# Comprehensive Privacy Policy, DPDP Act 2023 Compliance & Terms of Service
Application: Target Vault: Savings Goals
Package Name: com.orendalabs.targetvault
Publisher / Data Fiduciary: ORENDA LABS
Official Grievance & Data Protection Officer Contact: orendalabs0008@gmail.com
Governing Jurisdictions: Digital Personal Data Protection Act, 2023 (DPDP Act, India), Information Technology Act 2000, GDPR (EU/UK), CCPA/CPRA (California, USA), and Google Play Developer Policies.
Effective Date: October 11, 2026
Last Updated: October 11, 2026
================================================================================
PART 1: MASTER PRIVACY POLICY & DPDP ACT COMPLIANCE NOTICE
================================================================================
1. Introduction & Commitment to Privacy
Welcome to Target Vault ("we", "our", "us", or the "Application"), owned and operated by ORENDA LABS (the "Data Fiduciary"). We are deeply committed to protecting the privacy, autonomy, and security of our users (the "Data Principals").
This Privacy Policy constitutes a legally binding document that governs your access to and use of Target Vault. It has been formulated in rigorous compliance with:
- The Digital Personal Data Protection Act, 2023 (DPDP Act, India)
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules)
- General Data Protection Regulation (GDPR - Regulation (EU) 2016/679)
- California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
- Google Play Store Developer Program & Data Safety Policies
2. The Core Foundation: "Privacy by Design" & Local-First Processing
Target Vault is architected from the ground up on a Zero-Knowledge, Offline-First, Local-Processing Model:
1. No Account Creation: You are not required to provide your name, phone number, government ID, or physical address to download or use the Application.
2. Local SQLite Sandbox: All financial calculations, targets, goals, notes, transaction amounts, and dates inputted by you reside exclusively in the sandboxed local storage of your device (SQLite).
3. No Central Database of Personal Ledger: ORENDA LABS does not maintain, own, or operate any remote cloud database holding your personal savings ledger, bank credentials, account balances, or financial records.
3. Notice Under Section 5 of the DPDP Act, 2023
Pursuant to Section 5 of the Digital Personal Data Protection Act, 2023, every Data Principal is hereby provided clear, itemized notice of the data collected, the specified purpose of collection, and the methods to exercise legal rights:
- User Inputted Financial Ledger (Local Only): Goal names, target amounts, contribution numbers, dates, notes. Stored strictly in local SQLite database on device. Never transmitted to ORENDA LABS servers.
- App Activity & Telemetry: Screen transitions, tab switches, sort mode selections, feature clicks. Pseudonymous aggregated event logs transmitted via TLS/HTTPS for app performance optimization and diagnostics (Section 4(1)(a) DPDP / Legitimate Interest GDPR).
- Device Identifiers & Location Data: Google Advertising ID (AD_ID), approximate and precise location data, device model, Android OS version. Processed through Google Mobile Ads SDK and integrated InMobi mediation partners strictly for personalized ad delivery, analytics, and fraud prevention.
- Biometric Verification (Local Only): Fingerprint / Facial verification signals processed exclusively by Android Hardware Keystore / BiometricPrompt. The Application has zero access to actual biometric prints or templates.
4. Third-Party Service Providers (Data Processors)
Target Vault relies on verified global technology partners who act as independent data processors:
1. Google AdMob (Google LLC): Serves banner and interstitial advertisements. (https://policies.google.com/technologies/ads)
2. Google Firebase Analytics (Google LLC): Aggregated feature engagement measurement. (https://firebase.google.com/support/privacy)
3. Google Firebase Crashlytics & Performance (Google LLC): Real-time crash diagnostics and system latency monitoring.
5. Statutory Rights of the Data Principal (Section 11, 12, 13 of DPDP Act, 2023)
As a Data Principal under the DPDP Act, you possess:
1. Right to Access & Summary (Section 11): 100% of your ledger data is visible immediately on your phone screen.
2. Right to Correction and Erasure (Section 12): Instantaneous erasure by deleting individual goals inside the app, or clearing app storage in Android Settings > Apps > Target Vault > Storage > Clear Data, or uninstalling the app.
3. Right of Grievance Redressal (Section 13): Direct access to our designated Grievance Officer.
4. Right to Nominate (Section 14): Right to nominate an individual to exercise rights in event of death/incapacity.
6. Protection of Children’s Personal Data (Section 9 DPDP Act)
In compliance with Section 9 of the DPDP Act, 2023, Target Vault does not engage in tracking, behavioral monitoring, or targeted advertising directed at individuals under 18 years of age.
7. Reasonable Security Safeguards (Section 8(5) DPDP Act & Rule 8 IT Rules)
- Local Sandbox Isolation: Android Linux user-space permission isolation prevents unauthorized data inspection.
- Biometric Security: Biometric authentication relies entirely on Android BiometricPrompt APIs; raw biometric templates never enter app memory.
- TLS 1.3 Encryption: All telemetry and ad SDK communications are routed through modern TLS/HTTPS encrypted sockets.
8. Grievance Redressal Officer & Data Protection Officer (DPO)
Under Section 13(2) of the DPDP Act, 2023 and Rule 5(9) of the IT Rules, 2011:
- Designation: Grievance Officer & Data Protection Lead
- Entity: ORENDA LABS
- Official Contact Email: orendalabs0008@gmail.com
- Response Timeline: Acknowledgment within 24 hours; complete resolution within 15 calendar days.
- Escalation: You possess the statutory right under Section 13(3) of the DPDP Act, 2023 to file a formal complaint before the Data Protection Board of India (DPBI) if unsatisfied.
================================================================================
PART 2: TERMS AND CONDITIONS (TERMS OF SERVICE)
================================================================================
1. Acceptance of Terms
By downloading, installing, accessing, or using Target Vault, you agree to be legally bound by these Terms and Conditions.
2. Nature of Service: Informational & Calculation Tool Only
- No Financial Advisory / Banking Service: Target Vault is an informational calculator and personal goal visualization utility. Target Vault is NOT a bank, NBFC, investment broker, or escrow agent.
- No Real Monetary Transactions: The numbers, currencies, deposits, and withdrawals entered are purely digital tracking records. The Application does not execute bank transfers, hold custodial fiat currency, or interface directly with UPI or banking APIs.
- No Guarantee of Financial Return: Achieving savings goals depends solely on personal financial discipline. ORENDA LABS makes zero representations or warranties regarding financial outcomes.
3. Intellectual Property Rights
All trademarks, logos, UI designs, electric ring animation code, algorithms, and application software are the exclusive intellectual property of ORENDA LABS.
4. Limitation of Liability
In no event shall ORENDA LABS, its developers, or affiliates be liable for any indirect, incidental, punitive, consequential, or special damages (including financial losses, loss of local device data, or hardware malfunction). Because data is stored locally, ORENDA LABS is not liable for data loss resulting from device reset, OS upgrade failure, or accidental deletion.
5. Third-Party Advertisements
Target Vault displays third-party ads powered by Google AdMob. ORENDA LABS does not endorse or assume liability for third-party products or services advertised.
6. Governing Law & Dispute Resolution
These Terms and any dispute arising out of or related to Target Vault shall be governed by and construed in accordance with the laws of the Republic of India. Courts of competent jurisdiction in India shall have exclusive jurisdiction.
ORENDA LABS — Developer & Publisher of Target Vault
Contact & Legal Correspondence: orendalabs0008@gmail.com