eSamithi — Privacy Policy
Effective date: 15 July 2026 · Applies to the eSamithi mobile app and member services
eSamithi is a management platform for registered community welfare societies
(මරණාධාර හා සුභසාධක සමිති) in Sri Lanka. The mobile app is a member companion to a society's
records: it lets an enrolled member view their own contributions, benefits, loans and society
notices, submit requests, and take part in the society's Puruka community exchange.
The short version: your data belongs to your society. We store only what the
society already keeps in its member register, plus what you add in the app. We never sell data,
we show no ads, and nothing is shared with third parties beyond the technical services needed to
run the app. All traffic is encrypted in transit.
1. Who is responsible for your data
Each welfare society is the controller of its own member register. The eSamithi platform
(operated by Azyntra Technologies) processes that data on the society's behalf to provide the
software. For any question about your data, contact your society's office or the platform
operator at aztrawave@gmail.com.
2. What we collect
- Identity & membership data — your name, national identity card (NIC)
number, date of birth, membership number, address and phone number, as recorded by your
society when you joined it. The app uses NIC + date of birth once, to verify you against
the society's register when you enrol.
- Financial records — your society contributions, benefits, loans, fixed
deposits and related transactions, maintained by your society's officers.
- App credentials — a PIN you choose (stored only as a cryptographic hash;
we cannot read it) and, if you enable it, biometric unlock handled entirely by your
device — biometric data never leaves your phone.
- Content you add — Puruka listings you create, including photos, item
details, price and the contact number you choose to show; requests and messages you send
to your society.
- Push token — an anonymous device token, if you allow notifications, so
your society can send you notices.
The app does not collect your location, contacts, browsing history or advertising identifiers,
and contains no analytics or advertising SDKs.
3. How your data is used
- To show you your own membership and financial standing with your society.
- To deliver society announcements (including funeral/death notices) and event information.
- To operate the Puruka exchange within your society's membership.
- To let society officers manage the register they already maintain.
- For platform security, audit and support. Any support access to a society's records by the
platform operator is logged and visible to the society.
4. Sharing
Your data is visible to your own society's authorised officers, and — for Puruka listings you
publish — to other members of your society. Technical sub-processors are limited to our hosting
providers and Expo's push notification service (which receives only the device token and the
notification text). We do not sell or rent personal data, and we do not share it for advertising.
5. Security
All communication between the app and our servers is encrypted (HTTPS/TLS). PINs are stored as
salted hashes. Each society's records live in a separate database. Access by society staff
requires their own credentials, and platform-level access is protected with two-factor
authentication and an append-only audit log.
6. Retention
Membership and financial records are retained by the society for as long as its rules and
Sri Lankan law require (society financial records are typically kept for at least 7 years).
Puruka listings expire automatically. Push tokens are deleted when they become invalid or when
you disable notifications.
7. Your rights & data deletion
Subject to the Personal Data Protection Act No. 9 of 2022 of Sri Lanka, you may ask to access
or correct your personal data, or to delete data that the society is not legally required to
keep.
To request deletion of your app account and personal data: contact your
society's office, or email
aztrawave@gmail.com
with the subject "eSamithi data deletion request", stating your society and membership number.
Your app access and credentials are removed immediately; register entries that the society must
legally retain (e.g. financial ledgers) are retained by the society per section 6.
8. Children
The app is intended for adult members of registered welfare societies (18+). Societies may
record beneficiary details (e.g. family members) in their registers as part of their normal
operation; such records are governed by the society's own rules.
9. Changes
We will post any changes to this policy at this address and update the effective date above.
Material changes are announced through the app's notice feed.
eSamithi · Azyntra Technologies · Sri Lanka ·
aztrawave@gmail.com