Privacy Policy

1. Introduction

This Privacy Policy explains how Dahikar Technologies Private Limited ("Company", "JivanShailee", "we", "us", or "our") collects, uses, stores, shares, protects, and deletes personal data when you use the JivanShailee website, mobile application, subscriptions facilitated through authorized mobile app stores, AI features, Prana tracking, Omni Presence Sentinel, Maha Mirror, journal tools, notifications (including Voice Mentor features on eligible tiers where available), and related services.

This policy is governed exclusively by the Digital Personal Data Protection Act, 2023 of India ("DPDP Act") and the Information Technology Act, 2000. We do not submit to foreign jurisdictions beyond what may be incidental to lawful cross-border processing by our subprocessors described below.

2. Roles and Lawful Bases

For most Service data, Dahikar Technologies Private Limited acts as the Data Fiduciary. We process personal data on the basis of consent, performance of contract, legitimate uses recognized by Indian law, legal compliance, fraud prevention, security, and user-requested functionality.

For sensitive personal context, including health-derived signals and highly personal journal content, we rely on your explicit action, device permission, account settings, or other valid consent mechanism where required.

3. Categories of Data We Collect

We collect only data reasonably connected to operating, securing, personalizing, improving, and supporting the Service. This may include:

• Account and identity data: Mobile number, OTP authentication identifiers, user ID, display name, email if provided, profile details, language, country or region, entitlement status and subscription tier signals as reconciled via RevenueCat against Apple/Google purchases, renewal status, billing cycle equivalents as reported by the platforms, and support communications.
• Highly sensitive personal journal data: Journal entries, mood reflections, self-assessments, goals, spiritual preferences, blockage descriptions, Maha Mirror intake answers, and other free-text content you choose to submit.
• Voice, audio, and real-time speech (including Voice Mentor): Where you enable Voice Mentor or similar features, we may collect microphone audio, real-time voice input, derived transcripts or text representations produced from your speech, and related session metadata needed to operate, secure, and improve those features, consistent with in-product notices and your settings or entitlements.
• Apple HealthKit and wearable data: Where you grant permission, we may process heart rate, steps, activity, sleep-related indicators, workout/activity summaries, Apple Watch-derived wellness signals, and other HealthKit categories you authorize. We do not access HealthKit categories you do not permit.
• Prana and usage data: Prana Score, streaks, jaap/chant counts, feature usage (including Weekly Mirror and Voice Mentor interactions where enabled), premium entitlement indicators, credit consumption events for gated AI features, Sentinel signals, timestamps, and in-app progress.
• Device and technical data: Firebase identifiers, device model, operating system, app version, browser on the website only where applicable, IP-derived region, logs, crash diagnostics, consent status where applicable, and security metadata.
• Firebase Device Push Tokens: Push notification tokens and delivery metadata used to send account, subscription, reminder, and product notifications where enabled.
• Geolocation: Approximate location inferred from IP address or country lookup, and precise location only if a future feature requests it and you grant device-level permission.
• Subscription and payment reconciliation records (In-App Purchase): We do not operate web-based checkout for subscriptions. Paid plans are purchased through the Apple App Store or Google Play Store. We integrate with RevenueCat, Inc. ("RevenueCat") to validate purchases and reconcile entitlements at app runtime. Typical records may include pseudonymous identifiers, product identifiers, subscription status flags, coarse renewal or lapse timestamps as reported via RevenueCat APIs, and anonymized or pseudonymous transaction IDs or receipt references—not full payment card numbers, CVV, bank passwords, UPI PINs, or similarly sensitive credentials, which reside with Apple, Google, and their processors.

