RishiOra – Privacy Policy

Effective date: 8 October 2026 · Policy version 2.0 · Applies to the RishiOra app on Android and iPhone/iPad (version 1.6.40 and later) and to the RishiOra website.

This policy applies to users in every country. Section 11 lists the extra rights that some laws give you, including India (DPDP Act 2023), the European Union, EEA, United Kingdom and Switzerland (GDPR, UK GDPR, FADP), the United States (including California CCPA/CPRA and other state laws), Brazil (LGPD), Canada, Australia and others. If your local law gives you more protection than this policy, your local law applies.

1. Who we are

RishiOra is operated by Rishi Yadav, an individual developer in India ("we", "us"). We are the data controller (called the "Data Fiduciary" under India's DPDP Act) for the little personal data described in section 4.

Contact for all privacy questions, requests and complaints (also our grievance contact under Indian law): rishiora2026@gmail.com. Please write "Privacy" in the subject line.

2. Summary

3. Information that stays on your device

You can optionally enter a profile (name, age, email address, phone number, city, country). The app also saves your language, favourites, puja progress, Dakshina points and, if you prepare a Kamadhenu Puja request, the name, gotra and place you typed. All of this is stored only on your device. We cannot see or access it.

4. Information we receive, and why

We receive personal data only when you choose to email us:

Purpose: to perform the puja in your name, to reply to you and to handle your requests. We do not use your data for marketing, profiling or automated decisions.

Sensitive data: your gotra, sankalp and the request for a puja can reveal your religious beliefs. Some laws (for example GDPR) treat this as a special category of data. We use it only for the puja you asked for.

Legal basis: your consent, which you give by choosing to send the email (GDPR Articles 6(1)(a) and 9(2)(a); DPDP Act section 6; LGPD Articles 7(I) and 11(I)), and taking the steps you asked us to take (GDPR Article 6(1)(b)). You can withdraw your consent at any time by emailing us. We will then delete your data and stop the request. Withdrawing does not affect what we did before.

5. What we never do

6. Services run by Google, Apple and your other apps

Some features are provided by the app stores and by apps you choose. They work under their own privacy policies:

Google Play privacy policy: https://policies.google.com/privacy · Apple privacy policy: https://www.apple.com/legal/privacy/

7. Who receives your data

No one else. We do not sell, rent or trade personal data.

8. Where your data is processed (international transfers)

We and the priest are in India. Our email is stored on Google's servers, which may be in India or in other countries. If you write to us from another country, your data is transferred to India.

For users in the EU/EEA, the UK and Switzerland: India does not have an adequacy decision. We transfer your data because you ask us to perform the puja and reply to you, and with your explicit consent (GDPR Article 49(1)(a) and (b) and the UK and Swiss equivalents). Google uses its own approved safeguards (such as standard contractual clauses) for its transfers.

9. How long we keep data

We keep data longer only if the law requires it, and only for as long as it requires.

10. Security

The app stores your data inside the device's private app storage, which other apps cannot read, and the chanting audio is encrypted. We protect our mailbox with access controls and do not copy request emails elsewhere. No system is perfectly secure. If a breach affects your personal data, we will inform you, and the authorities where the law requires (for example the Data Protection Board of India, or an EU or UK authority within 72 hours).

11. Your rights

Wherever you live, you can ask us to:

Email rishiora2026@gmail.com from the same address you used to contact us, so that we can confirm it is you. Requests are free. We reply within 30 days, or sooner if your law requires. Using your rights never affects how the app works for you.

India (Digital Personal Data Protection Act 2023 and Rules): you have the right to a summary of your data and how it is processed, to correction, completion, updating and erasure, to grievance redressal, and to nominate a person to exercise your rights if you die or become unable to. Our grievance contact is rishiora2026@gmail.com. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.

EU/EEA, UK and Switzerland (GDPR, UK GDPR, Swiss FADP): you also have the rights to restrict processing, to data portability and to object, and the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office).

United States (California CCPA/CPRA and other state privacy laws, such as Virginia, Colorado, Connecticut, Texas and Oregon): you have the right to know, delete and correct your personal information, to opt out of its sale, sharing or use for targeted advertising (we do none of these), to limit the use of sensitive personal information (we use it only to perform the puja you requested), and not to be discriminated against for using your rights. In the last 12 months we have collected, only from people who emailed us: identifiers (name, email address), the place you wrote, and sensitive personal information (religious beliefs, from your gotra and sankalp), for the purposes in section 4. You may use an authorised agent. If we decline your request, you can appeal by replying with "Appeal" in the subject line, and we will answer within 45 days. We have no tracking to switch off, so Global Privacy Control and "Do Not Track" signals do not change anything.

Brazil (LGPD): you also have the rights to confirmation that we process your data, anonymisation, portability, information about who receives your data, and to revoke consent. You may complain to the ANPD.

Canada, Australia, New Zealand, Singapore, Japan, South Korea, South Africa, the UAE and other countries: you have the rights your local law gives you, and you can complain to your local privacy regulator (for example the Office of the Privacy Commissioner of Canada, the OAIC in Australia, or the Information Regulator in South Africa).

12. Children

RishiOra is a family devotional app, but it is not directed at children under 13, and we do not knowingly collect personal data from them. Under Indian law a child is anyone under 18. Only a parent or guardian should send us a Kamadhenu Puja request for anyone under 18. If we learn that we received a child's data without a parent's or guardian's consent, we delete it.

13. Website

The RishiOra website uses no cookies, analytics or tracking. The website's hosting provider may record standard technical logs (such as IP address and browser type) for security, under its own policy.

14. Changes to this policy

If we change this policy, we will update it on this page and change the effective date. For important changes, we will also say so in the app's "What's new" notes.

15. Language

This policy is written in English, and a Hindi summary follows. If they differ, the English text applies, unless your local law says otherwise.

हिंदी सारांश