessity	Data Retention
Precise & Approximate Location	ACCESS_FINE_LOCATION ACCESS_COARSE_LOCATION	Required strictly to compute the real-time distance and bearing between the user's field position and detected lightning discharge strikes (e.g. within 5 km, 10 km, or 20 km radius).	Never Stored or Sold. Coordinates are processed ephemerally on the client device solely for perimeter calculation.
Push Notifications	POST_NOTIFICATIONS	Required to dispatch high-priority life-safety warnings when dangerous cloud-to-ground strikes or severe squall lines approach the monitored perimeter.	Push tokens are stored securely and invalidated upon application uninstallation or user logout.
Full Network Access	INTERNET ACCESS_NETWORK_STATE	Enables the application to establish encrypted TLS 1.3 telemetry streams with Dhruva Defence central sensor matrices to receive live strike coordinates.	Standard secure server access logs retained for 90 days for network integrity auditing.
Background Execution & Wake Lock	WAKE_LOCK FOREGROUND_SERVICE	Allows the alert daemon to function continuously during severe weather events so field personnel receive alerts even when the device display is locked.	No device telemetry is recorded while running in the background.

PIPELINE APPLICATIONS PRIVACY PLEDGE All in-development and future mobile applications built by Dhruva Defence undergo rigorous sandbox code evaluations and third-party penetration testing prior to release. They adhere to the principle of Least Privilege—never requesting device hardware capabilities beyond what is fundamentally necessary for mission execution.

04. Purposes & Legal Grounds for Processing

We process data under lawful bases recognized under the DPDP Act 2023 and international jurisprudence:

Contractual & System Fulfillment: To deliver real-time atmospheric warnings, system telematics, and operational hardware status requested by our clients.
Life-Safety & Emergency Mitigation: Processing geospatial data to provide early lightning and atmospheric hazard notifications to prevent human fatalities and infrastructure destruction.
System Integrity & Defence Security: Auditing network transmissions to defend against cyber warfare, distributed denial-of-service (DDoS) assaults, and unauthorized telemetry interception.
Explicit Consent: Where you voluntarily transmit inquiries or opt into beta testing programs for upcoming applications.

05. Data Security & Defence Cryptography

Operating within the defense and aerospace domain demands the highest standards of data confidentiality and resilience. Dhruva Defence enforces:

Encryption in Transit: All HTTP and telemetry communications utilize Transport Layer Security (TLS 1.3) with PFS (Perfect Forward Secrecy) cipher suites.
Encryption at Rest: Internal operational databases, telemetry backups, and access records are encrypted using AES-256 bit military-grade standards.
Air-Gapped Enterprise Options: For sovereign military installations, LDS server stacks are capable of operating in fully air-gapped, closed-loop local networks with zero external internet dependencies.
Zeroization Protocols: Tactical handheld software includes hardware-accelerated memory zeroization routines upon credential invalidation or hardware tampering.

06. Third-Party Services & Infrastructure

To maintain resilient, low-latency global delivery, we partner exclusively with verified, high-assurance infrastructure providers:

Google Play Services: Used strictly for secure binary distribution, cryptographic app signing, and push notifications delivery (Firebase Cloud Messaging) for the Dhruva LDS Android application.
Cloudflare Edge Network: Provides web application firewall (WAF), distributed denial of service mitigation, and encrypted CDN edge routing for web portals.
Autonomous Sensor Nodes: Lightning detection and radar telemetry originate from proprietary hardware built and operated by Dhruva Defence, ensuring sovereign hardware chain of custody.

We do not integrate any third-party behavioral advertising trackers, data broker SDKs, or social media tracking pixels on our systems or inside our mobile applications.

07. Data Retention & Deletion Protocols

We retain personal information only for as long as is necessary to fulfill operational, statutory, and safety purposes:

Contact Transmissions: Retained for a maximum of 24 months after communication resolution, or archived securely in compliance with defence contract procurement mandates.
LDS Atmospheric Telemetry: Anonymized lightning discharge parameters (strike timestamp, kA peak current, location coordinate) are archived indefinitely for scientific climatology and radar calibration studies without associating individual identity.
App Account & Notification Tokens: Erased immediately upon account deletion or application deregistration. Users can request immediate data purging by submitting a signed request to privacy@dhruvadefence.com.

08. User Rights & Statutory Safeguards

Under the Digital Personal Data Protection Act, 2023, and global data privacy standards, you hold the following rights:

Right to Access: You may request a verified summary of personal data held about you by Dhruva Defence.
Right to Correction & Erasure: You may request the correction of inaccurate personal data or complete erasure where processing is no longer warranted.
Right to Grievance Redressal: You may register inquiries or complaints with our designated Data Protection Officer.
Right to Nominate: You may nominate an authorized representative to exercise data rights on your behalf in the event of death or incapacity.

To exercise any of these statutory rights, please transmit your request with verifiable identity details to our Data Protection Officer as detailed in Section 10 below.

09. Children's Privacy

Dhruva Defence systems, enterprise portals, and mobile applications (including Dhruva LDS) are intended strictly for adult professional operators, military personnel, and industrial facility custodians. We do not knowingly solicit or collect personal data from individuals under the age of 18. If we become aware that personal information of a minor has been collected without verifiable parental or guardian consent, we will take immediate steps to delete such records from our databases.

10. Data Protection Officer & Contact Office

For any questions regarding this Privacy Policy, our mobile application practices, or to exercise statutory privacy rights, please direct your communication to:

OFFICE OF THE DATA PROTECTION OFFICER (DPO)

Entity: Dhruva Defence Systems Ltd.

Facility: Defence Technology Park, Sector 4, Pune, Maharashtra 411001, India

Dedicated Privacy Email: privacy@dhruvadefence.com

Corporate Operations Email: contact@dhruvadefence.com

Response SLA: In accordance with statutory norms, all valid privacy grievances are acknowledged within 48 hours and resolved within 30 operational days.

This document is subject to periodic updates to reflect legislative revisions and mobile application feature expansions. Any material modifications will be announced on this page with an updated version revision stamp.