Privacy Policy

1. Scope and operator

This Privacy Policy applies to the Vedic Club website, mobile applications, account services, devotional content, support channels, and other services that link to this policy, together called the Service. Vedic Club is operated under the Vedic Club brand. In this policy, Vedic Club, we, us, and our refer to the Service operator.

Vedic Club is a personal devotional practice service offering original audio, devotional readings, deity wallpapers, alarms, reminders, preferences, and membership features. The mobile app requires phone-based account authentication for features that use an account, sync, or membership. The website and app may not expose identical features on every platform.

2. Information we collect

We collect only information needed for the features you choose, account security, subscription administration, support, legal compliance, and privacy-reviewed measurement. Depending on how you use the Service, this may include:

• Account and verification data: phone number in normalized international format, Firebase user ID, authentication method, account status, verification records, and security events. When you choose Truecaller, we may receive the profile fields you authorize, such as a verified phone number and name, and use them to complete sign-in and optionally prefill your profile.
• Profile and devotional preferences: display name, language, theme, favourite and selected deities, content preferences, media assignments, reminder settings, and account or membership settings. Alarm records may include time, repeat days, snooze setting, deity, sound, enabled state, and a label you enter.
• Device and technical data: device model, operating system and version, app version, language, time zone, network and IP address, app instance or installation identifiers, device integrity or app-attestation results, and technical request information. We use this data for delivery, authentication security, fraud prevention, diagnostics, and compatibility.
• Usage and diagnostic data: feature interaction, session, performance, crash, error, and support diagnostic data. We do not need the contents of your private prayer practice to provide alarms, playback, or bundled devotional content.
• Purchase and entitlement data: store account identifiers, product or offer identifiers, transaction and receipt references, purchase tokens or signed transaction data sent by the store, price and currency, subscription status, renewal and expiration dates, cancellation, refund, grace, and revocation status. Google Play and Apple process payment card, bank, and billing information under their own policies. Vedic Club does not receive your full card number from a store transaction.
• Support and communications: your email address, message, attachments, and information you choose to provide when you contact support, report a problem, request account recovery, or make a privacy request.

Devotional preferences can reveal personal beliefs or practices. We treat them as personal information, keep them separate from advertising conversion payloads, and do not sell them.

3. How information is collected

We collect information directly from you when you create or use an account, edit your profile, set an alarm, choose a deity, use membership features, grant a permission, contact support, or manage your choices.

We also receive information from service providers that help deliver the Service. Truecaller provides the result of a consented verification flow. Firebase provides authentication and security services. Google Play and Apple provide purchase and subscription status. Device operating systems provide permission, notification, app lifecycle, and technical signals. Hosting, security, crash, performance, and analytics providers may process technical or event data as described in this policy.

The website may use essential cookies, local storage, and security technologies needed to operate and protect the site. Any non-essential analytics or advertising technology will be separately disclosed and enabled only as permitted by applicable law and your choices.

4. How we use information

We use personal information to:

• create, secure, authenticate, recover, and manage your Vedic Club account;
• provide devotional content, personalization, offline access, audio playback, wallpapers, alarms, reminders, and membership entitlements;
• schedule, reconcile, and explain local device features and their platform-specific limitations;
• process, verify, restore, administer, and support subscriptions and store purchases;
• respond to support, privacy, billing, account recovery, and cultural-content requests;
• prevent fraud, abuse, unauthorized access, spam, security incidents, and misuse of the Service;
• diagnose crashes, performance issues, delivery failures, and compatibility problems;
• measure agreed product and advertising conversions using the limited event contract in this policy;
• send essential service, security, account, billing, and legal communications; and
• comply with applicable law, enforce our Terms of Service, and protect users, the public, and our rights.

Depending on the jurisdiction and purpose, our lawful basis may include providing a requested service, taking steps at your request before a contract, consent, compliance with a legal obligation, or a legitimate interest that is not overridden by your rights. Where we rely on consent, you can withdraw it through the available controls or by contacting us. Withdrawal does not affect processing already completed lawfully.

5. Authentication and account data

Phone sign-in uses Truecaller as the preferred consent-based verification path and Firebase Phone Authentication as the SMS OTP fallback. Both paths are designed to resolve to one canonical Firebase user ID for a verified phone number.

For Truecaller, the app displays Truecaller's consent experience and requests only the approved scopes. Our backend receives and validates the authorization result and may retrieve the profile fields you authorized. Truecaller authorization codes, access tokens, and profile responses are handled on trusted backend systems and are not stored as ordinary app state. Truecaller operates its own service and its own privacy policy also applies to data it processes.

For Firebase SMS verification, Firebase and its service providers process the phone number, verification activity, IP address, user-agent or device information, and anti-abuse signals needed to deliver and protect authentication. Vedic Club does not use your one-time password for advertising and does not retain it after verification as an account credential.

We store account information needed to keep your account, entitlement, security history, and requested profile available across supported devices. Access tokens are stored in protected platform storage and are not placed in analytics events, ordinary application state, logs, or support messages.

6. Device permissions and local data

Vedic Club requests device permissions in context, when a feature requires them. These may include notifications, exact or scheduled alarms on supported Android devices, audio and media access, wallpaper or photo access, and platform-specific background or system-surface permissions. You can deny or later revoke a permission in your device settings. Refusing a permission may prevent that feature from working, but should not remove access to unrelated devotional content.

Preferences and account session material are stored using platform-appropriate protected storage. Alarm records are stored locally so enabled alarms can continue to operate without an internet connection, account request, analytics event, or push message. Native scheduled alarms and notifications are reconciled after relevant device events where the platform allows it.

Android may support setting wallpapers, ringtones, notification sounds, and alarm sounds through system APIs and user-mediated flows. iOS may provide save or share guidance instead of programmatic assignment. These operating-system behaviors may expose technical information to the platform and are governed by its policies. Vedic Club does not request contacts, location, microphone, or camera access for the core devotional features unless a later feature clearly explains and requests that access.

7. Subscriptions and payments

Vedic Club may offer an optional auto-renewing membership through Google Play Billing and Apple StoreKit. The app will show the product, duration, current localized price, introductory offer if any, renewal price, renewal frequency, eligibility, and cancellation route before purchase. The price and offer shown by the applicable store control the transaction. A displayed product hypothesis is not a promise of a particular price.

Google Play or Apple processes the payment and controls the store transaction. We receive the purchase information needed to verify the transaction, grant or remove entitlement, support restoration, respond to refund or chargeback events, and comply with accounting and legal requirements. We do not receive full payment credentials.

Subscriptions renew automatically unless cancelled through the applicable store before the renewal date. Cancellation normally stops a future renewal while access continues through the paid period, subject to store rules and applicable law. Deleting your Vedic Club account or uninstalling the app does not cancel a store subscription. Manage or cancel the subscription through the store link provided in the app. Refunds are handled by the applicable store except where Vedic Club is legally responsible.

8. Analytics and Meta conversion events

Vedic Club keeps product analytics and advertising conversion measurement separate. Where enabled for the release, Firebase Analytics and related diagnostic services use a limited, privacy-reviewed event schema to understand reliability and product use. We do not use these tools to collect your OTP, authentication tokens, purchase tokens, alarm labels, prayer text, or media files.

With the required consent and, on iOS, any required App Tracking Transparency choice, Meta App Events may receive only the following conversion events after the underlying action is confirmed:

• CompleteRegistration: verified account completion and a registration method category.
• StartTrial: confirmed trial entitlement and a product alias, with value and ISO currency when applicable.
• Subscribe: confirmed active paid membership and a product alias, with value and ISO currency when applicable.
• Purchase: a successful purchase or renewal confirmed by the billing authority, with product alias, value, currency, and event ID.
• CancelSubscription: a reviewed cancellation event confirmed by the store or entitlement backend.

We do not send raw phone numbers, names, OTPs, Truecaller access tokens, Firebase tokens, purchase tokens, receipts, payment credentials, deity preferences, alarm labels, prayer text, or other private devotional content to Meta. Meta may process event information under its own terms and privacy policy. You can control permissions, consent, and device advertising settings through the app and operating system where available.

