Contents
Last Updated: 5 July 2026 Effective Date: Upon publication
This Privacy Policy explains how PEAKSERVE GLOBAL PRIVATE LIMITED, a company incorporated under the Companies Act, 2013 of India, with its registered office at 2639/197, Onkar Nagar, Tri Nagar, Delhi, North West Delhi, India - 110035 ("Paramatma", "Company", "we", "us", or "our"), collects, uses, shares, and protects personal data when you use the Paramatma mobile applications, the website at https://www.paramatma.co.in, and related services (the "Services").
We are the data controller (under the EU General Data Protection Regulation and UK GDPR), business (under the California Consumer Privacy Act as amended by the California Privacy Rights Act, "CCPA/CPRA"), and data fiduciary (under the Indian Digital Personal Data Protection Act 2023, "DPDPA") for the personal data described in this Policy.
Please read this Policy together with our Terms of Service.
Summary of Key Points
- What we collect: Account details, your devotional activity (jap counts, chosen deity/mantra, streaks), Sangh community data, focus/detox sessions, optional Kundali birth details, purchase confirmations, and technical data — depending on which features you use.
- Religious and spiritual data: Your practice inside Paramatma can reveal your religious beliefs. We treat this as special-category data, process it only to provide the features you ask for, and never use it for advertising or profiling.
- What we do with it: Run the Services, keep your counts and streaks, power your Sangh, generate your Kundali reading, process subscription and in-app purchases via Apple and Google, prevent abuse, and meet legal obligations.
- What we don't do: We do not sell your personal information. We do not use your content to train generative AI foundation models without your separate opt-in.
- Your rights: Access, correct, delete, port, and object to processing. Withdraw consent at any time. Email info@paramatma.co.in.
- Where your data goes: Stored on managed cloud infrastructure (including Supabase), with Standard Contractual Clauses and similar safeguards for international transfers.
1Scope of This Policy
In Short: This Policy covers your use of Paramatma. It doesn't cover third-party services you reach through us — those have their own policies.
This Policy applies to personal data we process when you use the Services, visit our website, or otherwise interact with us. It does not apply to third-party websites, apps, or services linked from the Services (including Apple, Google, and AI providers), which have their own privacy practices; information you choose to share publicly within the Services; or anonymised or aggregated data that cannot reasonably identify you.
2Data Controller and Contact Points
In Short: Here's who we are and how to reach us for any privacy question.
Data controller / business / data fiduciary: PEAKSERVE GLOBAL PRIVATE LIMITED
2639/197, Onkar Nagar, Tri Nagar, Delhi, North West Delhi, India - 110035
Privacy contact: info@paramatma.co.in Grievance Officer (India, DPDPA / IT Rules 2021): reachable at info@paramatma.co.in — see Section 18.
3Categories of Personal Data We Collect
In Short: Depending on how you use Paramatma, we collect account info, your devotional activity, community data, focus sessions, optional birth details for Kundali, purchase confirmations, and technical signals. Nothing we don't need.
We collect the following categories of personal data. The specific data within each category depends on which features you use.
3.1 Account and Profile Data
Name or display name, email address, phone number (optional), profile photo (optional), password (stored as a hash where email sign-in is used), language and region settings (your locale), and authentication identifiers from Apple, Google, or other federated login providers if you sign in that way.
3.2 Devotional Practice Data — Reveals Religious or Spiritual Belief
Your chosen deity, the naam or mantra you count, your jap counts and completed malas, chanting sessions and their timestamps, daily streaks, milestones, and reminders you set. Because this activity can reveal your religious or spiritual beliefs, it is special-category personal data under Article 9 GDPR and sensitive personal data under the DPDPA. See Section 6.
3.3 Community and Sangh Data
If you create or join a Sangh (group), we process the group name, your membership and role, invitations you send or accept (invite links and codes), the display name shown to other members, leaderboard entries derived from your activity, and nudges you send or receive. Other members of a Sangh can see the shared information described in Section 8.2.