4. How We Use Data

• To create, authenticate, secure, and administer your account.
• To provide Prana tracking, streaks, Sentinel insights, journaling, Weekly Mirror outputs, Voice Mentor playback or similar audio coaching flows on eligible tiers, Maha Mirror where credits apply, advertisements on the Free tier where enabled, and other tier-gated capabilities.
• To operate In-App Purchase entitlement and credit accounting (including restore purchases, entitlement sync via RevenueCat, abuse detection, reconciliation for tax/accounting/analytics)—without administering refunds on behalf of storefronts (see Terms and Refund disclosures).
• To personalize educational and self-reflection outputs based on your selected preferences and submitted data.
• Voice Mentor and voice-enabled features: We use voice/audio (including real-time microphone input), any transcripts or text derived from your speech, and related session metadata to provide Voice Mentor and similar experiences (for example: transcribing speech where we use speech recognition; sending text or derived context to our AI backends; generating or personalizing spoken or text responses; safety, moderation, and abuse prevention for AI features; quality measurement tied to those features; and storage only where we say we retain session artifacts in this Policy).
• HealthKit and biometric signals you authorize: We use authorized HealthKit and wearable data (such as heart rate, steps, sleep-related indicators, and activity summaries you permit) only for the purposes described in this Policy—in particular to power Prana tracking, personalization, Sentinel or similar insights where offered, Weekly Mirror or related summaries where enabled, and other wellness features—with no use for advertising, marketing, or data mining as further stated below.
• To send push notifications, reminders, account alerts, security messages, and service updates where permitted.
• To detect fraud, abuse, unauthorized access, security incidents, and policy violations.
• To comply with law, tax, accounting, audit, court, law enforcement, and regulatory obligations.

5. AI Processing (Google Gemini & OpenAI)

JivanShailee may process journal entries, Maha Mirror intake answers, Prana-related data, selected biometric or wellness signals you authorize (including contexts provided to Weekly Mirror summaries or Voice Mentor sessions), profile context, and related operational metadata through Google Gemini and OpenAI large language models for the sole purpose of generating, formatting, personalizing, securing, and improving your requested JivanShailee experiences.

We confirm that our third-party AI providers (Google Gemini and OpenAI) provide the same or equal protection of your personal data as stated in this Privacy Policy.

Your journal entries and biometric data are not sold to advertisers, data brokers, or information resellers.

Model training: We configure our use of Google Gemini and OpenAI so that your journal text, Maha Mirror and other prompts you submit, transcripts or text derived from your voice or audio where those modalities are processed through the Service, and HealthKit or other biometric or wellness data we process as described in this Policy are never used to train Google's or OpenAI's publicly available or general-purpose AI models, and are never used by us for that purpose.

Specifically regarding Apple HealthKit data: We strictly do not use or disclose HealthKit data to third parties for advertising, marketing, or other use-based data mining purposes. We do not use Apple HealthKit data—which means data gathered using the HealthKit framework—for advertising, marketing, or data mining purposes, including for our own advertising or marketing and including for third-party advertising, marketing, or data mining. Where third-party AI infrastructure (such as Google Gemini and OpenAI) is used, processing is performed securely under applicable enterprise/API terms solely to generate your requested insights—consistent with storefront and developer obligations—not for unrestricted public model fine-tuning.

AI outputs are probabilistic and may be inaccurate or incomplete. JivanShailee is not a medical device and does not provide medical, psychiatric, legal, financial, or emergency advice.

6. Sharing and Processors

We share data only as needed to provide and protect the Service or comply with law. We do not sell your personal data.

• Cloud hosting, database, authentication, storage, analytics, and notification providers, including Firebase/Google Cloud.
• AI infrastructure providers, including Google Gemini / Google Cloud and OpenAI, for lawful in-service AI processing responsive to User Content and tier entitlements.
• In-App Purchases: Apple Inc. ("Apple") and Google LLC ("Google") process payments within the Apple App Store and Google Play Store when you subscribe. We integrate with RevenueCat to validate purchases and sync entitlements. We rely on minimized metadata (such as pseudonymous identifiers and anonymized transaction identifiers conveyed through RevenueCat) to unlock features in the App. We do not integrate Razorpay or PayPal for consumer subscription checkout in the Product.
• Support, fraud prevention, security, bookkeeping, auditors, insurers, insurers' auditors, subpoena coordinators, AML screening vendors, and similarly engaged professional advisors under confidentiality commitments where applicable.
• Courts, regulators, law enforcement, and government authorities where legally required.

