Privacy Policy
Effective date: July 8, 2026 · App: Shikara (com.shikara.app)
This Privacy Policy describes how the Shikara app ("Shikara", "we", "our", "us") collects, uses, and protects information when you use our mobile application to book shikara rides, houseboats, and related experiences on Dal Lake and across Kashmir.
1. Information We Collect
Information you provide
- Phone number — used to verify your identity via OTP and to send booking confirmations via WhatsApp or SMS.
- Name — displayed on your profile and included in booking records shared with your selected houseboat or shikara operator.
- Payment information — collected and processed by Razorpay. We do not store card numbers, bank account details, or UPI credentials on our servers.
- Trip preferences — travel dates, number of guests, and special requests you enter while making a booking.
Information collected automatically
- Device information — device model, operating system version, and app version; used for compatibility and crash diagnostics.
- Usage data — screens visited and features used; used in aggregate to improve the app.
- IP address — logged for security, fraud prevention, and rate limiting.
2. How We Use Your Information
- To verify your identity and keep your account secure (OTP login).
- To process your shikara and houseboat bookings and send confirmation messages.
- To share necessary booking details (name, contact) with your chosen operator.
- To send booking updates, reminders, and support communications.
- To detect and prevent fraud or misuse of the platform.
- To improve app features using aggregated, anonymised analytics.
- To comply with applicable Indian laws and regulations.
3. Sharing Your Information
We do not sell your personal data. We share it only with:
- Shikara & houseboat operators — your name and contact number are shared with the operator you book with, so they can prepare for your arrival.
- Razorpay — our payment processor. Governed by Razorpay's Privacy Policy.
- OTP / messaging providers — your phone number is passed to Fast2SMS, MSG91, or Twilio solely to deliver your one-time verification code or booking notification.
- Legal authorities — when required by Indian law, court order, or to protect the rights and safety of our users.
4. Data Retention
We retain your account information and booking history for as long as your account is active or as required to fulfil our legal and tax obligations (typically 7 years for financial records under Indian GST law). You may request deletion of your account at any time; see Section 7.
5. Security
All data is transmitted over HTTPS. Passwords and sensitive credentials are hashed before storage. Access to production databases is restricted to authorised personnel. While we take reasonable precautions, no system is completely secure, and we cannot guarantee that unauthorised access will never occur.
6. Children's Privacy
The Shikara app is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will delete the data promptly.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your account and associated data.
- Opt out of non-essential communications.
To exercise any of these rights, contact us at support@thesojourn.in. We will respond within 30 days.
8. Third-Party Links
The app may display links to third-party websites or services (e.g., operator websites). We are not responsible for the privacy practices of those external services.
9. Changes to This Policy
We may update this Privacy Policy as the app evolves. Material changes will be notified within the app or via your registered phone number. Continued use after notification constitutes acceptance of the updated policy.
10. Contact
For any questions or concerns about this Privacy Policy:
- Email: support@thesojourn.in
- Website: https://thesojourn.in