3.4 Digital Detox and Focus Data
Focus or intervention sessions you start, their duration and outcome, the intentions and reminders you configure, and related in-app signals. This is used only to provide the wellbeing features and is not a medical or diagnostic assessment.
3.5 Kundali and AI Feature Inputs
If you use the Kundali feature, we process the birth details you provide (date, time, and place of birth) and the prompts or questions you submit, to generate a personalised reading. These inputs, and the derived reading, are treated as special-category data where they reveal religious or philosophical belief. See Section 7 for how AI Features process your data. Providing Kundali details is entirely optional.
3.6 Purchases, Mudra, and Entitlements
If you buy a subscription or in-app items (including the in-app currency, "Mudra"), we receive confirmation of payment status, subscription tier, entitlements, and your Mudra balance. We do not directly collect or store your credit card, bank account, or payment instrument details — all payments are processed by the Apple App Store or Google Play Store (and their in-app-purchase billing) under their own privacy policies.
3.7 Device, Technical, and Usage Data
IP address, device identifiers, operating system, app version, language, time zone, crash reports, performance diagnostics, in-app actions (such as which features you use), session timestamps, push notification tokens, and similar telemetry. Collected automatically when you use the Services.
3.8 Communications
Messages you send us (via email or in-app support), feedback, and our records of your support requests and our replies.
3.9 Marketing Preferences
Your opt-in or opt-out status for marketing emails, push notifications, and other communications.
4How We Collect Personal Data
In Short: Some data comes directly from you, some is collected automatically when you use Paramatma, and some comes from Apple or Google when you sign in or buy.
We collect personal data directly from you (when you create an account, count your jap, join a Sangh, configure a focus session, enter Kundali details, contact us, or otherwise use the Services); automatically (through SDKs and similar technologies that record device and usage data — see Section 14); and from third parties (authentication providers such as Apple and Google if you use federated login, and the App Stores for purchase confirmations).
5Purposes and Legal Bases for Processing
In Short: Every time we process your data, we have a specific purpose and a valid legal basis under the GDPR. The table below shows what we do, why, and on what legal grounds.
| Purpose | Categories of Data | Legal Basis (GDPR / UK GDPR) |
|---|---|---|
| Creating and managing your account | 3.1, 3.6, 3.7 | Performance of a contract (Art. 6(1)(b)) |
| Providing the jap counter, streaks, and reminders | 3.2 | Performance of a contract (Art. 6(1)(b)); explicit consent for religious data (Art. 9(2)(a)) |
| Running Sangh groups, invites, leaderboards, and nudges | 3.1, 3.2, 3.3 | Performance of a contract (Art. 6(1)(b)) |
| Providing digital-detox and focus features | 3.4 | Performance of a contract (Art. 6(1)(b)) |
| Generating your Kundali reading | 3.5 | Explicit consent (Art. 6(1)(a) / Art. 9(2)(a)) |
| Processing subscriptions and in-app purchases | 3.1, 3.6 | Performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) |
| Service and security communications | 3.1, 3.8 | Performance of a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) |
| Sending marketing communications | 3.1, 3.9 | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Improving the Services, analytics, crash debugging | 3.7 | Legitimate interests (Art. 6(1)(f)) |
| Preventing fraud, abuse, and security threats | All | Legitimate interests (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) |
| Complying with legal, regulatory, and tax obligations | As needed | Legal obligation (Art. 6(1)(c)) |
Where our basis is legitimate interests, we have conducted a balancing assessment and concluded that our interests are not overridden by your rights and freedoms. You can request a summary by emailing info@paramatma.co.in.
6Special-Category (Religious and Spiritual) Data
In Short: Your devotional activity and Kundali details reveal religious or spiritual belief. We only process them on your explicit consent, never for advertising, and you can delete them anytime.
