Privacy Policy

Castel Code ("we", "us", "our") operates the Zambia Police Digital Portal mobile application (the "App"). This Privacy Policy explains what information the App collects, how it is used, how it is protected, and the choices available to users. By creating an account or using the App, you agree to the practices described here.

1. Information We Collect

To register and verify an account, and to provide the App's citizen and officer services, we collect:

Category	Details
Identity information	Full name, National Registration Card (NRC) number, date of birth, province, and selected role (Citizen or Officer)
NRC document images	Photos of the front and back of your NRC, captured via the device camera, used strictly for identity verification
Selfie / face capture	A live selfie with face detection, used to confirm that the account belongs to the person presenting the NRC
Contact information	Phone number and email address
Account credentials	Password (stored in encrypted/hashed form; we never store it as plain text)
Location data	Approximate or precise location, only when a feature that relies on maps or reporting a location is actively used
Device and usage data	Basic technical data such as device type, app version, and crash/diagnostic logs, used to keep the App stable and secure

2. Camera Permission

The App requests access to your device camera solely to:

• Capture the front and back images of your NRC during registration (mandatory for identity verification), and
• Capture a live selfie for face-detection verification (mandatory to confirm you are the NRC holder).

The camera is never accessed in the background, and images are not used for any purpose beyond identity verification described in this policy.

3. Location Permission

The App uses the Google Maps API to display maps and, where relevant to a feature, to determine your location. Location may be collected as approximate (network-based) or precise (GPS-based) depending on the feature in use and the permission you grant. You can allow, deny, or later change location access through your device settings at any time; some map-dependent features may not function correctly without it.

4. Firebase Services

The App is built using Google Firebase, and may use the following Firebase services to operate:

• Firebase Authentication — to securely manage sign-in and account sessions.
• Cloud Firestore / Realtime Database — to store account, verification, and app-usage data.
• Firebase Storage — to securely store NRC document images and selfies.
• Firebase Crashlytics/Analytics (if enabled) — to help us detect crashes and improve app stability.

Firebase is provided by Google LLC and operates under Google's own security and privacy standards. Data processed through Firebase is used only to operate the App's core functionality.

5. Google Maps API

Where the App displays maps, locates services, or plots reports, it uses the Google Maps Platform. Use of this feature is subject to the Google Privacy Policy in addition to this policy.

6. How We Use Your Information

• To verify your identity and NRC details before granting account access;
• To distinguish between Citizen and Officer roles and grant the appropriate access level;
• To operate core features such as maps, reporting, and communication within the App;
• To secure accounts, detect fraud, and prevent misuse of the platform;
• To maintain, troubleshoot, and improve the App's performance and reliability;
• To comply with lawful requests from the Zambia Police Service or relevant authorities, where applicable.

7. Advertising and Third-Party Links

8. Data Sharing

We do not sell your personal information to anyone. Information may only be shared:

• With Google Firebase and Google Maps, strictly as infrastructure providers to operate the App;
• With the Zambia Police Service, where the App's function is to route verified reports or NRC-verified requests to appropriate officers;
• When required by law, court order, or to protect the rights, safety, or property of users or the public.

We do not share your NRC images or selfie with any third party for marketing or unrelated purposes.

9. Data Retention

We retain account information, NRC verification data, and related images for as long as your account remains active, and for a reasonable period afterward as required for security, audit, or legal record-keeping purposes. You may request deletion of your account and associated data at any time, subject to any retention required by law.

10. Security Measures

We apply industry-standard safeguards to protect your data, including:

• Encrypted transmission (HTTPS/TLS) between the App and our servers;
• Secure, access-controlled storage of NRC documents and selfies via Firebase Storage;
• Hashed/encrypted storage of passwords — we never store passwords in plain text;
• Role-based access control separating Citizen and Officer data access;
• Regular review of app security practices as the platform evolves.

No system is 100% secure; however, we take reasonable, industry-appropriate steps to protect your information from unauthorized access, alteration, or disclosure.

11. Malware-Free Commitment

The App does not contain malicious code, spyware, or hidden trackers. It requests only the permissions necessary for its stated functionality (camera and location), and does not access contacts, SMS, call logs, or files beyond what is explicitly described in this policy.

12. Children's Privacy

The App is intended for verified adult NRC holders and law-enforcement officers. It is not directed at children under 13, and we do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take steps to delete it.

13. Your Rights

Depending on applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or outdated information;
• Request deletion of your account and associated data;
• Withdraw consent for camera or location access at any time via device settings (note: this may limit App functionality).

To exercise any of these rights, contact us using the details below.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact:

Castel Code (Center of App and Software)
Lusaka, Zambia
Website: castelcode.tech
Email: castelcode.tech@gmail.com