Privacy Policy

Effective date: September 28, 2026

This Privacy Policy describes how Aarti Studio LLC ("Aarti Studio," "we," "us," or "our"), a California limited liability company, collects, uses, and discloses information when you use the Aarti mobile application (the "App"), a Hindu devotional companion for daily aarti, mantra and japa practice, the panchang, festivals, scripture reading, and AI-assisted devotional guidance, and when you visit our website at tryaarti.com.

1. Information We Collect

A. Information You Provide Directly

• Account information. When you open the App we create a guest account for you automatically, identified only by a random identifier. If you choose to create a full account, we collect your email address (when you sign in with a one-time email code) or the name and email address that Apple or Google share with us (when you use Sign in with Apple or Google Sign-In).
• Onboarding answers. During setup the App asks optional questions, such as your first name, the deities you worship, your city, when you like to pray, and your reminder preferences. Depending on the version of the App, it may also ask about your age range, life stage, devotional goals, and interests. These answers are stored on your device and saved to your account so they can be restored if you reinstall the App or sign in on another device.
• Profile. If you have a full account, you may set a display name and a profile photo. Today the App has no public profiles, feeds, or community features, so your display name and photo are shown only to you. If we add features that show your name or photo to other users, we will update this policy and let you know before your name or photo is shown to anyone else.
• Chat messages. The questions and text you send to the AI companion, together with limited context described in Section 3. See Section 2 (Religious Information) and Section 3 (How the AI Feature Works).
• Feedback and support. Information you provide when you contact us for support or send us feedback.

B. Information Collected Automatically

• Usage data. Your interactions within the App, such as screens viewed, features used, aartis and mantras played, onboarding progress, and session timing. We use a product analytics provider (PostHog) and Google Analytics for Firebase to collect and analyze this data. We do not record your screen sessions; if we turn on screen-session recordings in the future, text you type and images will be masked, and we will update this policy first.
• Crash and error data. If the App encounters an error, we collect the error message, technical details of where it occurred, and the device and app version, so that we can fix it.
• Device information. IP address, operating system and version, app version, device model, language and region settings, time zone, screen size, and device or installation identifiers.
• Location. If you allow location access, the App uses your device's location to find your nearest city and time zone so it can calculate sunrise, sandhya times, the panchang, and festival dates for where you are. Your device's operating system (Apple or Google) may process your coordinates to look up the city name. We keep the city name, not your precise coordinates. You can choose a city manually instead, and you can turn location access off at any time in your device settings.
• Purchase and subscription data. If you purchase a subscription, we receive subscription status, product identifier, price, currency, trial status, and transaction identifiers from Apple, Google, or our subscription management provider. We do not receive or store your payment card details; payment is processed by Apple or Google.
• Advertising and measurement data. If you install the App after tapping one of our advertisements, we receive limited information that lets us connect the install or subscription back to that advertisement: the referral information Google Play passes to us on Android installs, the advertising platform's click identifier, your IP address and user agent, basic device characteristics (device model, operating system and version, screen size, language, and time zone), the time of the click and of your first app open, the anonymous installation identifier assigned by the Meta SDK, and whether you allowed tracking on iOS. See Section 6.

C. Practice Data and Information on Your Device

Your practice data, such as your practice history, favourites, bookmarks (including any notes you add to them), and similar records of your devotional practice, is stored on your device. When you have an account, it is also saved to your account so that it can sync across your devices and be restored if you reinstall the App. It is deleted when you delete your account.

Some information is currently stored only on your device and is not sent to us, including downloaded audio and your AI chat history (the record of past conversations shown in the App). Deleting the App removes the information stored only on your device.

D. Information Collected on Our Website

Our website, tryaarti.com, is a simple informational site. Our hosting provider (Cloudflare) processes standard technical information such as your IP address and browser user agent to deliver the site and protect it from abuse. If we use a link in our advertisements that passes through our website on the way to the app store, that link may record the advertising click information described in Section 1.B so that we can match it to an app install. The website does not read files, contacts, or other content from your device, and it does not build a profile of you across other websites.

