Privacy policy

This notice is issued under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 together with the rules made under it. For the purposes of the DPDP Act, Shravya World is the Data Fiduciary for Shravya AI, and you are the Data Principal.

Who we are

Shravya AI is part of the Shravya World family of apps, operated by Shravya World. One account works across all of them, so signing in here creates an identity used by the other Shravya apps too.

You can reach us at support@shravyaworld.org. For complaints about your personal data or about content on the service, write to our Grievance Officer, named at the end of this page.

What we collect

• Account details — your email address or mobile number, your name if you give one, and which method you signed in with. These come from the Shravya sign-in portal; we do not see or store your password.
• Your conversations — the messages you send, the assistant's replies, and which persona you chose. These are stored against your account so you can come back to them.
• Files you attach — images and documents you upload, kept so the assistant can refer to them and so the conversation still makes sense later.
• Voice calls — audio you speak during a live call is transcribed so the assistant can respond. We keep a record that a call happened, with whom and for how long. We do not retain the raw audio after the call ends.
• Feedback — if you mark a reply with a thumb up or down, we store that vote along with the reply and the message that prompted it, so we can find and fix poor answers.
• Technical data — ordinary server logs, including approximate location derived from your network address, used to keep the service running and to investigate abuse.

Why we process it, and on what basis

We process your data on the basis of the consent you give when you create an account and use the service, and for the legitimate uses permitted by section 7 of the DPDP Act where they apply. Specifically, we use it to run the assistant and return replies, to keep your chat history, to protect the service from abuse, to improve answer quality, and to meet legal obligations.

We do not sell your personal data. We do not use your conversations to serve you advertising. Where we look at conversation content to improve the service, it is because you flagged a reply with the thumbs control.

Who else sees it

We use Google Cloud and Firebase for hosting, storage and authentication, Google's speech services to transcribe and speak during calls, and Google's Gemini models to generate replies. These providers process data on our instructions as Data Processors.

This means your data is stored and processed on servers located in the United States. The DPDP Act permits transfer outside India except to countries the Central Government restricts; if that list changes in a way that affects us, we will say so here.

We otherwise disclose personal data only where the law requires it, or to establish or defend a legal claim.

How long we keep it

Conversations and attachments stay until you delete them or close your account. Deleting a chat removes it and its messages. Guest sessions are not retained: nothing you type as a guest is kept against a durable account. Server logs are kept for a limited period for security and diagnostics. Where the DPDP Act requires erasure once the purpose is served, we erase.

Your rights

Under the DPDP Act you may:

• ask for a summary of the personal data we hold about you and how we process it
• ask us to correct or complete anything inaccurate
• ask us to erase your data, unless we are required to keep it
• withdraw your consent, as easily as you gave it
• nominate someone to exercise these rights on your behalf if you die or become incapable of exercising them yourself
• raise a grievance with us, and escalate to the Data Protection Board of India

You can delete individual chats from the app yourself. For anything else, write to the Grievance Officer below.

Children

The DPDP Act treats anyone under 18 as a child. We do not knowingly process a child's personal data without verifiable consent from a parent or lawful guardian, and we do not track children, target advertising at them, or profile them.

If you believe a child has created an account without that consent, tell the Grievance Officer and we will remove it.

Keeping it safe

We apply reasonable security safeguards as required by section 8(5) of the DPDP Act and the IT (Reasonable Security Practices) Rules, 2011: access controls on stored data, encryption in transit, and authentication handled by a single central portal rather than by each app separately. No system is perfectly secure, and we do not claim otherwise.

If a personal data breach occurs, we will notify the Data Protection Board of India and every affected user, in the manner and time the Act requires.

Grievance Officer

In accordance with the Information Technology Act, 2000, the rules made under it, and the DPDP Act:

Sarwajit Mishra
Grievance Officer, Shravya World
grievance@shravyaworld.org

We aim to acknowledge a complaint within 24 hours and resolve it within 15 days of receipt, as the Intermediary Guidelines require. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

Changes

If this notice changes materially we will say so in the app before the change takes effect. The review date at the top of this page always tells you which version you are reading.

See also our Terms of use and our Disclaimer.