Privacy Policy
Ghar ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Ghar mobile application (the "App") or visit getghar.com (the "Website").
By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.
Choose your platform
Ghar is operated by Colorblast LLC. The Android section describes the first Android release. The iPhone and Website sections retain the disclosures for those products, including older iPhone versions. References to Apple sign-in, iCloud, AppsFlyer and Apple account deletion apply to iPhone, not Android. Website processing and your applicable privacy rights apply whichever device you use.
Ghar for Android
You can use Ghar for Android without creating a Ghar account. Your household preferences and practice progress stay on your Android device. This release does not use Apple sign-in, synchronize with iPhone or iCloud, or share subscription access with the iPhone app.
Information you save on this device
You may save a household name, household member names and age groups, religious tradition and deity preferences, practice experience and reading preferences. Ghar also stores your language and appearance choices, selected calendar reference city, reminder settings, bookmarks, practice collections, completed practice and reading history, and preparation checklists.
This information supports the features you use within Ghar. It is not included in purchase-verification requests, and this Android release does not upload a household profile or practice-history database to a Ghar account server. Calendar cities are selected from the published references provided in the app. Ghar does not request Android location permission or retrieve your device's GPS position.
Reminders, widgets and audio
Reminders start off. If you enable them, Ghar requests Android notification permission when required and schedules reminders on this device. You can change them in Ghar or Android Settings; Android may delay delivery. The home screen widget keeps a limited local snapshot of the practice and observance text it displays. Background practice sounds are bundled audio played on the device.
Google Play purchases and verification
Where Android subscriptions are available, Google Play handles the purchase, billing account, payment method and renewal. Ghar does not receive your full payment-card number or bank-account details. The offer and billing terms shown by Google Play control the purchase; no price or trial is promised by this policy.
To check Premium access, the app may send its Android package name, Google Play purchase token, purchased product identifiers and a random request nonce to Ghar's verification service over HTTPS. The service uses Google's Play Developer API to check purchase status and expiry and returns an access result. Google receives the purchase token and package information as part of this check. Household names or members, religious preferences, selected city, bookmarks and practice or reading history are not included.
The verification implementation does not create customer accounts or keep purchase tokens or entitlement records in an application database. Technical connection information, such as an IP address, may be processed to operate and protect the service. Google's purchase and payment records remain subject to Google's Privacy Policy and applicable retention requirements.
Ghar's Android verification service runs on Google Cloud Run in the United States (Oregon, us-west1). Google Cloud processes connection and infrastructure metadata to deliver and secure the service. The app sends purchase tokens to Ghar in HTTPS request bodies, not URLs. Ghar's application logs exclude purchase tokens; the server forwards them to Google's authorized Play API for verification and acknowledgment. The dedicated project's log routing excludes these services' routine HTTP request logs. Short-lived abuse counters operate in server memory.
The dedicated project's retained diagnostic logs have a 30-day retention setting; required administrative and system audit logs have a 400-day setting. These are infrastructure records, not a stored practice-history or customer purchase-token database. These project settings do not establish a universal deletion deadline for Google's payment records or separately governed organization-level security records. Google and applicable legal requirements may control those records' retention. Contact us with a privacy request so we can identify the relevant data and provider rather than promise deletion of records we do not control.
App review access
Authorized app reviewers can enter a dedicated review code to inspect the content library without buying a subscription. The app sends the code, its package name and a random request nonce to the same service over HTTPS. The server compares a protected digest and returns a temporary review session. The code is not included in URLs or application logs; the app keeps the granted session in memory for up to one hour. Exiting review mode, restarting the app or deleting local data ends that session. Review access does not create a paid subscription or a customer account.
Analytics, links and support
This Android release has no Ghar analytics, attribution, advertising or crash-reporting SDK integration. It does not upload practice or reading events to a Ghar analytics endpoint. Google Play's own distribution and billing processes are separate from your local practice history.
