Official Legal Document LazymonkeyAi Platform Version 1.0.1 DPDP Act 2023 Compliant

LazymonkeyAi Citizen Services Privacy Policy & Terms of Service

Data Governance Commitment

The LazymonkeyAi Citizen Services Application is designed to empower citizens, farmers, and livestock owners across the state. We enforce strict data minimisation, tokenized API security, and transparent location tracking to ensure your personal credentials and agricultural data remain fully protected.

1. Legal Definitions & Terminology

Throughout this Privacy Policy and Terms of Service document, the following capitalized terms shall have the specific meanings assigned below:

Term Legal & Technical Definition
"Application" / "App" Refers to the Flutter-based LazymonkeyAi Citizen mobile application (Package name citizen, Version 1.0.1+101) for Android and iOS devices.
"LazymonkeyAi Citizen" The digital platform operated by LazymonkeyAi Technologies providing Citizen & Veterinary Husbandry Services.
"Citizen" / "Farmer" / "User" Any natural person aged 18 or older who registers an account, accesses, or submits service requests through the Application.
"Personal Data" Any data about an individual who is identifiable by or in relation to such data, including name, mobile number, Aadhaar number, GPS coordinates, and livestock ownership records.
"Farmer UUID" / "Citizen ID" The unique 128-bit Universally Unique Identifier assigned by the LazymonkeyAi server database upon citizen account registration.
"GPS Coordinates" The precise real-time latitude and longitude coordinates obtained via the device's Location Services API (using the Flutter geolocator plugin).
"Place of Working" An official veterinary dispensary, hospital, artificial insemination center, or government livestock institution registered in the LazymonkeyAi master database.
"JWT Bearer Token" A cryptographic JSON Web Token issued by POST /citizens/login/citizen and sent in the Authorization: Bearer <token> HTTP header for API request authentication.
"DPDP Act" The Digital Personal Data Protection Act, 2023 (India) and any statutory rules or amendments enacted thereunder.

2. Scope, Applicability & Governing Law

2.1 Statutory Framework: This Policy is formulated in accordance with Section 43A of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act (DPDP Act) 2023, and guidelines prescribed by LazymonkeyAi Technologies.

2.2 Geographic Applicability: This Policy applies to all citizens, farmers, and livestock owners accessing LazymonkeyAi Citizen digital services within the territorial jurisdiction of India.

2.3 Jurisdictional Binding: Any legal dispute, claim, or proceeding arising out of or in connection with the Application or this Policy shall be subject to the exclusive jurisdiction of the competent civil courts.

3. Exhaustive Categories of Personal Data Collected

To deliver citizen services and process livestock assistance requests, LazymonkeyAi Citizen collects specific categories of user data as detailed below:

3.1 Citizen Identity & Profile Credentials

  • Full Name: Collected during registration (stored as full_name) to identify the applicant on official records.
  • Mobile Phone Number: Primary key for authentication (stored as mobile). Used for OTP verification, password reset, and service updates.
  • Account Password: Securely hashed server-side. Never stored in cleartext.
  • Aadhaar / National ID Number: Stored as aadhar_number for identity verification and benefit distribution eligibility auditing.

3.2 Geographic & Administrative Location Data

  • State Administrative Hierarchy: Selected District (district_id), Mandal (mandal_id), and Village/Town (village_id).
  • Live GPS Coordinates: Dynamic Latitude (latitude) and Longitude (longitude) readings captured when accessing service modules or submitting grievances.

3.3 Agricultural & Landholding Information

  • Land Possession Type: Type of land ownership (e.g., Own, Leased, Marginal, Tenant) stored as land_possession.
  • Land Extent: Area of agricultural land in acres (stored as land_extent_acres) used to determine fodder seed quotas.

3.4 Livestock & Veterinary Service Data

  • Fodder Seed Requests: Requested seed variety, crop category, and quantity in kilograms.
  • Sex-Sorted Semen Requests: Species type (Cattle / Buffalo), target breed, quantity of semen straws, and place of working ID.
  • Artificial Insemination (AI) Requests: Animal tag/ID, breed details, heat detection timestamp, and requested technician visit details.
  • Deworming Requests: Total animal headcount, animal species classification, previous treatment dates, and requested schedule.

