Your devotion is not a marketing signal.

Pooja stores your panchang preferences, offerings log, mantra-jaap count, family deity vault, and (if paid) priest bookings + 80G receipts. It does not sell, share with brokers, or surveil. This document tells you exactly what we collect and what we don't.

Data controller

Empire Apps — published by Aditya Sharma. Registered place of business in India. Reach: dpdp@taxwalaai.com for any grievance, erasure, or withdrawal request.

What we collect

1. Local-only (never leaves your device)

Daily panchang preferences (your default city, sect, deity).
Offering log (flowers, sweets, oil, diya per puja session).
Jaap counter logs.
Family-deity vault entries.
Pronunciation coach audio (deleted from memory immediately after Whisper scoring).

All of the above is stored OPFS-encrypted with AES-GCM 256, key wrapped by your WebAuthn passkey (Argon2id-derived). No copy on our servers unless you explicitly enable cross-device sync.

2. Synced (only if you turn on sync)

An encrypted Automerge CRDT op log of the above. Ciphertext-only. We never see plaintext.
Sync runs through Cloudflare R2 inside our account. India-routed.

3. Sent to Razorpay (if you pay)

Booking id, amount, currency, your name, your email, your phone, your billing address, and the priest's verified Razorpay account id (for Route).
For 80G donations: your PAN (only above Rs 2,000), your full address, the trust's PAN + 80G registration, and the donation amount.
Razorpay is the payment processor of record. They keep payment data per RBI guidelines. We retain only the Razorpay payment id and the booking id on our side.

4. Sent to the trust (for 80G donations)

Your name, PAN (above Rs 2,000), full address, donation amount, and donation date.
Per Income Tax Rule 18ABA, the trust must report these details on Form 10BD; the trust then issues you Form 10BE.

5. Sent to the priest (for bookings)

Your name, phone, scheduled date/time, venue address (if home-based), and special instructions.
Shared on confirmation, deleted from priest dashboard 90 days after the puja.

What we do not collect

No location tracking. Panchang uses your manually selected city only.
No camera / microphone access without explicit per-feature consent.
No contacts sync.
No third-party advertising scripts.
No third-party analytics scripts (no GA, no Mixpanel, no Hotjar, no Pendo, no FullStory).
No social-network beacons (no Facebook Pixel, no LinkedIn Insight, no Twitter Conversion).
No fingerprinting libraries (no FingerprintJS, no ClientJS).

Your DPDP 2023 rights

Under India's Digital Personal Data Protection Act 2023, you have the following rights as the Data Principal:

Right to access: Request a copy of everything we hold on you.
Right to correction: Fix errors in your stored data.
Right to erasure: Delete your account and all associated data. Done within 30 days.
Right to grievance redressal: We respond within 7 days.
Right to nominate: Name a person who can exercise these rights if you cannot.
Right to withdraw consent: Stop our processing at any time, prospective only.

To exercise any of the above, email dpdp@taxwalaai.com or use the in-app DPDP control under Settings.

Retention

Local OPFS data: retained until you delete the app or hit the erasure button.
Server-side (encrypted CRDT op log): retained while your subscription is active + 30 days after cancellation, then deleted.
Razorpay payment records: retained as required by RBI (typically 10 years).
80G receipts and trust filings: retained as required by Income Tax law (typically 8 years).
Audit logs (legal compliance): hash-chained, retained for 6 years per Indian Evidence Act.

Children

Pooja is not intended for users under 18. The chassis enforces an 18+ self-declaration at sign-in. The booking page requires PAN, which the Income Tax department issues from age 18.

Changes

If we change this policy, we will notify you in-app at least 14 days before the change takes effect. You can refuse the change by exercising your withdrawal or erasure right.