9. Service providers and sharing

We do not sell or rent personal information. We share information only as needed to provide the Service, operate our business, protect users, measure approved conversions, complete a transaction, or comply with law.

• Google Firebase and Google Cloud: authentication, backend functions, secure data services, messaging, crash and performance diagnostics, analytics, and configuration where enabled.
• Truecaller: consented identity verification and the profile fields permitted by the user and the approved integration.
• Google Play and Apple: app distribution, in-app purchases, subscription management, transaction verification, refunds, and store account services.
• Meta: the allowlisted conversion events described above when the required consent and platform choices permit them.
• Website hosting, security, email, and support providers: delivery of the website, protection from abuse, support communications, and service operations.
• Authorities and professional advisers: where required by law, legal process, fraud prevention, safety, dispute resolution, or protection of rights.

Service providers may act as processors or service providers for the relevant activity, while Google, Apple, Truecaller, and Meta may also process information under their own independent terms. We require appropriate confidentiality and security protections where our arrangements allow.

10. Retention and security

We retain information for as long as needed to provide the account and Service, maintain security, resolve support and billing issues, meet accounting and legal obligations, enforce our agreements, and handle disputes. Account and profile data is normally deleted or de-identified after a verified account deletion request, except for information we must retain or may lawfully retain for these purposes.

Authentication, security, crash, analytics, and billing systems may keep limited records after deletion for fraud prevention, audit, legal, tax, dispute, or backup purposes. Backups may remain until their normal secure rotation. Store providers and Firebase publish their own retention periods for the services they operate, including deletion from live and backup systems after a customer deletion request where their policies provide for it.

We use encryption in transit, protected credential storage, access controls, least-privilege service accounts, environment separation, audit records, and redaction of secrets from logs. No network, device, cloud service, or storage system can be guaranteed to be completely secure. Tell us promptly if you suspect unauthorized access to your account.

11. Your rights and choices

Depending on where you live, you may have rights to access, correct, update, export, restrict, object to, or delete personal information, withdraw consent, opt out of marketing communications, and lodge a complaint with the applicable data protection authority. We will handle requests under the law that applies to the request and may ask for verification to protect the account.

To request deletion without using the app, visit vedicclubapp.com/account-deletion and submit the mobile number used for your account and, optionally, an email address for updates. You can also use the in-app path Profile → Account → Delete account. We may contact you to verify account ownership. The deletion flow is intended to remove the account, cloud profile, synced preferences, authentication association, and associated personal data that we are not legally required to retain. Contact support@vedicclubapp.com if you cannot use the form or need help with a deletion request.

Account deletion does not cancel Google Play or Apple subscriptions. The app will direct you to the applicable store management page, and you should cancel future billing before or during deletion. Store transaction and tax records may be retained by the store or Vedic Club when required by law. Deletion is irreversible and may remove alarms, preferences, membership history, and other account-linked data.

You can manage notifications, device permissions, advertising choices, analytics consent, and iOS tracking choices through the app and operating-system settings. Withdrawing analytics or advertising consent does not disable account authentication, local alarms, core devotional content, or a paid entitlement that has already been validly purchased.

12. Children

The Service is not directed to children and we do not knowingly create or maintain an account for a person below the minimum age required by applicable law without the consent or authorization required by that law. If you believe that a child has provided personal information to Vedic Club, contact support@vedicclubapp.com. We will review the request and take appropriate action.

13. International access

Vedic Club is intended initially for users in India and may be made available in other countries. Our service providers may process information in India, the United States, the European Union, or other countries where they operate. Where required, we use appropriate contractual, technical, and organizational safeguards for cross-border processing. The privacy rights and protections available to you may vary by location.

14. Changes and contact

We may update this Privacy Policy when the Service, vendors, law, or data practices change. We will publish the revised version at this URL, update the effective date, and provide an in-app or other notice for material changes where appropriate. Your continued use after the effective date means the revised policy applies to future processing, subject to any consent requirement.

For privacy questions, account deletion, access or correction requests, consent withdrawal, or legal notices, contact support@vedicclubapp.com. Please do not send passwords, one-time passwords, access tokens, purchase tokens, or payment credentials by email.