Google Play Billing includes its own diagnostic transport. The bundled library sends billing-operation attempts and results (including checkout operations) and technical information to Google, including app/package and Billing library versions, Android version, device make/model and build information, memory capacity, network type, locale and timezone, and randomly generated billing-session or transaction identifiers. Its transport may temporarily queue diagnostic events on the device before sending them over HTTPS. This information supports operation and diagnosis of billing; it is separate from Ghar's household preferences and spiritual-practice history. Google's processing and retention are governed by its applicable privacy and service terms, and the Cloud Run project log settings above do not control these SDK records.
Opening a website or source link uses another app, such as your browser, and the destination's privacy practices apply. Visiting getghar.com is covered by the Website disclosure below. If you email support, the information you choose to send is processed to respond to your request. Please do not send passwords, purchase tokens or payment-card details.
Local storage, export and deletion
Ghar stores preferences and progress in Android app-private storage protected by the operating system's application sandbox. The app does not add its own encryption layer to those preference files. It requests that Android automatic backup and device transfer exclude this app data.
Use My Home > Settings & privacy > Export my data to save a copy in a destination you select. If you choose a cloud-backed document provider or share the exported file, that provider or recipient handles the copy. Ghar cannot remove separately exported or shared copies.
Your local data remains on the device until you remove it. Use My Home > Settings & privacy > Delete local data and confirm to remove the local profile, saved items, history, checklists, preferences, reminders and widget snapshot. Android's app-data controls are another way to remove this data. See the Android deletion instructions.
Deleting local data or uninstalling Ghar does not cancel a Google Play subscription or erase Google's transaction records. Manage cancellation in Google Play subscriptions. A valid purchase may be recognized again when restored with the purchasing Google Play account. Android subscriptions do not unlock the iPhone app or create a cross-account family subscription.
Household information and privacy requests
The person using Ghar enters and manages household-member information locally. This release does not create separate Ghar accounts for children or use household information for advertising. The applicable privacy rights described below also apply to Android users. Google payment records and subscription cancellation may require Google's own controls.
For Android privacy questions or deletion requests, email hello@getghar.com with the subject Ghar Android data deletion. You can also contact Colorblast LLC directly at amitg@colorblast.in. Tell us that you use Android and what information or request you mean. If needed to find a previous support exchange, include the email address you used and its approximate date. We normally verify the request through that existing email conversation. We do not ask for passwords, purchase tokens, card details, government ID or a practice-data export by default. If further verification is necessary, we will explain why and ask only for the minimum information needed.
We aim to acknowledge Android support and privacy requests within three business days and respond to privacy requests within one calendar month. If we cannot complete a request within that target, we will explain the reason and the applicable timeline before the target date. These response targets do not replace rights or deadlines that apply to a particular request.
For Android support, we normally remove correspondence and attachments within 90 days after the request closes, and honor a valid earlier deletion request. For privacy requests, we retain a minimal request and outcome record for 24 months after closure, not the full conversation or attachments, to document how the request was handled. A narrow legal obligation, security investigation or dispute may require retaining particular information longer; we limit that retention to the information and period needed and explain it where permitted.
This support-retention schedule applies to records within Ghar's control. Google billing, SDK diagnostic, infrastructure and email-provider records may have separate retention rules; we identify the relevant provider rather than promise that deleting a support message erases every provider record. You can delete local Android data without contacting support or canceling a subscription. See the Android deletion instructions.
iPhone and Website
The numbered sections below describe iPhone and Website processing. The Android section above governs Android-specific app data, billing and deletion. General privacy rights, contact information and policy-update terms apply to all users.
1. Information We Collect
1.1 Information You Provide
When you use Ghar, you may enter or store the following information. In Ghar 1.1.7, core profile and practice data stays on this device and is not uploaded to a Ghar-operated account server. Household cloud sync is unavailable in this release.
- Optional Sign in with Apple: You can use Ghar without an account. If you choose Sign in with Apple, Apple gives the App a unique user identifier and may also share your name and email address, depending on your choice during sign-in. If you choose "Hide My Email," Apple provides a private relay email address. Ghar stores the identifier and any shared name or email in protected app storage to manage your local session. We do not receive your Apple ID password.
