Privacy Policy

This Privacy Policy explains how Parmeshwari (“we”) collects, uses, shares, and protects your personal data. We aim to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act). For the purposes of the Act, we act as the Data Fiduciary, and you are the Data Principal.

Public preview: if accounts, subscription storage, or a production database are not connected on the deployment you are using, we do not collect sign-in data or subscription emails on that deployment. The practices below apply when those services are connected.

1. Data we collect

• Account data: email address and (optionally) display name, if you create an account.
• Profile preferences: default reading depth and visual preference, held on your account if you have one.
• Kept in your browser, on this device. Six things, and none of them reaches us unless you sign in. Your reading language and depth. Whether the page is set to day or night. Your learning progress, which is the lessons you have opened or completed and when. A note that you came through the entrance, with the language you chose and the date. Whether Family reading is switched on, and at which depth. And two small cookies that carry the language and the fact of entry to our server, so the first thing we send you is already in the right language rather than switching after it loads. You can review or clear the progress from Your learning, and clearing your browser data for this site removes all of it.
• Learning progress on your account: if you sign in and account services are connected, your progress may also sync to your account so you can continue on another device. We do not store quiz answers, reflections, search history, or a religious profile, on your device or on our servers.
• Lesson-update subscription: the entrance asks, once, whether you would like to hear when new lessons are ready. It is optional, and beginning a lesson subscribes you to nothing. If you do give an address, we store that address and, with it: the date and time you consented, an identifier for the exact wording you consented to, the language you were reading in, and whether the subscription is still active. We do not store your IP address, your device, or a browsing history with it.
• Payment data (only if and when membership opens): payments will be handled by Razorpay, our payment processor. We will not store your card or UPI details. What we keep is the identifiers Razorpay gives us for your subscription and its billing state — enough to know that your membership is active and when it runs to, and nothing that could be used to take a payment.

2. Purpose & lawful basis

We process your data only for these specified purposes, with your consent or as necessary to provide the Service:

• To create and operate your account and deliver the content you access.
• To communicate service and account information, and, only with your consent, product updates.
• To write to you when new lessons are ready, if you asked us to, and to keep a record of that consent so we can show what you agreed to and when.
• To secure the Service and prevent abuse.
• To process payments through our provider, if and when membership opens.

We do not sell your personal data, and we do not use it for any purpose incompatible with those above.

3. Consent

Where we rely on consent (for example, product updates or the lesson-update subscription), it is sought through a clear, affirmative action and may be withdrawn at any time, by emailing support@parmeshwari.in or, for account data, using in-app controls. Withdrawing consent does not affect processing already carried out, and may limit features that depend on that data.

Unsubscribing from lesson updates is by email today. There is no one-click unsubscribe link yet, because no lesson-update email has been sent yet. Write to the address above and we will mark the subscription inactive. When we begin sending these emails, every one of them will carry an unsubscribe link.

Each consent record names the version of the wording you agreed to. If we change what we are asking for, we ask again rather than treating the old agreement as covering it.

4. Data sharing & processors

We share data only with processors who help us run the Service, under appropriate safeguards:

• Supabase, for database, authentication and storage (hosted in the Mumbai, ap-south-1 region).
• Razorpay, only if and when paid membership opens, for payment processing and recurring billing.
• Hosting providers as needed to operate the Service. We do not currently run a third-party analytics product in the application.

5. Data location & retention

Primary data is stored in India (Mumbai / ap-south-1). We retain personal data for as long as your account is active and as required to meet legal and accounting obligations, after which it is deleted or anonymised.

A subscription is not an account. If you gave us an address at the entrance and never signed in, there is no account page to delete it from. Unsubscribing marks the record inactive and keeps the address, so that we can prove we honoured the request and do not write to you again by accident. To have the address removed altogether rather than marked inactive, ask us and we will delete the row.

We have not set a fixed retention period for inactive subscription records. Rather than name a number we have not decided on, we say plainly that this is undecided. We will state the period here once it is set.

6. Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access a summary of the personal data we process about you.
• Correct, complete, or update inaccurate data.
• Erasure of your personal data (subject to legal retention duties).
• Withdraw consent.
• Nominate another person to exercise your rights in case of death or incapacity.
• Grievance redressal (see below) and to escalate to the Data Protection Board of India.

7. Data-deletion request flow

You can request deletion of your account and personal data in either of these ways:

• In-app: go to your Account page and choose “Request data deletion”. This initiates deletion of your profile, preferences, and usage records.
• By email: write to support@parmeshwari.in from your registered email with the subject “Data Deletion Request”.

We will verify your identity, action verified requests within 30 days, and confirm by email. The in-app flow deletes your profile, reading preferences, synced learning progress, entitlements, subscriptions, payment-customer mapping, and sign-in identity. Purchase and invoice rows that still point at that account are removed with it.

The in-app flow does not reach a lesson-update subscription given at the entrance, because that record is not attached to an account. Ask us by email and we will remove it.

Payment-provider event records used for reconciliation and fraud prevention remain after account deletion. Those records are not linked to your user id. They store the provider name, event type, provider event identifier, and a digest of the webhook payload, not card or UPI details, and not your email. They are not deleted by the in-app deletion flow.

8. Children

The Service is intended for adults. Children should use it under the supervision of a parent or guardian. Consistent with the DPDP Act, we do not knowingly process the data of a child without verifiable parental consent, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

9. Security

We apply reasonable security safeguards including encryption in transit, row-level access controls, and least-privilege keys. No system is perfectly secure, and we will notify affected users and the Data Protection Board of any personal data breach as required by law.

10. Grievance officer & contact

For privacy questions or to exercise your rights, write to support@parmeshwari.in. See also our Contact page. We may update this Policy. Material changes will be notified in-app or by email.