Privacy Policy

1. Scope of this policy

Tiger Park builds and operates software for government agencies, development-programme consultants and city corporations in Bangladesh. Each deployment is commissioned and owned by a specific client — for example, the Department of Public Health Engineering (DPHE), the Bangladesh Water Development Board (BWDB), the Roads and Highways Department (RHD), or a city corporation. That client is the data controller for the information collected through its deployment; Tiger Park operates the platform as its technology provider.

Where an app is published under a client's own branding (for example ONERHD or Brishtir Pani), this policy still governs how Tiger Park, as the platform operator, handles the underlying data, alongside any additional terms the client agency publishes for its own service.

2. Information we collect

The apps and platforms covered by this policy are used by authorized staff — field officers, engineers, administrators and approvers — rather than the general public, with the exception of citizen-facing service requests submitted through Shohor. We collect:

• Account information — name, role, phone number or email address, and organisation, used to authenticate users and control access.
• Field data — structured survey and inspection data, geotagged photographs, GPS coordinates and timestamps that a field user submits as part of an official report.
• Citizen service requests — where Shohor is deployed for citizen services (for example holding tax, trade licensing or civil registration), the information a resident submits to request or pay for that service.
• Device and diagnostic information — device type, operating system version and app version, used to keep the apps working correctly and to diagnose faults.

3. Location and camera permissions

Our field-monitoring apps (built on Sky Hawk) request location and camera access so a field user can geotag a photograph or reading at the moment they capture it — for example, confirming that a tube well, embankment section or rainwater harvesting tank was inspected at a specific site. Location and camera access are used only when a user is actively submitting a report; the apps do not track a device's location continuously or in the background.

Where a device has no data connection at the time of capture, the report and its photos are stored on the device and uploaded once a connection is available.

4. How we use information

We use the information described above to:

• Authenticate users and enforce role-based access to the correct organisation, project or module;
• Record, review and approve field reports as part of a governed, auditable record;
• Generate dashboards, maps and reports for the client organisation that owns the deployment;
• Send notifications relevant to a user's role, such as an approval request or a report status change;
• Provide support, and maintain and improve the reliability of the apps.

We do not use field data or account information for advertising, and we do not sell personal information.

5. Data sharing and disclosure

Information collected within a client's deployment is shared with that client organisation and with other authorized users of the same deployment, according to the role-based permissions the client configures. We do not share data across separate client deployments.

We may disclose information where required by law, to comply with a valid government or judicial request, or to protect the rights, property or safety of Tiger Park, our clients or the public.

6. Data security

Access to each deployment is controlled by role-based permissions and authenticated logins. Data in transit between the apps and our servers is encrypted. Deployments are hosted on approved cloud infrastructure, a government data centre, or a hybrid of the two, according to the client's requirements, with regular backups.

7. Data retention

Retention periods are configurable and are set with the client organisation that owns the deployment, reflecting that organisation's own record-keeping and regulatory requirements. Account information is retained for as long as a user's access remains active, and is removed or deactivated when the client organisation revokes that access.

8. Children's privacy

Our apps are built for use by authorized government staff, field officers and, in the case of citizen-service modules, adult residents requesting a municipal service. They are not directed at children, and we do not knowingly collect information from children.

9. Your rights and choices

If you are a staff user of one of our apps, your access and the information tied to it are managed by your organisation's administrator; contact them to request a correction or removal of your account. If you are a resident who has submitted a citizen-service request through Shohor, contact the city corporation or pourashava that operates that service. You are welcome to contact us directly using the details below, and we will route your request to the relevant client organisation where needed.

10. Changes to this policy

We may update this policy as our apps or practices change. We will revise the "Last updated" date above when we do, and material changes will be reflected here before they take effect.

11. Contact us

Questions about this policy or how a specific deployment handles data can be sent to: