Privacy and Security — The Most Important Module
Imagine — you are working in a village. Over 3 months, you onboarded 200 people. Those people trust you. KaryoSetu is running in your village, people are happy, and you are earning well.
Now imagine — one day, a user gave you their phone number to create a listing. You passed that phone number to a friend — "This aunty sells pickles, just call and order from her." You felt you did something good — you got the aunty a customer.
But what actually happened?
"You shared one phone number — 100 people's trust was broken." A privacy breach is not one-sided. One mistake can break the trust of an entire village.
In a village, everyone is connected. In a city, if someone makes a mistake, perhaps no one will find out. But in a village? If one person has a bad experience, the entire village knows — within a single day.
This is how trust works in a village:
A Saathi (name changed) created 150 listings in a village in Madhya Pradesh. Did excellent work. But once, he looked at a user's transaction history without permission — just out of "curiosity." The user found out. The user told the village panchayat. Within the next week, 40 people deleted KaryoSetu. That Saathi was removed, and no work could happen in that village for 6 months.
One act of "curiosity" — 6 months of damage.
If you break privacy rules, here is what will happen:
| Violation | Consequence | How Quickly? |
|---|---|---|
| Shared a phone number with someone | Immediate removal + all pending earnings forfeited | 24 hours |
| Opened an account without permission | Immediate removal + warning sent to all Saathis | 24 hours |
| Took a screenshot of user data | Immediate removal + possible legal action | 24 hours |
| Created a fake account | Immediate removal + permanent ban | 24 hours |
| Told OTP to someone else | Immediate removal + legal investigation | Immediately |
For privacy violations, there is no "forgiven the first time." No warning. No second chance. One mistake = immediate removal. This sounds harsh, but it is necessary — because users have placed their trust in you.
India has a law regarding data privacy — the Digital Personal Data Protection Act, 2023 (DPDPA). Under this law:
You don't just lose your job — you can get into legal trouble. That is why privacy rules are not just "company policy" — they are the law.
This is the most important thing to understand:
User's data = User's property. You are only a "custodian" — meaning you have been given temporary access, to do your work. It's like someone handing you their car keys for a repair — that doesn't mean the car is now yours.
"See, your data belongs to you — just like the key to your house. I am only here to help. I will not share your phone number or your listing with anyone. This is my responsibility and my commitment to you."
Sit in a group (5-6 people). Each person writes a "secret" on a piece of paper (not a real one — make it up). Pass that paper to the person next to you. Now the trainer will say: "Everyone holding someone else's paper — stand up and read it aloud." Notice how it feels when your information is shared with everyone. That is exactly how it feels when a user's data is leaked.
"Data" means any information that can identify a person. For example:
All of this is "personal data." The user has a right over it — you do not.
| # | Action | When? | Condition |
|---|---|---|---|
| 1 | View profile (during onboarding) | When the user is present and being onboarded | With the user's permission |
| 2 | Help create a listing | When the user says "create my listing" | In the user's presence |
| 3 | Check a transaction (in a dispute) | When the user themselves says "my order didn't arrive" | User's written/verbal permission + user is present |
| 4 | Teach the user how to use the app | During training/onboarding | User's own phone, in their own hands |
| 5 | Update a profile | When the user says "change my address" | User is present + gives permission |
| # | Action | Why Not? | Consequence |
|---|---|---|---|
| 1 | Share a phone number with anyone | It is the user's private data | Immediate removal |
| 2 | Open an account without permission | It is unauthorized access | Immediate removal |
| 3 | Take a screenshot of user data | Copying data is prohibited | Immediate removal + legal action |
| 4 | View transactions/messages without informing | It is the user's private conversation | Immediate removal |
| 5 | Give information to any third party | Data is only between the user and KaryoSetu | Immediate removal + legal action |
| 6 | Take the user's phone in your hands | The phone is a personal device | Warning → removal |
| 7 | Edit a listing without the user present | The listing is the user's property | Warning → removal |
| 8 | Save user data on your phone | Data must stay in the company system only | Immediate removal |
The most common excuse: "I shared the phone number because they needed customers." Intent does not matter. Even if your intention was good — breaking the rule = removal. The user gave you their phone number for onboarding, not for marketing.
Some situations will be confusing. Here is guidance:
Someone asks you for another user's number.
✅ Correct response: "Their listing is on the app — you can contact them directly from there. I cannot share anyone's number."
❌ Wrong: Sharing the number — even if both parties are willing.
Someone wants to use their number for another person's account.
✅ Correct response: "Each account needs a separate phone number. Your sister needs her own number — her identity should be her own."
❌ Wrong: Creating two accounts with one number.
Your senior asks for user data.
✅ Correct response: "Sir, I cannot share user data directly. Please send an in-app request, or I will take the user's permission and connect you."
❌ Wrong: Sharing data because a senior asked. The rules are the same for everyone.
Permission means — the user themselves said "yes, go ahead" — for that specific task, at that moment. "They said yes yesterday" does not work. "I think they won't have a problem" does not work. Every time, for every task — fresh permission is required.
Another important principle: Only access as much data as is necessary for the specific task at hand.
"[User's name], I am going to open your profile to update your listing. I will only look at the listing section. Do I have your permission?"
Sit in pairs. One person plays the "Saathi," the other plays the "requester" — who keeps asking for data with different excuses. The Saathi must politely refuse every time. Practice 5 scenarios:
OTP = One-Time Password. It is a temporary code — usually 4 or 6 digits — that arrives on your phone via SMS.
Why does it exist? Imagine — someone wants to open your account. They have your phone number. But the OTP? The OTP will only arrive on your phone. So without the OTP — no one can log in.
OTP is a digital lock. Phone number = lock. OTP = key. The key only arrives to the real owner.
OTP = the key to a digital lock. This key works only once, is valid for only 5 minutes, and arrives only on your phone. Do not give it to anyone — just as you would not hand your house key to a stranger.
When you are onboarding a user or helping them log in, the OTP process must happen exactly like this:
Key Point: You never touch the user's phone. The user reads the OTP, you listen and enter it.
1. Taking the user's phone in your hands to see the OTP ❌
2. Asking the user to "forward the OTP on WhatsApp" ❌
3. Grabbing the user's phone to enter the OTP ❌
4. Taking a screenshot of the OTP ❌
5. Writing the OTP down anywhere ❌
6. Asking the user to "message me the OTP" ❌
| Property | Detail |
|---|---|
| Validity | 5 minutes (300 seconds) — expires after that |
| One-time use | Once used, it will not work again |
| Device-specific | Arrives only on the registered phone number |
| Resend | If expired, request a new one via the "Resend OTP" button |
| Maximum attempts | 3 incorrect entries = 30 minute wait |
Many rural users do not know the OTP concept. Explain it to them like this:
"See, when you enter your phone number — the app sends a code to your phone. This code arrives only on your phone — no one else's. This is so that no one else can open your account. You need to read this code aloud to me — I will enter it. Your phone will not come into my hands. This is completely safe — just like only you know your bank ATM PIN, similarly this code is only yours."
"No problem — this code works for only 5 minutes. It is like that for safety. I will send a new code now — it will arrive on your phone. There is no issue."
If someone asks you for an OTP — understand this: it is a scam.
"I am calling from KaryoSetu head office — tell me your OTP" → SCAM. KaryoSetu never asks for OTP.
"Your account needs to be verified — send the OTP" → SCAM. Verification never happens over a phone call.
"I am your Village Champion — forward the OTP" → SCAM. A Village Champion never needs your OTP.
"You have won a prize — claim it with the OTP" → SCAM. There is no prize.
Anyone who asks for an OTP is always wrong. No matter who they are — KaryoSetu staff, Village Champion, District Leader, anyone. No KaryoSetu employee will ever ask for an OTP. If someone asks = scam = report immediately.
Many rural users cannot read. In such cases:
Form a group of three:
Practice the full OTP flow. The Observer has a checklist:
Do 3 rounds — switch roles each time.
Many apps have passwords — like Facebook, Gmail. But KaryoSetu does not have a password system. KaryoSetu uses OTP-based login.
What this means:
Problems with passwords: people forget them, set simple ones like "123456," use the same password everywhere, or write it on paper. OTP has none of these problems — a new code every time, valid for only 5 minutes, arrives only on the phone.
Many users — especially those who use Facebook/WhatsApp — will ask: "Brother, what is my password?" or "Set my password"
"See, KaryoSetu does not need a password. This app works with OTP — meaning every time you log in, a code will arrive on your phone. Enter that code — you are logged in. No need to remember a password. It is also safer — because someone can steal a password, but OTP is new every time."
"No problem. Enter your phone number in the app. Press 'Send OTP.' A code will arrive on your phone — enter it. You will be logged in. If the code is not coming — press the 'Resend' button. If it still does not come — check your network, or try again after some time."
| Problem | Reason | Solution |
|---|---|---|
| OTP not arriving | Network issue / SMS delay | Wait 30 seconds → Resend → Check network |
| "Invalid OTP" error | Entered wrong code / Expired | Request a new OTP → Enter carefully |
| "Too many attempts" | Entered wrong code 3 times | Wait 30 minutes → Try again |
| Phone number has changed | User changed their SIM | Contact the support team: saathi-support@karyosetu.in |
| "Account not found" | New user / Wrong number | Verify the number → If new, register them |
1. Do not log in on behalf of a user (without them present) ❌
2. Do not save a user's phone number + OTP on your phone ❌
3. Never say "I will log in later and fix it" ❌
4. Do not access a user's account from your device ❌
5. Do not enter your own number into someone else's login "for testing" ❌
A KaryoSetu account is linked to one phone number. Important points:
Your Saathi account is yours alone. Do not give it to any friend, family member, or another Saathi — ever. If a mistake is made from your account, you will be held responsible.
Practice in pairs — one as Saathi, one as User. Handle these 4 situations:
Practice the correct response for each situation.
In 2024-25, online fraud cases in India increased by 300%. Rural areas are the biggest targets — because people know less about digital fraud. You are a Saathi — it is your responsibility to recognize fraud and protect users.
Here are 8 common scam patterns that can occur on KaryoSetu:
A listing: "iPhone 15 — only ₹500! Hurry, limited stock!"
Or: "50 inch Smart TV — ₹1,200. Pay first, delivery tomorrow."
Or: "Honda Activa — ₹2,000. Selling cheap because of a transfer."
If something is 80-90% cheaper than the market price — it is 99% a scam. No one sells an iPhone for ₹500. No one gives a TV for ₹1,200. "If it is this cheap, something is wrong" — that is the golden rule.
How to report: Press the "Report" button on the listing → Select "Suspicious pricing" → Submit.
Seller says: "First send ₹500 advance — then I will send the goods. UPI to this number."
Or: "A booking amount of ₹1,000 is required. It will be adjusted later."
On KaryoSetu, advance payment outside the app should never be made. If someone asks for payment to a UPI number/bank account — it is a scam. Only use the KaryoSetu payment system — where both parties are protected.
Tell the user: "Only make payments within the app. Do not send money to anyone's UPI or bank account outside the app."
Someone comes to a village and says: "I am a KaryoSetu Saathi. To create your account — ₹200 fee is required."
Or: "To make a premium listing, give me ₹500 — I will get it done."
Saathis never take money from users. Creating an account is FREE. A basic listing is FREE. If someone asks for money and claims "I am a Saathi" — they are fake. Report immediately.
How to report: Message the WhatsApp helpline: "Fake Saathi report — someone in [location] is charging fees in KaryoSetu's name."
Phone call: "Hello, I am calling from KaryoSetu head office. There is a problem with your account. For verification, please tell me the OTP that just arrived."
No KaryoSetu staff, no employee, no manager will ever ask for an OTP over the phone. If someone calls and asks for an OTP — hang up and report immediately. Even if the caller ID shows "KaryoSetu" — it is a scam.
You created Ramesh ji's listing — "Wooden Furniture, Ramesh Carpenter." Next week you see — someone else has created a listing with the same photos, same description — with a different phone number. This is a stolen listing.
How to spot it:
Report it: "Duplicate listing" → also provide the link to the original listing
A seller has 50 reviews — all 5-star — but all appeared on the same day. Or the language is the same in all of them — as if copy-pasted. These are fake reviews.
Red flags:
SMS/WhatsApp message: "Congratulations! You have won ₹50,000 in the KaryoSetu Lucky Draw! Click this link to claim: bit.ly/karyowin"
KaryoSetu does not run any lucky draw. It does not send prize SMS messages. Do not click any link. If a user receives such a message — tell them: "This is fake. Delete it. KaryoSetu never sends prizes via SMS."
Someone calls: "I am KaryoSetu's District Manager. You are doing great work. We want to promote you. Just send a screenshot of your Saathi dashboard for verification."
Or: "We are running a special campaign in your area. I need the phone numbers of your top 10 users — we want to give them a special offer."
Someone is flattering you + asking for data/access = SCAM. KaryoSetu promotions do not come via WhatsApp calls. Never share data over the phone. Never send screenshots to anyone. If someone creates "urgency" ("it has to be done now, not tomorrow") — it is 99% a scam.
| # | Scam Type | Red Flag | Action |
|---|---|---|---|
| 1 | Too-good pricing | 80-90% cheaper | Report listing |
| 2 | Advance payment | Payment outside app | Stop the user + Report |
| 3 | Fake Saathi fees | Asking for money | WhatsApp report |
| 4 | OTP phishing | "Tell me your OTP" | Hang up + Report |
| 5 | Stolen listings | Same photos, different account | Duplicate report |
| 6 | Fake reviews | Bulk same-day 5-stars | Report reviews |
| 7 | Prize phishing | "You have won" | Delete + Ignore |
| 8 | Social engineering | Flattery + asking for data | Refuse + Report |
The trainer will read 10 situations — some are scams, some are legitimate. You need to identify:
Discuss in the group — what was the red flag in each scam?
You will meet very different kinds of people in the field. Some people need extra care — these are "vulnerable users." With them, you need more patience, more sensitivity, and more caution.
Many elderly people do not know how to use a smartphone. OTP, apps — all of this is new to them.
"Uncle, this is an app — like WhatsApp on a phone. Similarly, this one lets you list your work — like the fertilizer you sell. People nearby will be able to see it. Your phone number will stay safe — no one will see it without your consent. Would you like to try? If not, that is perfectly fine — it is your choice."
Elderly people often say "yes, yes" without fully understanding — simply because "this young person is saying it, so it must be fine." This is not real consent. Ask them specific questions: "Do you know that your phone number will go into the app? Are you okay with that?" If they seem confused — do not onboard them.
In rural India, women's privacy is especially important. Some special protocols:
If a woman user is feeling uncomfortable — stop immediately. "Alright, no problem. Whenever you are ready, let me know — I will come then." Never force, never argue.
"See, many people think that everything on the internet is visible to everyone. That is not true. This app — only shows what you choose to show. Your phone number stays hidden. Only your name and your listing are visible — so that people can contact you through the app. No one can directly call you without your permission."
Creating an account for anyone under 18 years of age is STRICTLY PROHIBITED. No exceptions. No "parental consent" workaround.
Practice 4 scenarios in the group:
Throughout this module, we have talked about user safety. But your safety is equally important. You go door-to-door, meet strangers, and sometimes face uncomfortable situations. You need to take care of your own safety as well.
Walk away. Do not argue. Do not engage. Say "Alright, no problem. I will leave." and go. No listing, no target is so important that your safety should be at risk. Report to your Village Champion.
Field work can be emotionally tough. You will get many rejections. Some people will be rude. Some will make fun of you. This is normal — but do not take it personally.
"After every 'no,' a 'yes' will come." The first 10 people may refuse — the 11th will say yes. And that 1 "yes" is more powerful than 10 "no's." That single "yes" will bring your confidence back.
Write your personal safety plan:
These 6 actions are ones where there is no warning, no discussion, no second chance. Do it once = immediate removal. All pending earnings forfeited. Permanent ban.
What it is: Creating accounts that do not belong to any real user. Generating numbers, using random names, or creating accounts for non-existent people — to meet targets.
What happened: A Saathi (Rajasthan) was given a target of 100 listings. He created 70 real listings, but added 30 "fake" ones — with random numbers, for people who did not even exist. He thought "no one will find out."
How he was caught: The system detected that 30 accounts never had any login activity. Verification calls were made — numbers were invalid. Auto-flagged by system.
Result: Immediate removal. Credit for the 70 genuine listings was also lost. ₹4,200 in pending earnings forfeited. Permanent ban — can never be a Saathi again.
What it is: The user is real but the listing is fake. For example — a user only sells vegetables, but you added "Carpenter," "Electrician," "Plumber" as well — to inflate your numbers.
What happened: A Saathi (UP) created 5 listings on a farmer's account — "Tractor Rental," "Pesticide Shop," "Labour Supply," "Transport Service," "Seed Shop" — even though the farmer only did farming.
How he was caught: A buyer contacted the "Pesticide Shop." The farmer said "I have no shop — I don't know how this listing appeared." The buyer reported it.
Result: Saathi immediately removed. User's trust was broken. Work in that area stopped for 3 months.
What it is: Giving any user's phone number to someone else — for any reason. "To get them business," "they were asking," "I was only helping" — no excuse works.
What happened: A Saathi (Maharashtra) gave a dairy farmer's number to his cousin — "You want milk, right? This uncle sells milk, call him." Good intention.
What happened next: The cousin called. The farmer was uncomfortable — "How did he get my number?" The farmer reported it.
Result: Saathi removed. The farmer deleted KaryoSetu. The farmer told 4-5 other people "this app is not safe." Chain reaction — 8 listings lost.
What it is: Creating an account with someone's number without meeting them, without their permission. "They are my neighbor — they won't mind" — this excuse does not work.
What happened: A Saathi (Bihar) got a list of numbers from the village panchayat. He directly created 50 accounts — without meeting anyone. OTP? "I spoke to them on the phone, they said yes" — but the conversation never actually happened.
How he was caught: During verification calls, 40 out of 50 people said "I have no idea what this account is."
Result: Immediate removal. All 50 accounts deleted. Legal warning issued.
What it is: Using the Saathi dashboard/access for personal work — such as using user data to grow your own business, viewing competitors' listings, or unfairly promoting/demoting a user.
What happened: A Saathi (Gujarat) submitted a request from the dashboard to get his father's shop listing "featured." He also filed "issues" reports against a competitor's listings — false reports — so that the competitor's listings would be removed.
How he was caught: The system detected a pattern — same Saathi, same area, repeated false reports against specific listings.
Result: Immediate removal. Father's listing also removed. Permanent ban.
What it is: Getting in the middle of a buyer-seller dispute and handling money. "I will take the money from both of you — then sort it out" — this is not allowed. A Saathi never becomes a money intermediary.
What happened: A Saathi (MP) took ₹2,000 from a buyer in a dispute — "I will give it to the seller, don't worry." He gave ₹1,500 to the seller. Kept ₹500 as "commission."
How he was caught: The buyer confirmed with the seller — "Did you get ₹2,000?" The seller said "No, I got ₹1,500." Both reported it.
Result: Immediate removal. ₹500 was recovered. Police complaint filed.
| # | Red Line | Detection Method | Punishment |
|---|---|---|---|
| 1 | Creating fake accounts | System auto-detection + verification calls | Immediate removal + permanent ban |
| 2 | Creating fake listings | User reports + verification | Immediate removal + permanent ban |
| 3 | Sharing phone numbers | User reports | Immediate removal + earnings forfeited |
| 4 | Onboarding without permission | Verification calls | Immediate removal + legal warning |
| 5 | Using access for personal benefit | System pattern detection | Immediate removal + permanent ban |
| 6 | Handling money in disputes | User reports + transaction mismatch | Immediate removal + police complaint |
Many people think: "How will the system find out?" But KaryoSetu's system uses advanced detection — unusual patterns, verification calls, cross-referencing, user reports. Everything is tracked. 95% of violations are detected within the first 7 days. The remaining 5% are reported by users. No one escapes.
The trainer will describe 6 scenarios. You need to identify: (a) Which Red Line was violated? (b) What is the punishment? (c) What was the correct approach?
KaryoSetu is a marketplace — thousands of people are joining it. Where there are so many people, some bad actors can also show up — people who harass, scam, or post inappropriate content. That is why the app has three powerful safety tools built in:
Think of it this way — these tools put power in the hands of users. Just like a village panchayat that stops wrongdoing — these tools let every user manage their own safety. And you, as a Saathi, are responsible for teaching users how to use them.
A safe marketplace = more users = more trust = more business = more earnings for you. Safety is not just "a nice thing" — it is good business sense.
When a user blocks another user:
To unblock: Settings → Blocked Users → Tap "Unblock" next to the person you want to unblock.
Situation: Sunita ji (name changed) sells pickles on KaryoSetu. An unknown person is repeatedly messaging her — "Give me your number," "Where do you live," "Send your photo." Sunita ji is upset and scared.
What the Saathi should do:
⚠️ If Sunita ji cannot block the person herself — guide her by looking at the screen, but the phone must remain in her hands.
"See, if someone is bothering you again and again — you can block them. When you block someone, they will not be able to message you, they will not be able to see your listing, and you will not face any trouble. Let me show you — it is very easy. Open their profile... see this three-dot button? Tap on it... see 'Block User'? Tap that... done! Now they cannot contact you."
Reporting lets the KaryoSetu team know that something is wrong. The team investigates and takes action — removing a listing, warning a user, or banning an account.
| What to Report | When? | Example |
|---|---|---|
| Fake Listing | The listing contains false information | "iPhone for ₹500" — clearly a scam |
| Inappropriate Content | Offensive, abusive, or inappropriate content | Abusive language, inappropriate photos |
| Scam / Fraud | Someone is cheating or attempting to defraud | "Send ₹500 first" — advance payment scam |
| Harassment | Someone is bothering another person | Repeated unwanted messages, threats |
| Wrong Category | A listing is in the wrong category | A clothing listing under "Electronics" |
| Duplicate / Stolen Listing | Someone has copied another person's listing | Same photos, different account |
Reporting is not just the users' job. If you see a fake listing, scam, or inappropriate content while working in the field — report it immediately. You are KaryoSetu's "first line of defense" — you spot problems before anyone else does.
Block = protection for yourself. The person will not be able to contact you — but they can still bother others.
Report = protection for the entire community. The KaryoSetu team will take action — the person will receive a warning/ban. Other users will also be safe.
That is why you should do both — first Block (immediate relief), then Report (long-term solution).
Situation: Kamala Bai (name changed) sells vegetables. A person messaged her listing: "I don't want vegetables, give me your number, I want to meet." Kamala Bai ignored it. But the person keeps messaging — and now the messages have turned threatening.
What the Saathi should do:
When a buyer follows a seller:
To unfollow: Go to the profile again → Tap the "Following" button → Unfollow.
"See, if you liked a seller's work — like Ramesh ji's furniture — you can Follow them. The benefit is that whenever Ramesh ji lists something new — you will know immediately. It's like going to your regular shop in the market — just digital. Let me show you — it is very simple."
When users follow → sellers get more customers → sellers stay happy → sellers remain active → your listings stay active → your metrics improve. Teaching the follow feature is directly linked to your earnings!
A good Saathi does not just create listings — a good Saathi also teaches users how to use the app safely. Every user should know about these three tools:
| Tool | When to Teach? | Who to Teach? |
|---|---|---|
| 🚫 Block | When a user is being harassed, or during onboarding as part of safety tips | All users — especially women and the elderly |
| 🚩 Report | When a fake/scam listing appears, or when a user feels uncomfortable | All users — and do it yourself regularly as well |
| ⭐ Follow | During onboarding, or when a user is happy with a seller | Active buyers and regular customers |
Every time you onboard a new user — after creating the listing — spend 2 minutes explaining Block and Report. Say: "If anyone ever bothers you — you can block them. If you see a fake listing — you can report it. These are here for your safety." This small step significantly boosts user trust.
Situation 1: Ramesh ji says — "Someone messages me every day — 'sell your stuff cheaper' — I am fed up."
→ Saathi: "Ramesh ji, let's block this person. Let me show you how." → Help him block → "They will not bother you anymore."
Situation 2: You spot a listing — "Gold for just ₹200" — clearly a scam.
→ Saathi: Report it yourself — reason: "Fake listing / Scam" → and tell nearby users: "This is fake, do not buy from this."