Paramatma is a devotional application, so much of what you do in it — your chosen deity, the naam you chant, your Kundali details — can reveal your religious or spiritual beliefs. This is "special-category data" under Article 9 GDPR and "sensitive personal data" under the DPDPA.
- We process this data only to provide the features you have chosen to use, on the basis of your explicit consent, given when you set up your practice or enable the relevant feature.
- You can withdraw consent at any time by changing your deity/mantra, deleting the relevant content, or deleting your account.
- We do not use this data for advertising, cross-context behavioural profiling, or any purpose unrelated to providing the Services to you.
- We do not use it to train generative AI foundation models without your separate opt-in (Section 7.3).
7AI Features (Kundali)
In Short: The Kundali feature uses AI. We process your birth details and questions to produce a reading. We never use your content to train generative AI models without your separate opt-in.
7.1 Transparency
You are interacting with an artificial intelligence system when you use the Kundali feature. This disclosure is provided in accordance with Article 50 of the EU AI Act and similar transparency obligations. The reading is generated for reflection and general interest only; see Section 19 and our Terms of Service.
7.2 How AI Features Use Your Data
When you use the Kundali feature, we process the birth details and prompts you submit, together with limited context needed to produce a coherent reading. These AI features rely on large language models operated by third-party AI service providers (see Section 8.1). Your prompts may be sent to those providers under contract, who are bound to use the data only to provide the service to us and not to train their own models on your inputs.
7.3 No Training on Your Content Without Consent
We do not use your content (jap data, Kundali details, prompts, photos, or other identifiable inputs) to train generative AI foundation models without your separate, opt-in consent. We may use anonymised, aggregated usage data to improve the Services in accordance with applicable law.
7.4 No Automated Decisions with Legal Effect
The Kundali reading and any recommendations do not produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
8How We Share Personal Data
In Short: We share with service providers who help us run the Services, with the Sangh members you choose, and with the App Stores for billing. We don't sell your data.
We share personal data only in the circumstances described below. We do not sell your personal information.
8.1 Service Providers (Processors)
We engage trusted third parties who process personal data only on our instructions under written data processing agreements meeting the requirements of Article 28 GDPR and equivalent laws. Categories include:
- Cloud hosting, database, authentication, and storage — Supabase (managed PostgreSQL, auth, and file storage) and supporting cloud infrastructure;
- AI model providers — Google (Gemini) and OpenAI — bound not to train on your inputs, used only for the Kundali feature;
- App Stores and in-app-purchase billing — Apple App Store and Google Play Store;
- Push notifications — Apple Push Notification service and Firebase Cloud Messaging;
- Analytics and crash reporting — limited first-party usage analytics and crash-monitoring tooling used to operate and improve the Services;
- Email and customer support — email delivery and support tooling;
- Professional advisers — accountants, auditors, and lawyers, where strictly necessary.
A current list of subprocessors is available on request at info@paramatma.co.in.
8.2 Other Users (Your Sangh)
When you join or create a Sangh, the other members can see the information shared within it — typically your display name, your position on the group leaderboard, and nudges you send. You control whether you join a group and the display name you use.
8.3 App Stores (Apple and Google)
Subscription and in-app purchases, refunds, and billing are handled by Apple or Google. We share only the information necessary to provide and bill for the Services. Apple and Google act as independent controllers for that data under their own privacy policies.
8.4 Legal Requirements and Safety
We may disclose personal data when we believe in good faith it is necessary to comply with a legal obligation, respond to lawful requests from public authorities, protect the rights, property, or safety of Paramatma, our users, or others, or enforce our Terms of Service.
8.5 Business Transfers
If Paramatma is involved in a merger, acquisition, financing, reorganisation, or sale of assets, personal data may be transferred to the relevant party, subject to confidentiality undertakings and continued application of this Policy (or equivalent protection).
8.6 With Your Consent
We may share personal data for any other purpose with your consent.
