Privacy Policy & Terms

This platform is operated by CommuniTREE (“we”, “us”, “the platform”). For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary that decides how and why your personal data is processed. You can reach us at shashank@tndwwt.org.

We only collect what we need to run a pledge, quiz, or certificate. Specifically:

• Your name — printed on your pledge or quiz certificate.
• Email address — to send your certificate and, where you opt in, news about future initiatives.
• WhatsApp / phone number — to share your certificate and event updates.
• Your photo (optional) — if you choose to add one, it is used entirely within your own browser/device to draw your certificate image. It is never uploaded to, transmitted to, or stored on our servers or database, and it is discarded the moment you close or leave the page. Adding a photo is never required to take a pledge or receive your certificate.
• Quiz answers and score — to generate your result and certificate.
• Organisation enquiry details — if you partner with us (organisation name, contact name, email, phone, and message).
• Newsletter email — if you subscribe through our footer.

We do not ask for, or knowingly collect, any sensitive identifiers such as government ID numbers, financial details, location, health, caste, or religious data, and we do not build advertising or behavioural profiles about you.

We process your data only for the specific purpose you give it to us — generating your certificate, recording your pledge or quiz participation, responding to your enquiry, or (only where you separately opt in) sending you updates about similar initiatives.

Before you submit a pledge or quiz, you are asked to tick a box confirming you have read and agree to this Privacy Policy. That tick is your consent under Section 6 of the DPDP Act. You are never pre-opted-in; you must actively tick the box yourself, and you may withdraw consent at any time (see Your rights). Marketing/newsletter consent is always a separate, optional choice — declining it never blocks you from getting your certificate.

Many of our pledges and quizzes run in schools, so we take children’s data seriously. Under Section 9 of the DPDP Act, the personal data of a child (anyone under 18 years of age) may only be processed with the verifiable consent of a parent or lawful guardian.

By submitting a pledge or quiz on behalf of, or as, a person under 18, you confirm that:

• you are the parent, legal guardian, or an authorised teacher/school representative, and
• you have the consent of the child’s parent or guardian to provide that child’s name, photo, and other details for the purpose of issuing a certificate.

We do not use a child’s data for behavioural tracking, advertising, or any profiling. We do not knowingly send marketing messages to children. If you believe a child’s data has been submitted without proper consent, contact our Grievance Officer below and we will delete it promptly.

We practise data minimisation. We do not keep your personal data indefinitely. Personal data submitted through pledges, quizzes, certificate requests, and organisation enquiries is automatically and permanently deleted 3 months (90 days) after it is submitted. This runs on an automated schedule — no manual step is required, and once deleted the data cannot be recovered.

The only exception is the newsletter: if you actively subscribe, we keep your email for as long as you remain subscribed, because that is an ongoing service you asked for. You can unsubscribe at any time, after which it is removed.

We never store your photo. If you add one, it is processed entirely on your own device to render your certificate and is discarded when you leave the page — it never reaches our servers or database, so there is nothing on our side to delete or retain.

We do not sell your personal data. We share it only with service providers who help us run the platform (for example, our hosting and database providers) under confidentiality obligations, and only as needed to deliver the service to you. Where you take a pledge or quiz hosted by a partner organisation (such as your school or company), your participation may be shared with that organisation so they can recognise your involvement.

We apply reasonable technical and organisational safeguards, including access controls on our admin tools and encrypted connections, to protect your data against unauthorised access, loss, or misuse. No system is perfectly secure, but the short 3-month retention window limits how much data ever exists at any time.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you;
• Correct or update inaccurate or incomplete data;
• Erase your data before the automatic 3-month deletion;
• Withdraw consent at any time, including unsubscribing from updates;
• Grievance redressal — raise a complaint about how we handle your data.

To update or delete your data, simply email us at shashank@tndwwt.org with the request and the name/email you used. We will action verified requests within a reasonable period and confirm once done.

In line with Section 13 of the DPDP Act, we have appointed a Grievance Officer you can contact with any question, concern, or complaint about your personal data:

If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

We may update this policy as our platform or the law evolves. The “Last updated” date at the top reflects the latest version. Material changes will be highlighted on this page.