📜 The Sacred Covenant of Devotee Privacy
At AarambhTech, we hold user reverence and privacy as sacred trust. The Mantra application is engineered with an absolute zero-advertisement policy. We do not sell, broker, or monetize your devotional habits, prayer records, or personal data.
1. Scope & Compliance Framework
This Privacy Policy governs the collection, use, retention, and deletion of personal data within the Mantra mobile application across Android and iOS platforms. It is crafted in compliance with:
- Digital Personal Data Protection (DPDP) Act 2023 (India)
- Google Play Developer Program Policies (Data Safety & Privacy)
- General Data Protection Regulation (GDPR) principles of data minimization and storage limitation.
2. Data We Collect & Specific Purposes
We collect only the minimum data required to deliver core functionality, synchronize your devotional progress across devices, and ensure account security:
- Authentication Credentials: Email address and devotee full name provided during passwordless 2-step OTP login.
- Cryptographic Device Binding: Hardware device fingerprint (Android ID or cryptographic UUID) to securely bind active session tokens and prevent session hijacking.
- Devotional Activity Logs: Daily Japa mala chant counts, completed 108/54/21 malas, and favorite scripture bookmarks for personal spiritual progress tracking.
- Consent Records: Explicit, granular records of your consent choices (functional, analytics, and AI assistance).
3. Data We NEVER Collect or Share
- No Advertising Trackers: The application contains zero advertising SDKs (no AdMob, Meta Audience Network, or tracking pixels).
- No Location Tracking: We do not access GPS, Wi-Fi, or cellular network location data.
- No Contact List or File Scraping: Storage permissions for external photos and media are strictly blocked.
- No Third-Party Brokers: Devotee data is never sold, licensed, or shared with data aggregators.
4. Data Retention, Storage & Security
All sensitive credentials (session tokens and device identifiers) are protected using hardware-backed cryptographic encryption. Devotional sadhana history is stored safely on your device and synchronized via secure TLS 1.3 encrypted connections to our protected cloud infrastructure.
One-time verification codes are cryptographically hashed and automatically expire after a strict short-lived window.
5. Your Rights: Export & Permanent Account Deletion
Under the DPDP Act and Google Play guidelines, you hold absolute authority over your personal records:
- Right to Data Portability: Devotees can download a complete JSON archive of all personal sadhana records, Japa counts, and favorites directly from the Profile tab in the app.
- Right to Erasure (Account Deletion): You may permanently delete your account and all associated server records at any time within the mobile application (Profile → Privacy & Data Rights → Delete My Account & Data) or via our public web deletion portal:
Request Account & Data Deletion Online →
6. Children's Privacy
The Mantra application is rated for general audiences aged 13 and older. We do not knowingly solicit or collect personal information from children under 13 without verifiable parental consent.
7. Data Protection Officer (DPO) & Grievance Contact
If you have questions, grievances, or require assistance with data erasure, contact our appointed Data Protection Officer: