Privacy Policy
Version 1.3 · Effective 7 October 2026
What Gruha Vidhi collects, why, and how to get it back or have it deleted.
1. Who is responsible
Para Labs LLC, a limited liability company registered in the State of Washington, United States, is the controller of the personal data described here. Gruha Vidhi is our product.
For anything in this policy, including any request about your data, write to privacy@gruhavidhi.com.
2. What we collect
We collect only what the app needs in order to work. In detail:
Account. When you sign in with Google we receive an account identifier, your email address, your display name and your profile picture URL from Google. When you sign in with Apple we receive an account identifier, and the first time only, the name and email address you choose to share; Apple may give us a private relay address instead of your own. If you give an age range for yourself (13 to 17, or 18 and over) or for a family profile (10 and under, 11 to 17, or 18 and over), we store it and use it only to judge that person’s chanting more gently; it is never shown to anyone else. We store a user record containing that identifier, your chosen username and email, your role, and the dates the account was created and last changed.
Preferences. Your language, your reminder opt-in, whether you have asked to hear about new poojas, and the level of guidance you prefer during a pooja.
Being told about new poojas is separate from pooja reminders and is off unless you turn it on. If you do, we use the email address already on your account to write to you when a new pooja is published — a few times a year at most, never for anything else, and never shared with anyone. Turn it off in Settings at any time; there is no separate list to unsubscribe from, because there is no separate list.
Place and time. Your city, region and country, your time zone, and, only if you choose to share it, your latitude and longitude. We record whether a location came from your device or was typed in by you, and when it was last updated.
Sankalpam details. Described separately in section 3 below.
Agreement records. Which version of the Terms you accepted and when. We are required to be able to show this.
Purchases. Which content you have unlocked, and the identifier of the corresponding checkout session. Card details are handled by Stripe and never reach our servers.
Technical records. Ordinary server logs, including IP address and request metadata, kept for security and debugging.
3. Sankalpam details, and why they need your explicit consent
A sankalpam names your gotra, pravara, sutra, shakha, nakshatra and rashi. Under data-protection law these are not ordinary profile fields: they reveal religious affiliation and lineage, and they are treated as a special category of personal data deserving heightened protection.
We ask for them for one reason: they are spoken aloud during the sankalpam at the start of a rite, and an app that cannot fill them in leaves you reciting blanks. We use them to compose the sankalpam text shown to you, and for nothing else.
Every one of these fields is optional. You can use the entire app without providing any of them, and you can clear them at any time in Settings. We ask for them only after you have accepted the Terms, and providing them is your explicit consent to our storing them for this purpose.
•
We do not use them to profile you.
•
We do not use them for advertising or marketing of any kind.
•
We do not sell or share them.
•
We do not disclose them to any third party except the infrastructure providers in section 6, who store them on our behalf and may not read them.
You may withdraw this consent at any time by clearing the fields or by asking us to delete them. Withdrawing consent does not affect anything done before you withdrew it.
4. Why we are allowed to hold it
Where the GDPR or a similar law applies, our lawful bases are:
•
Performance of a contract, for your account, your purchases and the delivery of the content you asked for.
•
Your consent, for your precise location, for reminder notifications, and for the sankalpam details in section 3. Each can be withdrawn.
•
Our legitimate interests, for keeping the Service secure, preventing fraud and abuse, and fixing faults.
•
Legal obligation, for records of tax, payment and your acceptance of the Terms.
5. What we do not do
We do not sell your personal data. We do not share it for cross-context behavioural advertising. We do not show advertising in the Service.
At the time this version takes effect the Service contains no third-party analytics, advertising or tracking software of any kind. If we ever add analytics we will ask for your consent first, and this policy will say so before it happens.
6. Who processes it for us
We use a small number of providers, each bound to process data only on our instructions:
•
Google (Firebase Authentication, Cloud Firestore, Cloud Storage, Firebase Hosting and Google Cloud) for sign-in, our database, media and hosting.
•
Stripe, Inc. for payment processing. Stripe is a controller in its own right for payment data and applies its own privacy policy.
•
Apple, for Sign in with Apple on iPhone and iPad, under Apple’s own privacy policy.
We do not give your data to anyone else, except where we are compelled by valid legal process, or where it is necessary to establish or defend a legal claim, or in connection with a merger or acquisition, in which case we will tell you first.
7. Where it is held, and for how long
Your data is stored on infrastructure located in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, this means your data is transferred outside your home jurisdiction; those transfers rely on the European Commission Standard Contractual Clauses entered into with our providers.
We keep your account data for as long as your account exists. You can delete your account yourself from Settings, in the app or on the website, and it is deleted straight away; see Deleting your account (gruhavidhi.com/delete-account) for exactly what goes. A deletion you ask for by email is done within thirty days. Either way we delete your profile, your sankalpam and your location, except for records of purchases and of your acceptance of the Terms, which we are required to keep for as long as tax and limitation rules demand. Server logs are kept for a short period and then discarded.
8. Your rights
Wherever you live, you may ask us to:
•
give you a copy of the data we hold about you;
•
correct anything that is wrong;
•
delete your account and the data with it;
•
export your data in a portable form;
•
restrict or object to a particular use;
•
withdraw a consent you previously gave.
Write to privacy@gruhavidhi.com and we will answer within thirty days. We will not charge you, and we will not treat you differently for asking.
If you are in the EEA or the UK you also have the right to complain to your national data protection authority. We would rather you came to us first, but that right is yours and it is not conditional on doing so.
9. Security
Traffic between the app and our servers is encrypted in transit. Data at rest is encrypted by our infrastructure providers. Access to production data is limited to those who need it. No system is perfectly secure, and we do not claim otherwise; if a breach affects you we will notify you and the relevant regulator as the law requires.
10. Children
The Service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, write to privacy@gruhavidhi.com and we will delete it.
11. Cookies and local storage
The website stores a small amount of data in your browser to keep you signed in and to remember your preferences. This is described in full in our Cookie Policy, where you can also change your choices. The mobile apps do not use cookies; they store the equivalent data on your device.
12. Changes
If we change this policy we will raise the version and the effective date above. If the change is material we will tell you in the app before it takes effect.