Situation 3: Geeta Bai regularly buys vegetables from a seller and is happy with them.
→ Saathi: "Geeta ji, follow this seller — whenever they list fresh vegetables, you will know right away. You won't have to search every time."
Sit in pairs — one plays Saathi, the other plays User. Handle these 4 situations:
For each scenario, the Observer should check: Did the phone stay in the user's hands? Did the Saathi explain clearly?
This is the most important rule. If you see something wrong — a scam, a violation, suspicious activity — report it. Do not stay silent. Staying silent = being complicit (becoming a participant).
You should report if:
If it is urgent or you have not received a reply from the above methods:
Your report will remain confidential. The person you reported about will not be told who filed the report. Your identity will stay safe.
If you filed an honest report — and someone threatens, harasses, or punishes you — then they are committing an even bigger violation. KaryoSetu has a strict "No Retaliation" policy. A reporter will never be punished — even if the report turns out to be wrong (as long as the intention was honest).
When: [Date and time]
Where: [Village/area name]
What happened: [In detail — who was involved, what they did]
Evidence: [Screenshots / messages / witnesses — if any]
Urgency: [Low / Medium / High / Critical]
Action Needed: [What you need — investigation, user safety, immediate action]
"REPORT: Sitapur village, UP — A man is coming to the village claiming to be a KaryoSetu agent. He is charging people ₹300 to create accounts. I saw this today at 11 AM. I don't know his name — he is about 30-35 years old, wearing a blue shirt. This is URGENT — he is still in the village."
| Situation | Report | Urgency |
|---|---|---|
| Fake Saathi charging fees | MANDATORY | 🔴 Critical |
| OTP scam call received | MANDATORY | 🔴 Critical |
| Another Saathi leaking data | MANDATORY | 🔴 Critical |
| Safety threat (physical) | MANDATORY | 🔴 Critical + Police |
| Suspicious listing (too cheap) | MANDATORY | 🟡 High |
| Fake reviews spotted | MANDATORY | 🟡 High |
| User feeling uncomfortable | Recommended | 🟢 Medium |
| App bug / technical issue | Recommended | 🟢 Medium |
| General feedback / suggestion | Optional | ⚪ Low |
The trainer will describe 3 scenarios. For each scenario:
Scenarios:
Throughout this module, you have learned:
Now it is time for all of this to become a pledge — a commitment you make to yourself.
I, as a Setu Saathi, take this pledge:
✋ I will keep user data safe.
📵 I will not share anyone's phone number.
🔐 I will not open any account without permission.
🚫 I will not create fake accounts or fake listings.
💰 I will not handle money.
🛡️ I will take extra care of vulnerable users.
📢 If I see a problem, I will report it — I will not stay silent.
🤝 I will treat every user with respect.
This is my commitment — to my users, to my village,
and to the KaryoSetu community.
In the training session, all Saathis should stand. The trainer reads the pledge — everyone repeats together. Say it loudly — this is your commitment:
"I will keep user data safe. I will not share phone numbers. I will not open accounts without permission. I will not create fake accounts. I will not handle money. If I see a problem, I will report it."
Saying the pledge is easy — living it is hard. Every day, situations will come where you will be tempted to take a shortcut. Targets are not being met — should you create a fake listing? Someone is asking for a number — should you give it? No. Remember the pledge.
Every morning before going to the field — spend 30 seconds remembering the pledge. Set a reminder on your phone. Remind each other on the group WhatsApp. "Today too, I will work honestly — I will not take shortcuts."
Saathis who successfully complete Module 5 and take the pledge will receive a "Data Safety Certified Saathi" badge on their app dashboard. This badge is visible to users — and it increases their trust.
Taking the pledge is mandatory to remain a Saathi. Breaking the pledge = Red Line violation = Immediate removal. These are not just words — they are your professional commitment.
Conduct a formal pledge ceremony with the entire group:
This is the most important module — not because it will be on an exam, but because it will save your career. One privacy violation = career over. One honest day = trust built. The choice is yours.
"A shortcut may meet a target — but it will never build trust."
"User's data = User's dignity. Protect the dignity — trust grows — career flourishes."