- Household Profile: Family name, household member names and ages, religious tradition (sampradaya), ishta devata (chosen deity), and experience level. This information is used solely to personalize your practice experience.
- Optional profile photos: A photo you choose for a household member is stored on your device. It is included in your export and removed when you delete Ghar data.
- Preferences: Language preferences, notification settings, and practice preferences.
- Practice History: Records of practices you have completed within the App, saved/bookmarked practices, and collections you create.
1.2 Information Processed Automatically by the App
- Location Data: With your permission, iOS provides the App an approximate coordinate for on-device panchang calculations such as sunrise, sunset, muhurta, and rahu kaal. Ghar does not send that coordinate to a Ghar-operated server. A selected location may remain in local app data. You may disable location access at any time in iOS Settings.
- Device Information: Ghar may process device type, operating system version, and app version on the device for compatibility and troubleshooting. The released Ghar 1.1.6 also sends limited device and app information to AppsFlyer for attribution. The Ghar 1.1.7 candidate removes the AppsFlyer SDK and sends no new data to AppsFlyer.
- Usage and attribution data: Ghar 1.1.6 uses AppsFlyer for limited app-open, product-interaction, device, install-source, campaign-attribution, country or coarse-location, and diagnostic data. A device that remains on 1.1.6 may continue that processing until it updates or provider recording is disabled. Ghar 1.1.7 removes AppsFlyer collection; removing the SDK does not itself erase data AppsFlyer processed from version 1.1.6 or earlier. Ghar's separate in-app product analytics buffer remains encrypted on device because no Ghar analytics upload endpoint is configured in 1.1.7.
- User-initiated provider deletion: For a signed-in deletion, Ghar 1.1.7 sends the deletion service a fresh Apple identity token and authorization code, the Apple user identifier, and a random deletion request ID. The service verifies the Apple account and uses the credential only to revoke Sign in with Apple. It does not receive the household profile, profile photos, location, practice history, app/build diagnostics, or an AppsFlyer identifier. Historical AppsFlyer requests for data processed by version 1.1.6 or earlier use the verified manual request path described below.
1.3 Website Visits
The Website uses Vercel Web Analytics for aggregated page-view statistics. Vercel may process the page path, filtered query parameters, referrer, approximate location, browser, operating system, and device type. Vercel Web Analytics does not use third-party cookies or give Ghar a persistent identifier that follows you across websites. A short-lived request hash used for aggregate visitor counting is discarded after 24 hours.
If you arrive from an identified referral source, a Website helper stores only a cleaned source label, landing path, referrer host, and timestamp in browser session storage and adds campaign parameters to App Store links. That session value stays in the browser tab session and is not joined to a Ghar app account.
1.4 Information We Do NOT Collect
- We do not collect biometric data, health data, or financial information beyond what Apple processes for subscriptions.
- We do not use AI chatbots or generate personalized spiritual content using artificial intelligence.
- We do not show third-party ads in the App.
- We do not sell your personal information.
- We do not use cookies, web beacons, or similar tracking technologies within the App.
2. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Contract Performance: Processing necessary to provide the App's services to you (e.g., household profile, practice history, panchang calculations).
- Consent: Where you have given explicit consent, such as enabling location services or opting in to push notifications. You may withdraw consent at any time.
- Legitimate Interests: Processing for app improvement through anonymous analytics, provided this does not override your fundamental rights and freedoms.
- Legal Obligation: Processing required to comply with applicable laws.
3. How We Use Your Information
We use the information we collect to:
- Personalize your experience: Recommend daily practices, festivals, and content based on your tradition, experience level, and household composition.
- Provide calendar features: Calculate accurate panchang data based on your location.
- Maintain your practice history: Keep a personal log of your completed practices.
- Send notifications: Morning practice reminders, festival alerts, and preparation guides (only if you opt in).
