🛡️ Privacy Policy

RiyasHome Life Assistance

Effective 23 September 2026 · Applies to RiyasHome app (Android & iOS) · Framework DPDP Act, 2023 (India)

Data Fiduciary

RiyasHome Life Assistance ("RiyasHome", "we", "us") is the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023 (DPDP Act). RiyasHome is operated by an independent developer based in India.

Contact — riyasailabs@gmail.com

Data We Collect

We collect only the personal data you choose to enter into the app, plus a small set of device permissions needed for specific features:

Identity — name, date of birth
Contact — mobile phone number (used for OTP login)
Financial — income, expenses, wallets, budgets you record
Lifestyle — health notes, pantry items, tasks, reminders, wardrobe entries, wishes
Device — Firebase device token, for push notifications

Permission	What it's for
Contacts	Read on-device, with your permission, to power @mention suggestions and Splits group member search. When you pick a contact, only that person's name and phone number are saved into the record you're creating (e.g. a task mention or a Splits group) — we never upload or scan your full contact list.
SMS	With your permission, Wallet can read bank/transaction SMS on your device to auto-detect and import transactions. Parsing happens on-device; only the transactions you choose to confirm are saved to your account — we never upload or store your SMS inbox.
Microphone	Voice input only. Speech is converted to text on-device / by the recognition service and is not stored as audio.
Camera / Photos	Used only when you choose to scan a bill or attach an image — nothing is captured in the background.

We do not collect location data or any background sensor data, and we never sell or share this data for advertising.

Purpose of Processing

Your data is used solely to provide and improve RiyasHome's features:

Authenticating your identity via OTP
Storing and displaying your personal records across devices
Sending reminders and alerts you create
Running AI parsing on data you explicitly submit (e.g. bill scan, SMS parser, chat assistant)

We do not use your data for advertising, profiling, or selling to third parties.

Storage & Security

Your data is stored in Supabase, hosted on AWS in the ap-south-1 (Mumbai) region. All data is:

Encrypted in transit (TLS 1.3)
Encrypted at rest (AES-256)
Access-controlled by Row Level Security — only you can read your records
Locally cached credentials stored in encrypted storage (Android Keystore / iOS Secure Enclave)

Your Rights

As a Data Principal under the DPDP Act, you have the following rights:

Access — view all data we hold about you, via Export My Data in Privacy & Security settings
Correction — edit any data directly in the app
Erasure — request full account deletion; your data is deleted within 30 days
Grievance redressal — contact us at riyasailabs@gmail.com; we respond within 7 days
Withdraw consent — delete your account at any time from Privacy & Security settings

Data Retention

We retain your data for as long as your account is active. When you delete your account:

All your personal records are immediately soft-deleted
Hard deletion completes within 30 days
Anonymised aggregate statistics (no personal identifiers) may be retained for service improvement

Items in the Recycle Bin are permanently purged after 30 days.

Third-Party Services

RiyasHome relies on these third-party services, and shares only the minimum data each one needs:

Firebase (Google) — OTP authentication and push notifications. firebase.google.com/support/privacy
Supabase — database, storage, and edge functions. supabase.com/privacy
Google Gemini API — AI text parsing, limited to data you explicitly submit; processed server-side and not retained by Google beyond processing. policies.google.com/privacy
RevenueCat — manages subscription purchases and links them to your account ID. revenuecat.com/privacy

Children's Privacy

RiyasHome is not intended for children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us immediately.

Changes to This Policy

We may update this policy from time to time. Material changes will be notified in-app. Continued use of the app after notification constitutes acceptance of the updated policy.

Grievance Officer

As required under the DPDP Act, you may contact our Grievance Officer for any data-related concerns:

Email riyasailabs@gmail.com — response within 7 business days.
To exercise your right to erasure, use Delete My Account in Privacy & Security settings, or write to the email above.