1. Scope & Statutory Framework

This Privacy Policy governs the processing, retention, and deletion of digital personal data across the Mantra mobile applications (Android/iOS) and web portal (mantra.aarambhtech.in). It adheres to:

• Digital Personal Data Protection (DPDP) Act, 2023 (India) as a Data Fiduciary.
• Information Technology Act, 2000 & IT (Reasonable Security Practices) Rules, 2011.
• Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
• Google Play Developer Program Policies regarding User Data & Data Safety.

2. Data We Collect & Lawful Purposes

Under the principle of data minimization, we collect only the personal data strictly required to deliver your devotional experience:

• Devotee Profile: Email address and optional devotee display name collected via passwordless one-time verification (OTP) to maintain account access.
• Cryptographic Device Binding: Secure hardware identifier (UUID / Android ID hash) used exclusively to bind active authentication sessions and prevent token theft.
• Devotional Sadhana Records: Personal Japa counters, completed mala milestones (108 / 54 / 21 counts), bookmarked Vedic prayers, and customized playlists.
• Consent & Preferences: Timestamped records of granular consent choices (functional notifications, Sanskrit pronunciation assistance, telemetry).

3. Data We Strictly NEVER Collect or Share

4. Data Retention, Storage & Security

All sensitive credentials and session tokens are encrypted at rest using industry-standard AES-256 and transmitted exclusively via TLS 1.3 encrypted connections. Server databases are housed in secure cloud data centers with restricted role-based administrative access.

Temporary OTP codes are cryptographically salted, hashed, and purged within 10 minutes of issuance.

5. Devotee Rights Under DPDP Act 2023

As a Data Principal under the DPDP Act, you possess sovereign statutory rights:

• Right to Access & Portability: Devotees can generate an immediate, machine-readable JSON archive of all personal sadhana records, Japa counts, and profile details anytime via the in-app Profile tab.
• Right to Erasure (30-Day Soft-Delete Grace Period): Initiating account deletion immediately deactivates your account, revokes all device sessions, and schedules a permanent purge. Devotees retain a 30-day grace period during which re-authenticating cancels deletion and restores records. After 30 days, all data is irreversibly purged.
• Right to Withdraw Consent: You may toggle optional features (telemetry, AI chant suggestions, notifications) at any time via the in-app Consent Manager.
• Right to Grievance Redressal: Direct escalation to our appointed Grievance Officer with statutory SLA.
• Right to Nominate: The right to nominate an individual to exercise data rights in the event of death or incapacity.

Online Account Deletion Portal → Submit Grievance Ticket →

6. Minor & Children's Protection

The Mantra service is intended for general spiritual contemplation and is rated for ages 13+. We do not knowingly collect personal data from children under 13 without verifiable parental or guardian consent.

7. Data Protection Officer & Grievance Mechanism

In fulfillment of Section 6 of the DPDP Act and Rule 3(2) of the IT Rules 2021, AarambhTech has appointed a dedicated Grievance Officer: