Draft — to be reviewed by a lawyer before launch.

Privacy Policy

Last updated: 29 September 2026

This Privacy Policy explains what personal data DilSathi collects, why, who processes it, how long we keep it and what your rights are under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). It covers the DilSathi Android app and the website dilsathi.in.

In short: DilSathi companions are AI characters. What you write and say is processed by AI to reply to you and to remember what matters. We don’t sell your data, we don’t use your chats for advertising, and you can delete everything from inside the app.

1. Who is responsible (Data Fiduciary)

[TO FILL: legal name of the operator / company], [TO FILL: postal address]. Contact: support@dilsathi.in.

2. What we collect

Account

• From Google Sign-In: your Google account ID, email address and name.
• On your first sign-in: the name you want to be called, your mobile number (stored, not verified by OTP) and your date of birth, used for the 18+ check.
• Your notification choices (messages, companion calls, check-ins).

Conversations

• Chat messages you send and the companions’ replies.
• Voice calls. Your voice is streamed from the app directly to Google’s Gemini AI service to generate her spoken reply in real time. DilSathi does not record or store call audio. A text transcript of the call is saved briefly so that the important things you said can become her memories; the transcript is then deleted. We also keep a record of each call (companion, time, duration) and it appears in your chat as “Voice call”.
• Memories: short facts extracted from your chats and calls (for example plans, people, preferences), kept separately for each companion — at most 100 per companion. We do not save crisis details, phone numbers, addresses, passwords/OTPs or bank details as memories.
• Bond progress with each companion, and usage counts (messages, voice time) needed for your plan’s limits.

Purchases

• Purchase records from Google Play (product, time, status, purchase token). Payments are handled entirely by Google Play — we never see your card, UPI or bank details.

Safety

• Messages you report, and a record when a crisis-support message was shown to you (see section 3).

Device and app data

• A push-notification token (Firebase Cloud Messaging) for each device you use, so companions’ messages and calls can reach you.
• App integrity signals (Firebase App Check with Google Play Integrity) to block fake or modified apps.
• Crash and diagnostic data (Firebase Crashlytics): device model, Android version, app version and technical details of crashes.
• App usage analytics (Google Analytics for Firebase): events such as screens opened, device and app information, and an app-instance identifier. [TO FILL: confirm which Analytics events are collected and whether advertising-ID collection is disabled]
• Aggregate statistics we compute ourselves (for example daily active users, calls per day). These contain no message text.

3. Why we use it

• To provide the Service: generate companion replies and voice calls, show your chats, remember context, grow your Bond.
• Billing: check your plan and minutes, verify Google Play purchases, prevent double charges or misuse.
• Age compliance: make sure only adults (18+) use DilSathi.
• Safety and abuse prevention: review reported messages; when a message suggests you may be in danger, the companion steps out of character and shows crisis helplines (Tele-MANAS 14416, emergency 112).
• Notifications: companion messages, occasional companion-initiated calls and check-ins — each can be turned off in Profile → Notifications.
• Keeping the app working and improving it: fixing crashes, measuring cost and quality.

We process your data on the basis of the consent you give when you sign up and use DilSathi, and for legitimate uses allowed under the DPDP Act (such as complying with law). You can withdraw consent at any time by deleting your account; this does not affect processing already done.

We do not sell your personal data, and we do not use your chats or calls for advertising.

4. Who processes your data

We use these service providers (Data Processors), bound by their terms, to run DilSathi:

• Google Firebase and Google Cloud — sign-in (Firebase Authentication), database (Cloud Firestore), server functions, push notifications, App Check, Crashlytics and Analytics. Our server functions run in Google Cloud’s Mumbai region (asia-south1). [TO FILL: confirm the production Firestore database location]
• Google Gemini API — generates companion chat replies, voice-call audio and memory extraction. [TO FILL: confirm the Gemini API data-use terms that apply (paid tier: prompts not used to train models) and the provider’s retention period]
• Google Play — payments and subscriptions.
• Firebase Hosting — this website.
• [TO FILL: OpenAI (voice fallback) — only if it is enabled; not used today]

These providers may process data on servers outside India. We may also disclose data where required by law, for example to law-enforcement agencies with a valid legal request.

5. How long we keep it

• Account data, chats, memories, Bond progress and usage are kept while your account exists. [TO FILL: any automatic retention limit for old chat messages, if one is introduced]
• Call transcripts are deleted as soon as memories have been extracted from them.
• When you delete your account, we immediately delete your profile, chats, call records, memories, Bond progress, usage, device tokens, reports and safety records, and your sign-in account. Copies can remain in encrypted database backups until those backups expire, up to [TO FILL: backup retention in days for the production project] days.
• Purchase records are kept after deletion, unlinked from your account, as required for financial and tax records, for [TO FILL: period required by law, e.g. 8 years].
• Crash and analytics data follow Firebase’s retention settings: [TO FILL: Crashlytics / Analytics retention periods].

6. Your rights

Under the DPDP Act you have the right to:

• Access a summary of your personal data and how it is processed;
• Correct or update it — you can change your name in the app under Profile → Edit Profile; for other corrections write to us;
• Erase it — delete your account in the app (Profile → Settings → Delete my account) or see how to request deletion;
• Withdraw consent at any time (by deleting your account);
• Grievance redressal — contact our Grievance Officer below; if you are not satisfied, you may approach the Data Protection Board of India;
• Nominate a person to exercise these rights on your behalf in case of death or incapacity.

To exercise any right, email support@dilsathi.in from the email address of your DilSathi account. We respond within [TO FILL: response time, e.g. 30 days].

7. Children

DilSathi is for adults only (18+). Everyone gives their date of birth at sign-up. If it shows the person is under 18, the account is disabled and we keep none of their details — only a record that the Google account was blocked, so it cannot sign up again. If we learn that any other account belongs to a minor, we delete it. See our Child Safety Standards.

8. Security

Data is encrypted in transit and at rest on Google Cloud. Access to your data is restricted by server-side security rules; the app cannot read other users’ data. AI service keys are kept only on our servers, never in the app. Companion chat replies are generated with the AI provider’s safety filters turned on. No system is perfectly secure; if a breach affects you, we will notify you and the Data Protection Board as the law requires.

9. This website and cookies

dilsathi.in sets no cookies and runs no analytics or tracking scripts. Like any website host, Firebase Hosting processes technical request data such as your IP address and browser type to deliver the pages and protect against abuse. If we add analytics in the future, we will update this section first.

10. Changes to this policy

We will post any changes on this page and update the date at the top. For significant changes we will also notify you in the app.

11. Grievance Officer and contact

Grievance Officer: [TO FILL: name]
Email: [TO FILL: grievance officer email]
Address: [TO FILL: postal address]

General contact: support@dilsathi.in