Who we are
ParBrahma (the "app") is published by Manish Soni, a sole proprietor based in Gurugram, India ("we", "us"). For the purposes of the DPDP Act we are the Data Fiduciary, and for the GDPR we are the controller of the personal data described here.
Contact for all privacy matters: hello@parbrahma.com.
This policy covers the ParBrahma apps for iOS and Android and the website parbrahma.com.
What we collect
| Data | Why | Source |
|---|---|---|
| Name and email address | To create and identify your account, and to contact you about it | You, or your Google or Apple account when you sign in |
| Google or Apple sign-in identifier | To let you sign in without a password | Google or Apple |
| Reading and listening progress | To remember where you are and sync it across your devices | The app, as you use it |
| Text of your Conversation with Krishna messages and the replies | To generate replies and, , show your conversation history | You |
| Push notification token | To send notifications you have allowed | Your device, via Apple or Google |
| Subscription status | To unlock premium features you have paid for | Apple or Google, via RevenueCat |
Your private notes are stored on our servers, not only on your phone. That is what lets a note you wrote on one device be there on the next one. Nobody reads them: they are never used to train anything, never sent to the AI provider unless you put them in a question yourself, and they are deleted with your account.
What we do not collect
- We do not record or collect voice or microphone input.
- We do not use analytics SDKs or advertising SDKs, and we show no advertising.
- We do not sell or share your personal data, including for cross-context behavioural advertising.
- We do not send the text you are reading anywhere. Verses and translations are displayed from the app itself.
- We do not receive your payment card details. Payments are handled by Apple or Google.
How we use it and our legal basis
We use personal data only to provide the app and the features you ask for, keep your account secure, respond to you, and meet legal obligations.
- DPDP Act (India): we process personal data on the basis of your consent, given when you create an account, and for the legitimate uses the Act allows. You can withdraw consent at any time; see Your rights.
- GDPR (EU/UK): performance of our contract with you (account, progress sync, subscriptions, Conversation with Krishna); consent (push notifications); legitimate interests (security, preventing abuse); legal obligation (tax and accounting records).
We do not use your data for profiling or automated decisions that have legal or similarly significant effects on you.
Conversation with Krishna
Conversation with Krishna is AI-generated. When you send a message, its text is sent to our AI provider, Anthropic, to generate a reply. Do not include information you would not want processed this way, such as health details or other people's personal data.
- Retention of conversation text by us: until you delete the conversation, or until your account is deleted.
- Retention by the AI provider: up to 30 days, under their commercial terms.
- Whether conversation text is used to train AI models: no — under their commercial terms, what is sent through the API is not used to train their models.
Replies can be wrong and are not religious authority or professional advice. See the Terms & Conditions.
Who else handles your data
We use a small number of service providers (processors) who handle personal data on our behalf and only on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Apple, Google | Sign-in, in-app payments, push notification delivery | United States |
| RevenueCat, Inc. | Subscription status management | United States |
| Anthropic | Generating Conversation with Krishna replies | United States |
| Convex | Account and progress storage | United States |
| Cloudflare (R2 storage and Workers) | Delivering audio files | United States, delivered through Cloudflare's global network |
We may also disclose data where required by law, or to protect the rights and safety of users. We do not sell personal data.
International transfers
Some providers process data outside India and outside the EU/UK, including in the United States. Where the GDPR applies, we rely on Where the GDPR or UK GDPR applies, we rely on applicable adequacy decisions or appropriate safeguards for international transfers, including the EU Standard Contractual Clauses and, where required for UK restricted transfers, the UK International Data Transfer Addendum.. Transfers from India follow any restrictions notified under the DPDP Act.
How long we keep it
- Account data and progress: while your account exists, then deleted within seven days of account deletion.
- Conversation text: until you delete the conversation, or until your account is deleted.
- Push tokens: until you turn off notifications or delete the app or account.
- Subscription records: as long as needed for tax and accounting law, eight years.
- Backups: overwritten within 7 days.
Security
Data is encrypted in transit. Data is encrypted at rest by our hosting providers. Passwords are stored only as scrypt hashes and sign-in tokens only as SHA-256 hashes, so neither can be read back from a copy of the database. The audio bucket is private and reachable only through a gateway that checks a short-lived signed ticket for every file. Access to the production systems is limited to the people who run them. No system is perfectly secure; if a breach affects you we will notify you and the relevant authorities as the law requires.
Your rights
Everyone
Whatever the law where you live, you can ask to see, correct or delete your personal data, and you can withdraw consent at any time. Email hello@parbrahma.com from the address on your account, or use Delete your data. We reply within 30 days and do not charge for requests.
India (DPDP Act 2023)
- Access a summary of the personal data we process and the processing activities.
- Correction, completion, updating and erasure.
- Grievance redressal: write to Manish Soni at hello@parbrahma.com. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
- Nominate another person to exercise your rights in the event of your death or incapacity.
- Withdraw consent as easily as you gave it.
EU and UK (GDPR)
- Access, rectification, erasure, restriction, data portability and objection.
- Withdraw consent at any time, without affecting earlier processing.
- Complain to your local supervisory authority (in the UK, the ICO).
California (CCPA/CPRA)
- Categories collected in the last 12 months: identifiers (name, email, sign-in ID, push token); commercial information (subscription status); internet or other electronic activity (reading and listening progress); and the content of your AI messages. Sources and purposes are listed above.
- We do not sell or share personal information and have not done so in the last 12 months. We do not use or disclose sensitive personal information for purposes that would require a right to limit.
- You may request to know, delete and correct your personal information, and you will not be discriminated against for doing so. An authorised agent may make a request on your behalf.
This website
parbrahma.com does not use cookies, analytics, or third-party advertising or tracking technologies. The website does not intentionally load fonts, scripts, or images from third-party services for tracking or advertising purposes.
Our website is hosted by Vercel Inc. As part of providing, securing, and operating its hosting infrastructure, Vercel may process technical information such as IP addresses, request information, diagnostic information, and server or security logs. Vercel retains such information in accordance with its applicable retention practices and for the periods reasonably necessary for its legal, security, operational, and contractual purposes. Where applicable, Vercel may retain information securely where deletion is not immediately possible, such as in backups.
Changes to this policy
If we change this policy we will update the date below and, for significant changes, tell you in the app before they take effect.
Effective date: 28 September 2026.
Contact
Manish Soni, sole proprietor, Gurugram, India · hello@parbrahma.com