- Improve the App: Understand how features are used to make Ghar better for all users.
- Communicate with you: Send important updates about the App, your subscription, or changes to our policies.
4. Data Storage and Security
- On-device data: Practice content (guides, articles, mantras) is stored on your device after initial download for offline access. App preferences and cached data are also stored locally on your device.
- Household cloud sync is unavailable in Ghar 1.1.7. This release does not upload a new household profile, profile photo, location, or practice-history snapshot to iCloud or CloudKit. Reminder permissions and device notification settings also remain device-local.
- Legacy iCloud cleanup: If an earlier Ghar build created an encrypted household snapshot in Apple's iCloud key-value storage, Ghar 1.1.7 can remove that legacy snapshot during account deletion and honor an account-bound deletion marker so an older device cannot restore deleted data. This cleanup path is not a current sync feature.
- Provider-deletion service: Deletion jobs are encrypted at rest and expose only an opaque bearer receipt for status checks. The service temporarily retains only the Apple provider credential, a one-way account fingerprint, and request/status fields required to finish Sign in with Apple revocation. The credential is erased when Apple revocation completes. If automatic work instead reaches Action required, that encrypted recovery material is retained only for verified manual recovery or handoff and expires with the entire job no later than the fixed deadline described in Section 12.
- Network requests use HTTPS and the transport security provided by Apple's networking stack.
- We do not sell or rent your personal information. Ghar 1.1.6 disclosed limited device, attribution, and product-interaction data to AppsFlyer as a service provider. Ghar 1.1.7 removes that integration and sends no new data to AppsFlyer.
- In the event of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law.
5. Attribution Retirement and App Tracking Transparency
Ghar 1.1.6 uses AppsFlyer for marketing attribution, campaign measurement, SKAdNetwork support, and product-interaction analytics. Apple may classify some attribution and campaign measurement as tracking when it measures activity across apps or websites. Where required, 1.1.6 may request permission through Apple's App Tracking Transparency framework.
Ghar 1.1.7 removes the AppsFlyer SDK, does not submit attribution or product-interaction events to AppsFlyer, and does not request App Tracking Transparency permission for AppsFlyer. People who remain on 1.1.6 may still generate attribution data until they update or provider recording is disabled.
We do not show third-party ads in the App or sell personal information. Removing the integration or keeping the provider account open does not erase historical AppsFlyer data. Historical erasure and retention are handled through a verified provider request and are not represented as complete without provider evidence.
6. Third-Party Services
Ghar integrates with the following third-party services:
- Apple (App Store, Sign in with Apple, Keychain, StoreKit, and legacy iCloud cleanup): For app distribution, optional sign-in, protected credential storage, subscription management, and removal of any encrypted household snapshot created by an earlier Ghar build. Household cloud sync is unavailable in Ghar 1.1.7. Governed by Apple's Privacy Policy.
- AppsFlyer (Ghar 1.1.6 and earlier only): For install attribution, campaign measurement, SKAdNetwork support, app-open events, product-interaction analytics, and diagnostics. AppsFlyer may have processed device identifiers, vendor identifier, IP address, coarse location or country, device and app information, and event data. The Ghar 1.1.7 candidate removes the SDK and sends no new AppsFlyer data. Ghar may keep its provider account open for historical privacy-request evidence; an open account does not authorize new collection in 1.1.7.
- Vercel: Hosts the Website, the provider-deletion API and its encrypted key-value job store, and privacy-focused aggregated Web Analytics for page views, referrers, approximate location, browser, operating system, and device type. Vercel Web Analytics does not use third-party cookies. Review Vercel Web Analytics privacy and compliance.
- Formspree: If you use the fallback web deletion form, Formspree processes and stores the name, email address, optional Apple relay email, and notes you submit so the request can be delivered to Ghar. Review Formspree's Privacy Policy before using that form. You may instead email hello@getghar.com.
- Analytics (anonymous): We may use privacy-focused analytics services that do not track individuals or create advertising profiles.
