GeetaVani — Privacy Policy

1. Who we are

GeetaVani ("we", "us", "our") is a mobile application that helps users read the Bhagavad Gita, build daily spiritual practice, and converse with an AI companion named Keshav. The application is published by Astrocorp Techlab Pvt Ltd and is available on Google Play and the Apple App Store.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over your data.

2. Information we collect

We collect only what is necessary to provide the service.

2.1 Information you provide directly

• Phone number — required for one-time password (OTP) sign-in.
• Display name — optional; you can change or omit it.
• Date of birth — optional; used only to tailor content recommendations.
• City / time zone — optional; used only for Panchang (lunar calendar) accuracy.
• Messages to Keshav (our AI companion) — the text you send during an AI conversation.
• Journal entries and reflections — any content you voluntarily save (karma entries, mood notes, bookmarks, sankalpams).
• Feedback you submit — optional ratings and notes on verses, articles, and AI conversations.

2.2 Information we derive from your use of the app

• Reading progress — which chapters, verses, and articles you have read.
• Streak data — daily practice activity and streak status.
• Preferences — chosen themes, notification settings, time-window preferences.

2.3 Technical information

• Device information — model, OS version, app version, language, locale.
• Crash diagnostics — stack traces and device state (via Sentry) when the app crashes.
• Push notification tokens — Firebase Cloud Messaging token for delivering reminders.

2.4 What we do NOT collect

• We do not collect location unless you explicitly share it for Panchang features.
• We do not access your contacts, photos, microphone, or camera unless you use a feature that requires it (e.g., voice recitation) and grant explicit permission at the time.
• We do not collect data about other apps on your device.
• We do not use third-party advertising SDKs and we do not serve ads.

3. How we use your information

We use the information above to:

• Authenticate you via OTP.
• Provide the app's features (reading, AI chat, streak tracking, recommendations).
• Send you notifications you have opted into (daily shloka, streak, festival reminders).
• Respond to your support requests.
• Diagnose crashes and improve reliability.
• Personalize content suggestions based on your reading history and declared preferences.

We do not use your personal data for advertising targeting, behavioral profiling for third parties, or training general-purpose AI models outside of your own Keshav conversations.

4. Keshav AI conversations

When you send a message to Keshav, that message is processed by a large language model (currently Google Gemini, operated under our API key). Conversation content may be retained within our systems for up to 180 days to allow you to resume and review previous conversations, and to improve the quality of Keshav's responses on your account.

Your conversations are:

• Scoped to your account. Other users cannot see your conversations.
• Not used to train third-party models. We use API-tier access that excludes your content from model training.
• Exportable and deletable. You may request an export or deletion at any time (Section 10).

5. Third parties we share data with

We share the minimum data required for these service providers to function:

We do not sell your personal data. We do not share it for advertising purposes.

6. Where your data is stored

Your data is stored on servers operated by us in the Asia-Pacific (South / India) region, with Cloudflare's global CDN edge serving static assets. Your data is replicated as necessary for reliability. Some third-party services (Gemini, Firebase, Sentry) may process data in regions outside your own. We use industry-standard encryption in transit (TLS) and at rest.

7. How long we keep your data

• Account data (phone, display name): Until you delete your account.
• Reading progress and streaks: Until you delete your account.
• Keshav conversations: Up to 180 days, or until you delete them.
• Bookmarks and journal entries: Until you delete them or your account.
• Crash logs: Up to 90 days.

When you delete your account (Section 10), all personal data is deleted within 30 days from our production systems, and within 90 days from backups.

8. Children

GeetaVani is not directed at children under 13 (or under 16 in EEA jurisdictions where the GDPR applicable age of consent is 16). We do not knowingly collect data from children under these ages. If you believe a child has created an account, please contact us at privacy@geetavani.io and we will delete it.

9. Security

We protect your data with:

• TLS 1.3 encryption for all API traffic.
• JWT-based authentication with short-lived access tokens and revocable refresh tokens.
• Encryption at rest for production databases.
• Role-based access controls for our internal team.
• Automated dependency scanning and vulnerability monitoring.

No system is perfect. If we discover a material security incident affecting your data, we will notify you in accordance with applicable law.

10. Your rights

Depending on your jurisdiction (India DPDPA, EU GDPR, California CCPA, and others), you have the right to:

• Access — request a copy of the data we hold about you.
• Rectify — correct inaccurate data.
• Delete — delete your account and personal data.
• Portability — receive your data in a structured, machine-readable format.
• Object / restrict — object to or restrict certain types of processing.
• Withdraw consent — where processing is based on consent.

To exercise any of these rights, either (a) use the in-app Settings → Account → Delete Account / Export Data flow, or (b) email privacy@geetavani.io from the phone-number account-holder's verified email.

We will respond within 30 days. If you are unsatisfied, you may complain to your local data-protection authority (e.g., the Data Protection Board of India, or the relevant EU supervisory authority).

11. Payments and subscriptions

If you subscribe to a paid tier, payment processing is handled by Apple (App Store) or Google (Play Store) and, where applicable, Adapty. We do not see or store your payment card details. We receive only a subscription token indicating your tier and expiry.

12. Changes to this policy

We may update this Privacy Policy to reflect changes to the app, the law, or our practices. When we do, we will:

• Update the "Last updated" date.
• For material changes, notify you via in-app banner and/or email (if provided).

Continued use of the app after the effective date of a change constitutes acceptance of the updated policy.

13. Contact

Privacy inquiries: privacy@geetavani.io

Postal: Astrocorp Techlab Pvt Ltd, [OWNER ACTION: registered office address from ROC filing], India