9International Data Transfers
In Short: Your data may be stored or processed in countries other than where you live. We apply Standard Contractual Clauses and similar safeguards to protect it.
The Services are operated from India, and personal data may be transferred to, stored in, and processed in India, the European Economic Area, the United Kingdom, the United States, and other regions where our service providers operate.
Where we transfer personal data across borders, we rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, supplemented by additional safeguards (encryption, access controls, transfer impact assessments) where required; comply with any restrictions the Government of India designates under the DPDPA; and use other lawful transfer mechanisms (adequacy decisions, derogations) where appropriate. You can request a copy of the safeguards we apply by emailing info@paramatma.co.in.
10Data Retention
In Short: We keep data only as long as we need to. Account data lasts while your account is active plus a short period after; everything else has its own retention period.
| Category | Retention period |
|---|---|
| Account and profile data | While your account is active, plus 90 days after closure (for recovery), then deleted or anonymised |
| Devotional practice data (jap counts, streaks, deity/mantra) | While your account is active, or until you delete it |
| Sangh membership and leaderboard entries | While you are a member, or until you leave the group or delete your account |
| Digital-detox and focus sessions | While your account is active, or until you delete it |
| Kundali birth details and readings | Until you delete them, or 90 days after account closure |
| Purchase confirmations (no card data) | 7 years (Indian tax and accounting law) or as required by applicable law |
| Device, technical, and usage data | Typically up to 24 months |
| Support communications | Up to 3 years after the last interaction |
| Marketing preferences | Until you opt out, plus a suppression record to honour your opt-out |
| Backups | Routinely overwritten on a rolling basis (typically within 90 days) |
We may retain certain data for longer where required by law, to resolve disputes, or to enforce our agreements.
11Security
In Short: We encrypt your data, restrict access, and follow industry-standard security practices. No system is fully secure, so use a strong password and keep your device safe.
We implement technical and organisational measures designed to protect personal data, including: encryption of data in transit (TLS) and at rest; strict access controls based on least privilege; periodic security testing, monitoring, and patching; and incident-response procedures with breach notification consistent with Articles 33–34 GDPR, the CCPA/CPRA, and the DPDPA. No system is completely secure; you play an important role by using a strong password, enabling two-factor authentication where available, and keeping your device secure.
12Your Privacy Rights
In Short: Depending on where you live, you have rights to see, correct, delete, port, and object to processing of your data. Email info@paramatma.co.in to exercise them.
Depending on your location, you may have the following rights: access a copy of your data; rectification of inaccurate data; erasure ("right to be forgotten"); restriction of processing; portability in a machine-readable format; objection to processing based on legitimate interests; withdrawal of consent at any time; and the right to lodge a complaint with your supervisory authority (Section 17).
12.1 California (CCPA/CPRA)
California residents have the right to know, access, delete, and correct personal information, to opt out of sale or sharing (we do neither), to limit the use of sensitive personal information, and to non-discrimination for exercising these rights. See Section 16.
12.2 Other US State Privacy Laws
If you reside in a US state with a comprehensive privacy law (including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia), you have rights that parallel those above, including opting out of targeted advertising, sale, and certain profiling. These rights are subject to each state's exceptions and verification requirements.
12.3 India (DPDPA)
You have the right to access, correct, and erase your personal data, the right to grievance redressal (Section 18), and the right to nominate another person to exercise your rights in case of death or incapacity.
12.4 How to Exercise Your Rights
Email info@paramatma.co.in with a clear description of your request. We will acknowledge it promptly, verify your identity (typically by confirming control of the email address on your account), and respond within the timelines required by applicable law — within 30 days under the GDPR (extendable where necessary) and 45 days under most US state laws. There is no charge, except for manifestly unfounded or excessive requests. You may use an authorised agent with valid written authorisation.
13Marketing Communications
In Short: Marketing emails and push notifications are opt-in. You can opt out anytime, but we'll still send essential service messages.