Ghar 1.1.7 does not integrate ad-serving, attribution, data-broker, or social-media tracking SDKs into the App. We do not share your personal data with any third party for their own marketing or advertising purposes.
7. Subscriptions and Payments
All subscription payments for the Premium plans currently presented in Ghar are processed by Apple through the App Store and StoreKit. Ghar 1.1.7 has no community or partner-code redemption program. We do not receive or store your payment information (credit card numbers, bank details, etc.). Subscription management, billing, eligibility, and refunds are handled through your Apple ID account. See Apple's subscription support for details.
8. Children's Privacy
Ghar is a family-oriented app. We comply with the Children's Online Privacy Protection Act (COPPA) and equivalent international regulations. Household profiles may include children's first names and ages to personalize family mode features. We do not:
- Create individual accounts for children under 13.
- Collect personal information directly from children.
- Share children's information with third parties.
- Display advertising or in-app purchases targeted at children.
- Use third-party ad-serving SDKs or analytics to profile children.
All children's data is managed by the parent or guardian who controls the household profile and can modify or delete it at any time. If we learn that we have inadvertently collected personal information from a child under 13 without parental consent, we will delete that information promptly.
9. Your Rights and Choices
You have the right to:
- Access your data: View all personal data we have stored by visiting My Home > Settings > Account & Privacy > Data Controls in the App.
- Correct your data: Edit your household profile, preferences, and settings at any time.
- Delete your data: Through My Home > Settings > Account & Privacy > Data Controls > Delete Ghar Data, a signed-in user can reauthorize with Apple, submit Sign in with Apple token revocation, attempt to save an opaque Apple-status receipt, and then delete local Ghar data and any legacy encrypted Ghar iCloud snapshot. This automatic flow sends nothing to AppsFlyer. For data AppsFlyer may have processed from Ghar 1.1.6 or earlier, use the verified web form or email path so Ghar can submit and document a scoped manual provider request. We process verified requests within the time required by applicable law. A provider may retain limited information where required for legal compliance, security, fraud prevention, or dispute resolution.
- Export your data: Download your practice history and profile data in a portable format.
- Opt out of notifications: Manage notification preferences in the App or through iOS Settings.
- Disable location: Turn off location access in iOS Settings. The panchang will default to manual location entry.
- Withdraw consent: Where we process data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
10. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
- Right to Opt Out of Sale or Sharing: We do not sell your personal information or use it to serve personalized ads inside Ghar. AppsFlyer attribution in Ghar 1.1.6 may involve measurement Apple classifies as tracking; you can disable tracking in iOS Settings or update to Ghar 1.1.7, which removes AppsFlyer collection. You may contact us to exercise any applicable opt-out right.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
- Right to Correct: You may request that we correct inaccurate personal information.
- Right to Limit: You may request that we limit the use and disclosure of your sensitive personal information.
To exercise these rights, contact us at hello@getghar.com. We will respond to verifiable requests within 45 days.
11. European Users (GDPR)
If you are located in the EEA, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Right of Access: Obtain confirmation of whether we process your data and request a copy.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your personal data.
- Right to Restriction: Request restriction of processing under certain circumstances.
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Lodge a Complaint: File a complaint with your local data protection authority.
To exercise these rights, contact us at hello@getghar.com. We process verified requests within the time required by applicable law.
12. Data Retention
- Local Ghar data remains on your device until you delete it in the App, clear the App's data, or uninstall the App.
- Ghar 1.1.7 does not create new household cloud-sync snapshots. If an earlier version created one, it can remain in your Apple iCloud account until Ghar's deletion control removes it; an account-bound deletion marker may remain to prevent restoration by an older device.
- For an automatic signed-in deletion, Ghar's service removes the encrypted Apple revocation credential when Apple revocation succeeds. If Apple instead reaches Action required, automatic retries stop but the encrypted credential remains available for verified manual recovery or handoff until that happens or the entire job expires. The entire job—including the opaque receipt, recovery material, and Apple-status record—expires no later than 60 days after submission; status checks and retries do not extend that deadline.
