Legal

Privacy Policy

Effective 22 October 2026 · Last updated 24 October 2026

The short version: OnTra shows what people around you are doing, at the places they are. Out and about, what you share shows where and when it happened, to the people you choose. Your home and your regular places are protected: there a post shows only the town, and its time and place only to your Trusted crew. We don't sell your data, we don't show ads, and you can download or delete everything at any time.

1. Who we are

OnTra (the "app" and the website at dwll.space) is provided by Passhai Technologies Private Limited, a company incorporated in India (CIN U62011UP2025PTC237086), with its registered office at Plot No. A4, Logix Technova, Sector 132, Noida, Gautam Buddha Nagar – 201304, Uttar Pradesh, India ("Passhai", "we", "us"). For the purposes of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules under them, we are the Data Fiduciary for the personal data described here.

This policy covers the OnTra app and website. It applies to everyone who uses OnTra; OnTra is only for people aged 18 or over.

2. What we collect

Your account

Sign-in. You sign in with your Google account. We receive and keep your email address and a sign-in identifier from Google (Firebase Authentication). We do not receive your Google password.
Your profile. Your handle, an optional name, your sign (a shape and colour, or a profile picture you upload), your status line, your profile header choice, and your confirmation that you are 18 or over.
Settings and preferences you choose in the app, such as who may trail you, Lanterns, your Trusted crew and your crews.

What you share

Posts. The activity you pick, the setting (at home, at a friend's, out), companions or a destination, your words, pictures, videos and the song you add, who can see it, and when it was posted and when it happened. Its place is where your phone is (see section 3).
Pictures and videos. Pictures you take with OnTra's camera or add from your gallery are kept in your private Inbox until you post them. We read the time a picture was taken and, for a gallery picture, the place recorded in it, so the post can carry them. We then re-save every picture without its embedded location data. Before a picture is shown to others, an automated safety model checks it (see section 6).
Bonfire messages, comments, reactions, views, saves and reports. What you write in a bonfire (your town's anonymous room), comments, the emoji you react with, which posts you have viewed (counted once per person and shown only as a number), posts you save (private to you), and reports you make.
Messages. Private messages and message requests between you and other people. Messages in a crew chat and items in a crew vault are end-to-end encrypted on your devices; we store them but cannot read them.
Flares and Field Reports. A Flare you drop or pass on (its place, an optional note or a picture from OnTra's camera; a Flare passed on shows its next finder only who dropped it last and where it started, by name), and Field Reports you make or confirm (what is wrong, where, and, for an ATM, a fuel pump or a pharmacy, the Google place you pick, stored only by its Google place ID).

People

Who you trail and who trails you, trail requests, your crews (named lists of people) and your Trusted crew, Lanterns you light, blocks and mutes, and invite links you share.

Your device and use of the service

A push notification token (Firebase Cloud Messaging), your app version and device platform, and a device identifier used for the location and integrity checks in section 4.
Results of Google Play Integrity checks that tell us whether the app and the phone are genuine.
Server logs created when the app talks to our servers (for example the time, the address of the request and its result, and your IP address), used for security and to fix problems.

3. Location, homes and your places

OnTra is built on places, so location is central to it. We use your phone's location only while the app is open, or while you have turned on On the road mode (which shows a notification while it runs).

Your latest position is kept on our servers to find the bonfire you are in, the posts and places near you, and how far they are. Other people are never shown your live position.
Bonfires you pass through in the last 24 hours, so a "Near me" post reaches the people who were around.
Your visits, kept as the place, the day and the part of the day (never a clock time or a coordinate), so you earn places on your profile and the app can tell where you have really been.
Posts made out and about (away from your homes and your places) keep the real point where they were made. People who can see the post see its place and how far away it is. If you share with Everyone, "Show after I've left" (on unless you turn it off) keeps it back until you have moved on.
Your homes. At sign-up you can place a pin on your home (to within about 50 metres); you can add more homes later (up to five). We also note roughly where your phone spends its nights, kept only as scrambled markers that name no place, to confirm a home. Your home pin is never shown to anyone unless you share it with a crew you choose.
Your places. Regular places you choose to keep (a gym, your work, a college), each stored rounded to about 70 metres, with the name you give it.
Posts at a home or one of your places show only the town to everyone, without a spot or a time. Only your Trusted crew sees when and where (and only when the post's audience includes them). Such posts are stored rounded to the town. A post at one of your places that sits on a public venue (for example a gym) may mark that venue as active in search, without you, your post or its time.
Trips. When you are away from home, a coarse outline of the way you went, visible only to you.
Exact positions we keep: the point of a post made out and about (above); for public posts, the exact point for 60 days to check whether a new spot is real; a Flare's point (shown to whoever collects it); a Field Report's point while it is active; and a home pin.