3.5 Grievance Redressal Data

  • Complaint Submissions: Grievance category, subcategory, detailed text narrative, tagged geo-location, and attached photographic evidence.

4. Mobile Device Permissions & Hardware Access

The Application requests explicit runtime permissions on your mobile hardware to execute mandatory service functions:

1. Precise & Coarse Location Services

Android Manifest: android.permission.ACCESS_FINE_LOCATION, android.permission.ACCESS_COARSE_LOCATION
iOS Info.plist: NSLocationWhenInUseUsageDescription
Purpose: Used by LocationService via the Flutter geolocator plugin to fetch your immediate coordinates. This drives the nearest veterinary facility lookup via GET /citizens/places-of-working/nearest?latitude={lat}&longitude={lng} and attaches precise coordinates to service applications and grievance logs.

2. Internet & Network Communication

Android Manifest: android.permission.INTERNET
iOS Info.plist: NSAppTransportSecurity (Cleartext HTTP support)
Purpose: Mandatory for all REST API communication between the Flutter app and the LazymonkeyAi backend API servers (ApiClient wrapper).

3. Local Sandboxed Storage Access

Package: shared_preferences
Purpose: Stores session parameters on your device, including the active JWT authentication bearer token, logged-in citizen profile cache, and app visual preferences. No sensitive unencrypted keys are exposed outside the app bundle.

5. Legal Bases & Processing Purposes

LazymonkeyAi Citizen processes your personal data strictly under statutory legal bases mandated for citizen platforms:

Processing Purpose Data Elements Used Legal Basis (DPDP Act)
Account Registration & Authentication Mobile Number, Full Name, Password, Aadhaar Citizen Consent (Section 6)
Veterinary Service Dispatch (AI, Deworming) GPS Coordinates, Livestock Details, Address Service Fulfillment & Public Obligation
Fodder Seed Distribution Quotas Land Extent (Acres), Land Possession Type Targeted Subsidy Audit Standards
Nearest Veterinary Center Resolution Live Latitude & Longitude Legitimate Service Optimization
Public Grievance Escalation & Resolution Grievance Text, Photo Evidence, Geo-tag Grievance Redressal Directive

6. Data Architecture, Security & Protection Standard

LazymonkeyAi Citizen employs enterprise-grade defense-in-depth architectural standards to secure citizen records against unauthorized access, disclosure, or alteration:

6.1 Security Infrastructure Controls

  • Cryptographic Authorization: Session authorization is governed by JSON Web Tokens (JWT). API requests require Authorization: Bearer <token> headers. Tokens expire automatically upon session timeout.
  • Data Transmission Security: All API communication channels utilize Transport Layer Security (TLS 1.3/1.2) encryption protocols.
  • On-Device Encryption: Stored local key-value state (such as cached citizen profiles and session state) is isolated within the sandboxed application directory granted by Android OS and iOS security managers.
  • Role-Based Access Control (RBAC): Server database access is restricted using strict RBAC rules. Field technicians can only access requests assigned to their designated jurisdiction.

7. Data Retention & Purge Policy

LazymonkeyAi Citizen adheres to a clear data retention cycle governed by record retention policies:

  • Active User Profiles: Retained for the duration of the registered account's active standing to enable continuous access to services.
  • Service Request Records: Service logs (Fodder, AI, Semen, Deworming) are retained for a period of 7 years to satisfy financial and agricultural audit regulations.
  • Grievance Log Archives: Grievance records and accompanying media are retained for 3 years following ticket resolution and closure.
  • Session & Diagnostic Logs: Transient server access logs and IP connection traces are automatically purged after 90 days.

8. Data Sharing & Third-Party Transfers

8.1 Zero Commercial Sharing Guarantee: LazymonkeyAi Citizen NEVER sells, rents, monetizes, or trades citizen personal data, mobile numbers, or agricultural records to commercial advertisers, marketing agencies, or data brokers.

8.2 Operational Disclosures: Information is shared exclusively with authorized state entities involved in direct service delivery:

  • Government Veterinary Officers, Assistant Veterinary Surgeons, and Field Artificial Insemination Technicians assigned to process your local service ticket.
  • State Agricultural & Animal Husbandry Directorate audit units verifying subsidy distributions.
  • Judicial or law enforcement bodies when served with valid legal subpoenas, court orders, or statutory mandates.

9. Citizen Rights under DPDP Act 2023

Under the Digital Personal Data Protection Act (DPDP Act) 2023, registered citizens enjoy explicit data rights:

1. Right to Access & Summary

You have the right to view your complete personal profile and a summary of all submitted service requests and grievances directly inside the Application's Profile and Requests tabs.

2. Right to Correction & Updating

You may edit or update inaccurate profile information (such as village, mandal, or land extent) at any time through the Farmer Profile Update screen (features/farmer).

3. Right to Erasure / Account Deletion

You may request the permanent deletion of your user account and personal data from active server nodes by submitting a deletion ticket to our Grievance Desk.

4. Right to Grievance Redressal

You have the right to lodge a formal complaint regarding data handling or privacy practices with the designated Data Protection Officer.

10. Protection of Minors

The LazymonkeyAi Citizen Services Application is designed exclusively for adult agricultural operators, livestock owners, and citizens aged 18 years and above. We do not knowingly solicit, collect, or process personal data from minors under the age of 18. If a parent or legal guardian becomes aware that a minor has created an account without authorization, please contact our support desk immediately for account deletion.

11. Open Source Libraries & Technical Audit

The Application integrates selected third-party software libraries. Their privacy implications have been audited as follows:

Library / Package Version Data Functionality
geolocator ^13.0.1 Accesses native GPS hardware to capture precise device coordinates for nearest center lookup.
http ^1.2.2 Executes HTTP REST calls to the LazymonkeyAi backend endpoint infrastructure.
shared_preferences ^2.3.2 Persists local application settings, session tokens, and cached profile maps on device storage.
google_fonts ^8.1.0 Loads Inter and Manrope typography assets for modern application UI presentation.
cached_network_image ^3.4.1 Caches remote image assets locally to optimize bandwidth consumption.

12. Terms of Service & User Agreement

12.1 User Registration & Account Integrity

By registering an account on the Application, you warrant that all information provided—including Full Name, Mobile Number, Aadhaar Number, and Landholding details—is accurate, truthful, and belongs to you. Creating fraudulent profiles or impersonating another citizen is strictly prohibited and punishable under legal statutes.

12.2 Acceptable Use Policy

Users agree not to:

  • Submit false, misleading, or malicious service requests or grievances.
  • Reverse-engineer, decompile, or tamper with the Application binary or API endpoints.
  • Attempt unauthorized access to administrative databases or other citizens' service accounts.
  • Automate API requests using bots, crawlers, or unauthorized scripts.

12.3 Intellectual Property Rights

All software code, visual designs, brand assets, logos, database structures, and content within the LazymonkeyAi Citizen Application are the exclusive intellectual property of LazymonkeyAi Technologies. Unauthorized reproduction or distribution is prohibited.

13. Disclaimers & Limitation of Liability

13.1 Service Availability Disclaimer: While LazymonkeyAi Citizen strives to ensure uninterrupted 24/7 access to digital services, the Application is provided on an "AS IS" and "AS AVAILABLE" basis. Temporary outages due to server maintenance, network instability, or emergency upgrades may occur without prior notice.

13.2 Field Service Fulfillment: Allocation of fodder seeds, artificial insemination visits, and deworming schedules are subject to local field staff availability, seasonal stock quotas, and official prioritization.

14. Official Contact Desk & Grievance Officer

For any queries, privacy concerns, data protection requests, or technical support regarding the LazymonkeyAi Citizen Application, please reach out to our official support team:

Iotronics Citizen Support Desk