- AppsFlyer may separately retain data it processed from Ghar 1.1.6 or earlier according to its applicable terms, legal obligations, and configured retention controls. Removing the SDK, disabling provider recording, or retaining the provider account does not by itself prove historical erasure. A new Ghar 1.1.7 receipt's authoritative completion status is based only on Apple revocation, and the Ghar 1.1.7 app displays Apple status only. The service also carries a deprecated AppsFlyer compatibility field so an older installed Ghar client can decode the receipt: a new Apple-only job sets that field to Unavailable, while a legacy in-flight job may show Action required or Completed. The compatibility field is not provider evidence, never changes the 1.1.7 overall result, and never triggers an automatic AppsFlyer call. The verified web form remains available for a scoped historical AppsFlyer request. Ghar does not claim that historical erasure is complete until provider evidence proves it.
- Apple, Vercel, and Formspree may separately retain data they process according to their applicable terms, legal obligations, and configured retention controls.
- We retain information only as needed for the purposes described in this policy and as required by applicable law. We do not promise a shorter fixed period where a provider or legal obligation controls retention.
13. Account Deletion and Data Retention
You can initiate deletion of your Ghar account and associated app data from within the app by going to My Home > Settings > Account & Privacy > Data Controls > Delete Ghar Data.
For a signed-in account, the primary Ghar 1.1.7 deletion flow uses a fresh Sign in with Apple authorization to submit Apple token revocation to Ghar's deletion service. After the service accepts the request, the App attempts to save the opaque Apple-status receipt, deletes its local household profile, profile photos, saved practices, practice history, preferences, and local Ghar sign-in session, and removes any legacy encrypted Ghar iCloud snapshot it can locate. If secure receipt storage temporarily fails after acceptance, the App does not submit duplicate Apple work; it keeps the receipt in memory for a save retry, proceeds with verified local deletion, and warns that closing the App may lose local access to that proof. The service erases the Apple credential when revocation completes. If Apple instead requires action, automatic retries stop and the encrypted recovery material remains available only for verified manual recovery or handoff until the fixed job expiry, no later than 60 days after submission. Ghar 1.1.7 neither collects new AppsFlyer data nor sends an automatic AppsFlyer deletion request. Data AppsFlyer may have processed from version 1.1.6 or earlier requires the separate verified manual provider request and evidence process described on the delete-account page.
Deleting your Ghar account does not automatically cancel an App Store subscription billed by Apple. To manage or cancel your subscription, visit: https://apps.apple.com/account/subscriptions
If you no longer have access to the app, use our direct account deletion page: https://www.getghar.com/delete-account
14. International Data Transfers
Ghar is available globally. Apple, Vercel, and Formspree may process information in countries other than the one where you live, subject to their terms and applicable transfer safeguards. AppsFlyer may retain historical data processed from Ghar 1.1.6 or earlier in other countries under its applicable safeguards. Ghar does not operate a separate account database server for the core app data described in this policy.
- Apple's Sign in with Apple, Keychain, StoreKit, and iCloud infrastructure, including cleanup of any encrypted household snapshot created by an earlier Ghar build, under Apple's applicable terms and safeguards.
- Applicable contractual and legal transfer safeguards used by our service providers.
- Compliance with applicable data protection laws including GDPR for users in the EEA, UK GDPR for users in the United Kingdom, and equivalent regulations in other jurisdictions.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Where required by law, we will provide notice of material changes before they take effect. The "Last Updated" date at the top of this page indicates when the policy was last revised.
16. Contact Us
If you have questions about this Privacy Policy or your data, please contact us:
- Email: hello@getghar.com
- Android: My Home > Settings & privacy > About Ghar > Contact support. You can also email Colorblast LLC directly at amitg@colorblast.in.
- iPhone: My Home > Settings > About & Feedback
For GDPR-related inquiries, you may also contact our Data Protection contact at the email address above.