7. Cookies, Pixels, and Consent

We use essential storage for authentication, security, preferences, and consent evidence on web surfaces where deployed. Marketing technologies (for example Meta Pixel) load only upon demonstrable affirmative marketing consent where consent architecture is deployed for that deployment. Operational Apple/Google SDK telemetry for ads on the Free tier follows each platform's rules.

You may decline optional cookies or revoke marketing consent consistent with notices shown in that environment.

8. Free Ad-Supported Tier

If your account operates on the free tier with ads enabled, mediated advertising SDKs supplied by Apple, Google, or third-party networks may collect or expose limited identifiers (such as IDFA subject to ATT, Google Advertising ID, cohort signals) pursuant to mediation configuration. We prohibit Health payloads from monetization telemetry.

9. Storage and Processing Location

Your data may be stored or processed in India or in jurisdictions used by our cloud, Google Gemini, OpenAI, Firebase, RevenueCat tooling, CDN, moderation, attribution, DRM, telemetry, backups, failover regions, or lawful processor facilities. Processing remains governed by this Policy, the DPDP Act where applicable and enforceable versus platform contracts you separately accept inside Apple/Google ecosystems.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal data, including Firebase security rules and access controls, authentication, encrypted transport, restricted service credentials, monitoring, and commercially reasonable patching. Because subscriptions are purchased through Apple or Google, full payment card numbers and CVV-equivalent secrets are not processed on our infrastructure. No system is perfectly secure; protect your device, OTP flows, and storefront account credentials.

11. Your Rights Under Indian Data Protection Law

This policy is governed exclusively by the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000. IAP billing outcomes are primarily determined by Apple or Google policies; Indian privacy rights under the DPDP Act are addressed through the Grievance Officer below.

Subject to Indian law and identity verification, you may exercise rights such as access, correction, deletion, portability where feasible, restriction or objection consistent with legal exceptions, nomination of a representative where permitted, and withdrawal of consent for processing that relies on consent.

Withdrawal of consent does not affect processing lawfully completed beforehand and may disable features requiring the affected data, including personalized AI outputs, HealthKit-based insights, Sentinel personalization, Voice Mentor customization, Weekly Mirror tailoring, or entitlement-gated generation where technical dependencies cannot operate without the withdrawn data.

12. Retention and Deletion

• We retain account, entitlement, revenue-reconciliation, Google Gemini and OpenAI processing, subscription status, and audit records while your account is active and as needed for service delivery, fraud prevention, statutory tax and accounting obligations, and dispute resolution—including minimal identifiers and transaction references received via RevenueCat reconciliation.
• Journal content, memory features, Weekly Mirror outputs, Voice Mentor session artifacts (if stored), and related User Content are retained to provide continuity until you delete them, delete your account, or request deletion subject to lawful exceptions.
• Backup, audit, and litigation-hold copies may persist for a limited period after deletion requests where technically necessary or legally required.

13. Children and Minors

The Service is not directed to children incapable of furnishing lawful consent without guardian involvement. Families should rely upon Apple/Google parental controls and Family Sharing safeguards.

14. Changes to This Policy

We may revise this Privacy Policy reflecting material product, legal, or security changes. Revised versions post with updated "Last Updated"; continued use signifies acknowledgment except where stricter regimes grant veto windows.

15. Contact Us & Grievance Officer

Per DPDP obligations, escalate privacy grievances—not storefront billing adjudications—to:

• Grievance Officer: Suraj Dilip Dahikar
• Entity: Dahikar Technologies Private Limited
• Email: support@dahikartechnologies.com
• Registered Office: Nagpur, Maharashtra, India

For IAP refund requests, cancellations, or disputed charges, Apple or Google support channels remain primary notwithstanding this escalation path.