Privacy Policy

This explains what Shararat collects, why, how long it is kept, and what you can make us do about it. It is written to the Digital Personal Data Protection Act, 2023.

Data FiduciaryAckrolix Innovations Private Limited

What we collect

• Your mobile number. It is how you sign in, and it is the only identifier we require.
• Your name, age and preferences, as you gave them at signup. The age is stored as the number you declared together with the date you declared it — we do not invent a date of birth from it.
• Your conversations: what you send, what the character replies, and what she has learned about you from it.
• How you use the app — screens opened, messages sent, notifications delivered and opened.
• Your device's push token and timezone, if you allow notifications. The timezone is what keeps quiet hours quiet where you actually are.
• Payment records. Card and UPI details are handled by our payment gateway and never reach our servers.
• Your device's advertising ID, and a record of when the app was installed and opened and when you signed up, started a trial or subscribed. These are used only to measure our advertising — see Advertising and measurement below.

What we do not collect

• Your contacts, photos, files, or anything from other apps.
• Your precise location.
• Your card number, UPI PIN, or bank credentials.

Why

• To run the service — sign you in, deliver your messages, and let a character remember you between conversations.
• To keep it safe. Messages pass through automated safety checks, and a small number of events are recorded so that harm can be detected and reviewed.
• To take payment and to prove what you were charged for.
• To improve the product, using usage patterns rather than the contents of your conversations.
• To advertise Shararat, and to measure which ads bring people in — see Advertising and measurement below.

Consent

Consent is recorded per purpose, with a version and a timestamp, at the moment you create your account. Terms and privacy are required — without them there is no lawful basis to hold an account at all. Anything else is optional and can be withdrawn without losing your account.

Who else sees it

The people who run the service, and the providers it runs on: cloud hosting, the AI provider that generates replies, the payment gateway, and the push notification services operated by Apple and Google. Each receives only what its job needs. Meta and Google also receive the limited information described under Advertising and measurement. We do not sell your data, and we do not share it with data brokers or ad exchanges.

Your messages are sent to an AI provider to generate replies. They are transmitted for that purpose alone and are not used by us to train models.

Advertising and measurement

We advertise Shararat on Meta (Facebook and Instagram) and on Google, and use their measurement tools to learn which ads bring people in. The app contains Meta's SDK and Google's Firebase Analytics, and our website uses the Meta pixel and the Google tag. What they receive:

• That the app was installed and opened, and which ad led to the install, if one did.
• When you sign up, start a trial or subscribe, with the plan and the amount paid.
• Your device's advertising ID, which is how an install is matched to the ad that caused it.
• On our website, that a page was visited, and when someone taps the download button.

They never receive your conversations, anything a character says to you, your name, your age or your phone number.

Each of them handles this under its own privacy policy:

Metafacebook.com/privacy/policy

Googlepolicies.google.com/privacy

You can reset or delete your advertising ID at any time in your phone's settings — on Android, under Settings → Privacy → Ads. Once you do, what the app reports can no longer be linked to you by that ID. You can also turn off ad personalisation in your Meta and Google account settings.

How long it is kept

Each kind of data has its own window, enforced by a scheduled job rather than left to a promise:

• Messages, remembered facts and open threads — 12 months.
• Usage and analytics — 12 months.
• What Meta and Google receive for advertising — kept under their own retention policies, not ours. Resetting your advertising ID breaks its link to you.
• Notification history — 3 months.
• Device push tokens — 6 months.
• Payment and billing records — kept for as long as tax and accounting law requires.
• Safety records — 3 years, and stripped of anything identifying you rather than deleted, because they are the evidence that a safety rule was applied.

Your account, your preferences and your consent records are kept for as long as the account exists. They are removed when you delete it, not on a timer.

Your rights

• Access — download everything held against your account, from Profile settings.
• Correction — change your name, age or preferences at any time, in the same place.
• Erasure — delete your account and its data. You get a reference; keep it, because it cannot be recovered from your phone number, by design.
• Withdrawal — withdraw an optional consent without losing the account.
• Grievance — write to the officer below, and escalate to the Data Protection Board of India if we do not resolve it.

Children

Shararat is not for anyone under 18. We do not knowingly hold data about a child. If you believe we do, write to us and it will be removed.

Security

Conversation content is encrypted in the database, access is limited to the staff who need it, and every administrative action is logged. No system is perfect, and we will tell you if a breach affects you.

Grievance Officer

NameRushan

Emailsupport@shararat.app

Address136-P, 3rd Floor, Rider House Building, Sector 44, Gurgaon, Haryana 122002, India

We reply to grievances within the period the DPDP Act allows.

Changes

If this policy changes in a way that affects you, we will tell you in the app and ask again where consent needs asking again.

Privacy queriessupport@shararat.app