4. How we use your data

To provide OnTra: show posts, places, bonfires, Trailhead, your profile, messages, Flares, Field Reports and Miles, and deliver notifications.
To apply your privacy choices: audiences, homes, your places, your Trusted crew, "Show after I've left", blocks and mutes.
To keep OnTra real and safe: checking for fake-location apps and impossible jumps, checking that the app and phone are genuine, limiting abuse (for example how often something can be posted), checking pictures before they are shown, and acting on reports.
To send you one welcome email when you join, to the address from your Google account. We send no newsletters or marketing email; if you write to us, we reply.
To operate, secure, fix and improve the service.
To meet legal obligations and respond to lawful requests.

We process your data on the basis of your consent, given when you sign up and when you turn features on, and for the legitimate uses permitted by law. You can withdraw consent at any time (section 8); some features then stop working.

We do not sell your personal data, we do not show advertising, and we do not use your data to profile you for advertising.

5. Who can see what

Your profile (handle, name, sign, status line, header) is visible to people using OnTra.
A post is visible to the audience you choose: Everyone, Near me (people in your bonfire or nearby, plus the people who trail you, for a day), Trailers (the people who trail you), a crew, or Only me. Section 3 explains how homes and your places limit what it shows.
Footprints (the places you've earned) on your profile show towns and areas you have spent time in; spots, places near your homes and places you visit on a routine are shown only to you.
Bonfires are anonymous rooms: other people see your handle, sign and messages, and labels such as RESIDENT, but never your position.
Counts (reactions, views, people in a bonfire) are real and shown as numbers.

We use service providers who process data on our behalf and under our instructions:

Google Cloud (Cloud Run, Cloud SQL, Memorystore, Cloud Storage), where OnTra's servers, database and files run, in Mumbai, India.
Google Vertex AI, in Mumbai, India, for the automated safety check of pictures.
Google Firebase (Authentication, Cloud Messaging) for sign-in and notifications, and Google Play Integrity for device checks. These are global services.
Google Maps Platform (maps, Places, Geocoding, Elevation, Weather) for maps, place lookups, heights and weather.
Resend, to deliver the welcome email: it receives your email address and your handle.
Openverse, for the music catalogue: when you search for a song, your search words are sent to Openverse.

Place names and maps come from OpenStreetMap (© OpenStreetMap contributors, ODbL) and elevation data from SRTM; we send no personal data to them.

We may disclose data if required by law, a court order or a lawful request by an authority, or to protect the safety of a person. If Passhai is involved in a merger or acquisition, your data may pass to the new owner under this policy.

7. How long we keep it

Data	Kept
Your account, profile, posts, pictures, messages, people and settings	Until you delete them or your account
Your latest position; bonfires you passed through	Your latest position is replaced as you move; bonfires for 24 hours
Your visits (place, day, part of day)	90 days in detail, then as totals per place
Night-spot markers	12 months
Exact point of a public post made out	60 days
Bonfire messages	90 days
Field Reports	While active, then removed within a day
Server logs	Up to 30 days
Backups	Overwritten on a rolling basis within 35 days

When you delete your account we delete your data, including files, straight away, apart from copies in backups until they are overwritten and anything we must keep by law.

8. Your rights and choices

Access and copy: download everything we hold about you from Settings › Your data › Download my data.
Correct: edit your profile, homes, places and settings at any time.
Erase: delete any post, picture or message, or your whole account from Settings › Your data › Delete my account. See how to delete your account.
Withdraw consent: turn off location for OnTra in your phone's settings (OnTra then works read-only), turn off On the road mode, or delete your account.
Nominate a person to exercise your rights if you die or become unable to, and raise a grievance, by writing to us (section 12).
You can also complain to the Data Protection Board of India.

9. Security

Data is encrypted in transit and at rest. Pictures are private by default and access to them is checked on every request. Crew chats and crew vaults are end-to-end encrypted. Access to production systems is limited to the people who need it. No system is perfectly secure; if a breach affects your personal data, we will inform you and the authorities as the law requires.

10. Children

OnTra is only for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child is using OnTra, write to us and we will remove the account.

11. Changes to this policy

When OnTra changes how it uses data, we update the relevant section of this policy and its "Last updated" date. If a change matters to you, we tell you in the app before it applies.

12. Contact and grievances

Questions, requests or complaints: connect@dwll.space.

Grievance Officer: Adnan Khan, Passhai Technologies Private Limited, Plot No. A4, Logix Technova, Sector 132, Noida, Gautam Buddha Nagar – 201304, Uttar Pradesh, India, connect@dwll.space. We acknowledge grievances within 24 hours and resolve them within the time the law allows (15 days, or as otherwise required).