Privacy Policy
This policy explains how Suvichaar processes information when you use the mobile app.
Information we process
- Account information: if you sign in, Supabase may process your name, email address, phone number, user identifier, and the identity provider you choose, such as Google, Apple, email-link, or phone verification.
- Chat text: the message you submit and the AI-generated response. Successful conversations are synchronized to Supabase when you are signed in. Guest conversation history stays in the app's private storage on your device and is not uploaded as conversation history, although each message is transmitted to generate its response.
- Session and user identifiers: a Supabase identifier used to authenticate requests, synchronize signed-in history, and associate verified purchase entitlements. Guest sessions use a pseudonymous identifier.
- Purchase information: Apple or Google transaction identifiers, product, store, verification time, subscription status, and expiry. The backend stores a one-way hash of the store purchase key.
- Safety reports: if you report an AI response, the report reason, optional comments, and the related question and response are stored so we can investigate and improve content safeguards.
- Optional voice input: if you tap the microphone control and accept the in-app explanation, your device's speech-recognition service may process live audio on the device or online, depending on your operating system, installed recognizer, language, and device settings. Suvichaar does not record, retain, or send voice audio to our backend. Recognized text remains editable and enters the chat-text flow only when you tap Send.
- Operational information: limited request, error, security, and rate-limit records needed to operate and protect the service.
Suvichaar does not request your address book, precise location, photos, advertising identifier, or payment-card number. It does not include an advertising or third-party analytics SDK.
How information is used
Chat text is sent to our Supabase backend and then to OpenAI to generate a response. OpenAI response storage is disabled for these requests. We use account, session, and operational information to authenticate requests, synchronize signed-in conversations, prevent abuse, diagnose failures, and maintain security. Purchase information is used to verify, restore, and provide Premium access. Safety report content is used only to investigate reported responses, improve safeguards, and meet platform or legal obligations.
Service providers and payments
Supabase provides authentication, database, and backend hosting. OpenAI provides AI response generation. Apple and Google process identity, in-app purchases, and operating-system speech recognition as selected or configured by you, and may process information under their own privacy policies. We do not receive or store your full card or bank details.
Legal bases where the GDPR applies
We process information to provide the requested app service and account features, meet applicable legal obligations, and pursue our legitimate interests in service security, fraud prevention, reliability, and safety. We rely on consent where it is required, including for optional device permissions. We do not use consent as a condition for using the core chat service where it is not needed for that service.
Retention and deletion
Signed-in conversation history remains synchronized to your account until you clear it or delete the account. Guest history is limited to the most recent 100 messages and remains only in the app's private storage until you clear it, uninstall the app, or erase the app's data. Account and entitlement records remain while the account is active. We retain privacy-safe search telemetry for up to 30 days, safety reports for up to 90 days from creation, and minimal account-deletion request/outcome evidence for up to 180 days. Provider-controlled logs and store transaction records follow the applicable provider's retention practices and legal obligations.
In the conversation screen, use the delete icon and confirm Clear to remove guest history from the device or synchronized history from your signed-in account. Signed-in users can open Account, choose Delete account, and confirm to permanently delete the Supabase account, synchronized conversations, and app entitlements. Deleting the app account does not cancel a store subscription; subscriptions must be managed separately through Apple or Google. You may also follow the instructions on our Support page or contact us for assistance. Backups are separate project-level recovery copies: deletion takes effect promptly in the live service, while a backup may retain prior data until its recovery window expires. We do not make a restored backup live without reapplying applicable deletions. Records may be retained where required by law or necessary for security and fraud prevention.
Your choices and rights
You may stop using the app at any time, avoid submitting sensitive information, and manage or cancel subscriptions through your Apple or Google account. Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. To request a copy or help with a privacy request, contact us using the details below. We may verify that you control the account before responding. You may also complain to your local privacy regulator.
International processing and security
Our providers may process information in countries outside your province or country. Those jurisdictions may have different data-protection laws. We use access controls, encrypted transport, server-side secrets, signed purchase verification, and data minimization to reduce risk, but no online service can guarantee absolute security.
Children
Suvichaar is intended only for adults aged 18 and over and is not directed to children. Contact us if you believe a minor has provided personal information so we can investigate and delete it where appropriate.
AI and sensitive information
Do not submit passwords, financial account details, government identifiers, private health records, or other information you would not want processed by our service providers. AI output may be inaccurate and is not official religious, medical, mental-health, legal, financial, or emergency advice.
Contact and changes
For privacy questions or requests, email agupta@rgcs.ca. Support and privacy requests are handled through R GUPTA CONSULTANCY SERVICES INC. We may update this policy as the app or legal requirements change. The current version and effective date will remain posted here.