Privacy Policy

This policy applies to workrotighar.com, the website of Roti Ghar, and to the members-only area behind it. It covers three groups of people: visitors who simply read the site, members and volunteers who hold an account, and the families we support, whose records are handled with the most care of all. By using this site you agree to the handling of information described here. If you disagree with any part of it, please stop using the site and contact us so we can deal with your information appropriately.

If you only read the public pages, we do not ask you for anything. No account is needed and we do not require you to identify yourself. If you apply to become a member or volunteer, we collect the details you enter on the application form — your name, email address, contact number and anything you choose to tell us about yourself — together with the password you set, which is stored only as a cryptographic hash that nobody at Roti Ghar can read or reverse. If you become a member, we additionally hold what you create inside the members area: your profile and photograph, posts and comments in the community feed, records of ration kits you helped pack or deliver, contributions you made in kind, and any files you upload. If you submit the support form, we keep the name and contact details you give us along with your message, so a volunteer can reply. Records about the families we support — household size, circumstances and what was delivered — are recorded by volunteers during a visit. These are the most sensitive records we hold and are treated accordingly.

We use personal information only to run the work. That means: deciding on membership applications; letting you sign in and use the members area; organising packing days and delivery rounds; keeping an honest record of contributions and expenses so members can see the ledger they are part of; making sure a family is served once per round rather than twice or not at all; and replying when you contact us. We do not sell personal information. We do not share it with advertisers, we do not run advertising or third-party tracking on this site, and we do not use your information to build a profile of you for marketing.

Access is restricted in the software itself, not merely by policy. Every table enforces row-level security, so a request that is not entitled to a record simply does not receive it. Public pages are visible to everybody. The community feed, the member directory, ration records and the contribution ledger are visible only to approved members who are signed in. Administrative screens — applications, finance, audit logs, beneficiary records — are restricted to administrators. Records about the families we support are visible only to administrators and to the volunteers running a distribution. We do not publish family names, addresses or photographs of recipients on the public site, and we ask members not to photograph faces during a delivery.

Photographs uploaded by members may appear in the members area, and photographs of the work — packing, storage, vehicles — may appear on the public site. We do not publish identifiable photographs of the families we serve. If a photograph of you appears anywhere on this site and you would like it removed, ask us and we will remove it. We use cookies only to keep you signed in and to keep your session secure. There are no advertising cookies, no analytics cookies and no third-party trackers on this site. Clearing these cookies signs you out; it does not otherwise affect the site. The site and its database are hosted on Supabase, which stores the data and processes it on our instructions as our hosting provider. Email you send us is held in our email account.

Member accounts and their records are kept while the account is active. Distribution and finance records are kept as the historical record of the work, because a ledger that can be quietly rewritten is not a ledger. Support-form messages are kept until they have been dealt with and for a reasonable period afterwards. You may ask us at any time to see a copy of the information we hold about you, correct anything that is wrong, delete your account, or withdraw an application. Write to us using the details on the contact page and we will act on it. Where a record must be kept for the integrity of the ledger, we will tell you which record and why, and remove your personal details from it where we can. This site is not intended for children, and we do not knowingly create accounts for anyone under 18.