If you join the Aarti waitlist on our website, we use your email address (and the ad or link that brought you to the page) only to tell you when Aarti launches and to send you Aarti news, and every email has an unsubscribe link.

2. Religious Information (Sensitive Data)

Aarti is a Hindu devotional app. Your use of the App, the deities you select, your practice history, and the content of your chat messages may reveal or suggest your religious beliefs. In some jurisdictions (including the EEA, the United Kingdom, and several U.S. states) this is treated as sensitive or special category data.

• We process this information only to provide the App's features to you: generating responses to your messages, showing you relevant aartis, mantras, scripture and festivals, and personalizing your experience.
• We do not use it for advertising, do not sell it, and do not share it except with the service providers needed to operate the App (Section 7).
• Where the law requires it, we ask for your explicit consent before processing this information, and you may withdraw consent at any time by contacting us or deleting your account.

3. How the AI Feature Works

• The AI companion is available only to users 18 and older.
• Your chat messages are sent to a third-party AI model provider to generate responses. Under our provider's commercial terms, your messages are not used to train their models.
• To make answers relevant, each message is sent with limited context from the App: today's panchang details, the name of your selected city, the names of the deities you selected, a summary of your recent practice (such as how many sessions you have completed and your current streak), and your language setting. It does not include your name, email address, or photo.
• We do not use your messages to train AI models either. Our servers process your messages to find relevant passages from the App's own content and to generate a response. We do not store your messages on our servers after the response is delivered; your chat history is kept on your device.
• Responses are generated automatically and may be inaccurate. See our Terms of Service.

4. How We Use Your Information

We do not use chat messages or religious information for analytics profiling, advertising, or marketing.

5. Marketing Communications

If you provide your email address, we may send you marketing emails (for example, feature announcements or subscription offers) through our email provider. Every marketing email contains an unsubscribe link, and unsubscribing never affects your access to the App. Service emails (security, account, and policy changes) are sent regardless of marketing preferences.

To decide which emails are useful to you, we store a small set of properties alongside your email address: your first name, your language, your age range and life stage if you shared them, a short summary of the daily practice plan you chose, your subscription lifecycle (for example whether you have seen our subscription offer, are subscribed, or have been shown a discount), and how you signed up. We do not store your chat messages, the deities you selected, or your devotional goals with your email record.

6. Advertising, Analytics, and Tracking

We may advertise Aarti on third-party platforms such as Meta (Facebook and Instagram) and TikTok. We measure that advertising in two ways.

• On your device. The App includes the Meta SDK and the TikTok Business SDK, which may report events such as app install, onboarding completion, registration, starting checkout, trial start, and subscription. On iOS, the device advertising identifier is used only if you allow tracking through Apple's App Tracking Transparency prompt. On Android, the advertising ID may be used; you can reset or delete it in your device settings.
• Our own attribution service. To measure which ad or link led to an install or purchase, we and our attribution service use device and network information such as your IP address, user agent, device model, operating system version, language, time zone, and the timestamps of the ad click, the first app open, and any purchase. We match these signals statistically (probabilistic attribution), and we do so including when you have not allowed tracking on iOS. We may then send an advertising partner a limited record of a measured event (such as a trial start) together with matching keys, such as the click identifier, your IP address and user agent, the anonymous Meta installation identifier, and an internal identifier for your device or account, so the event can be credited to the right advertisement. This data is used only to measure our own advertising. It is not used to build advertising profiles of you across other companies' apps or websites. We never send your chat messages, your practice data, the deities you selected, or any inference about your beliefs.
• What the ATT prompt does and does not control. Declining the iOS tracking prompt prevents use of the device advertising identifier. It does not by itself stop the attribution measurement described above, which does not rely on that identifier. If you want to be excluded from this advertising measurement entirely, email us (Section 14) and we will suppress your account from it.
• Analytics. We use PostHog and Google Analytics for Firebase for product analytics. Analytics data is used to understand and improve the App, not to advertise to you.
• No advertising use of religious data. We do not target advertising based on your chat messages, the deities you select, your practice, or any other religious information, and we do not share that information with advertising platforms.
• Do Not Track. Some browsers offer a "Do Not Track" signal. Neither the App nor our website responds to browser DNT signals; we honor the device-level controls and the opt-out described above instead.