We send marketing communications only with your consent (or, where permitted by law, on an opt-out basis to existing users for similar features). You can opt out at any time via the unsubscribe link, your device notification settings, in-app preferences, or by emailing info@paramatma.co.in. We will continue to send essential service communications (security alerts, billing receipts, policy updates) regardless of your marketing preferences.
14Cookies and Similar Technologies
In Short: We use limited SDKs for essential functions and analytics. We don't do behavioural advertising.
Our app and website use SDKs, local storage, and similar technologies to operate essential functionality, remember your preferences, measure performance, and detect fraud. We do not use them for cross-context behavioural advertising. Where required by law, we obtain your consent before placing non-essential cookies, and you can manage tracking preferences through your device settings (including Apple App Tracking Transparency on iOS). There is currently no industry standard for "Do-Not-Track" signals, so we do not respond to them at this time; this disclosure is provided under California Business and Professions Code §22575(b).
15Children's Privacy
In Short: Paramatma isn't for children under 13. If you're a parent and think we have your child's data, contact us and we'll delete it.
The Services are not directed to children under 13, the minimum age required by Apple and Google for general-audience apps, and we do not knowingly collect personal data from children under that age. If we learn we have inadvertently collected such data, we will delete it promptly. Parents and guardians may contact info@paramatma.co.in. For users between 13 and the age of majority, certain processing may require verifiable parental consent under COPPA, GDPR Article 8, or other applicable laws.
16California-Specific Disclosures
In Short: California has detailed disclosure rules. This section spells out what we collect, why, who we share with, and your specific California rights.
In the past 12 months we have collected the following categories of personal information (CCPA §1798.140): identifiers (name, email, account ID, IP, device IDs); customer records (purchase confirmations, no card data); commercial information (subscription and Mudra history); internet or network activity (usage data); audio/electronic/visual information (profile photos you upload); inferences (limited, to personalise reminders); and sensitive personal information (data revealing religious or philosophical beliefs, precise details you enter for Kundali, and account credentials). Sources, purposes, and disclosures are set out in Sections 3–8. We do not sell or share personal information for cross-context behavioural advertising. We use sensitive personal information only to provide the Services you request, and you may direct us to limit that use by contacting info@paramatma.co.in.
17EU and UK Supervisory Authorities
In Short: If you're in the EU or UK and think we're handling your data wrongly, you can complain to your data protection regulator.
If you are in the EU or UK, you have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or where the alleged infringement occurred. A list of EU authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en, and the UK Information Commissioner's Office at https://ico.org.uk.
18Indian Grievance Officer (DPDPA 2023 and IT Rules 2021)
In Short: Indian users with privacy grievances can contact our Grievance Officer. We'll acknowledge within 24 hours and resolve within the statutory timelines.
For grievances under the Indian Digital Personal Data Protection Act 2023 or the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, contact our Grievance Officer by email at info@paramatma.co.in, or by post at PEAKSERVE GLOBAL PRIVATE LIMITED, 2639/197, Onkar Nagar, Tri Nagar, Delhi, North West Delhi, India - 110035. We acknowledge complaints within 24 hours and resolve them within the timeframes prescribed by Indian law.
19Automated Decision-Making and Profiling
In Short: We don't use AI to make decisions that legally affect you.
We do not engage in automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR. The Kundali feature generates readings for reflection only; you remain in control of your decisions.
20Changes to This Policy
In Short: We'll tell you about material changes in advance, by email or in-app notice.
We may update this Policy from time to time. Where changes are material, we will notify you in advance by email, in-app notice, or other reasonable means. The "Last Updated" date indicates when it was most recently revised. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.
21Contact Us
In Short: Use the inbox that matches your question.
Privacy, data rights, and grievances: info@paramatma.co.in General support: support@paramatma.co.in Postal address: PEAKSERVE GLOBAL PRIVATE LIMITED, 2639/197, Onkar Nagar, Tri Nagar, Delhi, North West Delhi, India - 110035