7. Information Sharing and Disclosure

We do not sell your personal information. We share information only as follows:

• Service providers, who process data on our behalf under contractual confidentiality and security obligations:
  • A third-party AI model provider (currently Anthropic): AI response generation
  • Supabase: account authentication, account data, and profile photo storage
  • Cloudflare: hosting, application servers, infrastructure, and our attribution service
  • PostHog: product analytics and error reporting
  • Google (Firebase): product analytics; Google Sign-In if you choose it
  • Superwall: paywall and subscription management
  • Loops: email delivery, including account and marketing email
  • Apple / Google: payment processing, app distribution, Sign in with Apple, and location lookup by your device's operating system
• Advertising partners (Meta and TikTok): as described in Section 6. Under California law this may be considered "sharing" for cross-context behavioral advertising; you have the right to opt out (Section 12).
• Legal requirements: if required by law, or in the good faith belief that disclosure is necessary to comply with a legal obligation, protect our rights or property, or protect the safety of users or the public.
• Business transfers: in a merger, acquisition, or asset sale, personal information may be transferred as a business asset; this Policy would continue to apply to it.

8. Data Retention

• Account information, onboarding answers, profile, and practice data saved to your account: retained while your account is active, deleted within 30 days of account deletion.
• Profile photo: deleted when you remove it or delete your account.
• Chat messages: not stored on our servers after a response is delivered; your chat history stays on your device until you delete it or the App. Our AI provider may retain messages for a limited period under its own policies for safety and abuse monitoring.
• Usage and device data: retained in analytics for up to 24 months, then deleted or aggregated.
• Purchase records: retained as required for tax, accounting, and legal purposes.
• Advertising and measurement data: click and attribution records are retained for up to 13 months, then deleted or aggregated.
• Marketing data: retained until you unsubscribe or your account is deleted.

9. International Data Transfers

We are based in the United States and process data on servers in the United States. If you use the App from outside the U.S. (including the EEA, the United Kingdom, Canada, or India), your information is transferred to the U.S. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses with our service providers.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction, including encryption in transit and access controls on your account data. No method of transmission or storage is 100% secure.

11. Children's Privacy

The App is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it. In jurisdictions where the age of digital consent is higher than 13, we rely on parental consent as described in our Terms of Service. The AI companion is available only to users 18 and older.

12. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy (portability).
• Correct inaccurate or incomplete information.
• Delete your personal information. You can also delete your account directly in the App (Settings), which removes your account data as described in Section 8 and clears the App's data on your device.
• Opt out of marketing emails (unsubscribe link) and of the advertising "sharing" described in Section 6.
• Restrict or object to certain processing, and withdraw consent at any time where processing is based on consent, without affecting prior processing.
• Not be discriminated against for exercising any of these rights.

To exercise any right, email support@tryaarti.com or use the in-app account controls. We verify requests using your account email and respond within the timeframe required by applicable law (generally 30 to 45 days). An authorized agent may submit a request on your behalf where the law allows.

EEA / UK residents: you also have the right to lodge a complaint with your local supervisory authority (in the UK, the ICO).

California residents: the rights above include the CCPA/CPRA rights to know, delete, correct, and opt out of sharing. We do not sell personal information and have not done so in the preceding 12 months; we may "share" limited identifiers (including click identifiers, device identifiers, IP address, and user agent) for advertising measurement as described in Section 6, and you may opt out by emailing us. We do not use or disclose sensitive personal information for purposes requiring a "Limit Use" right. We do not knowingly sell or share personal information of consumers under 16.

Canadian residents: we process personal information with your consent or as otherwise permitted by PIPEDA. You may withdraw consent, subject to legal or contractual restrictions.

India residents: we process personal data in accordance with the Digital Personal Data Protection Act, 2023. You may exercise the rights above, and may nominate another individual to exercise them on your behalf as provided by law.

13. Changes to This Privacy Policy

We may update this Policy from time to time. We will post the updated Policy in the App and on this page and update the effective date above. For material changes, we will provide additional notice (such as an in-app notice or email) and, where the law requires, seek your consent.

14. Contact Us