Privacy Policy

1. Who we are

VastuScan ("the App") is published by Varun Agarwal ("the app publisher", "we", "us"). This policy explains what information the App collects, why, who processes it on our behalf, how long we keep it, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the rules made under it.

2. What we collect

Your account. When you sign in with Google or Apple we receive your name, your email address and an account identifier from them. We never receive or store your password. If you choose Apple's "Hide My Email", we receive Apple's relay address instead.

What you upload and create.

• Floor plans and photos you upload, and any photo you attach in a chat with Deesha or to a support message. A floor plan may show an address or names; we use it only for your analysis.
• The details of each property you add: its name, its floors, the direction you set, and, in Compass Check, the rooms you place and the compass readings you take.
• Your reports and your conversations with Deesha.

Purchases. When you buy credits, Apple or Google processes the payment. We receive a receipt that tells us which pack you bought and a transaction reference, so we can add your credits. We never see or store your card or bank details.

Support messages. What you write to us, any screenshot you attach, and, sent automatically so we can help without asking you, your app version, phone model, operating system version and a reference to your most recent scan.

Creator Rewards (only if you take part). Your creator code, the links to the posts you submit, and the public numbers of those posts (views, likes, comments) that we read from YouTube, or check by hand on Instagram and TikTok.

Notifications (only if you allow them). A notification token for your phone and the language you use the App in, so we can tell you when a report is ready or a creator post is decided. You can turn notifications off at any time in your phone's settings.

Crash reports. If the App crashes, technical details of the crash (what failed, the app version, phone model and operating system) and your account identifier. Never your floor plans, reports or conversations.

Usage analytics (only if you allow it). After your first report, the App asks once whether you want to help improve VastuScan. If you say yes, we record how the App is used: for example that a scan was started or finished, a report was opened or a PDF exported, together with your account identifier, app version and phone model. Never the contents of your floor plans, reports or conversations. If you say no, none of this is collected. You can change your answer at any time in Profile.

What we do NOT collect. Your location, your contacts, your photo library (the system picker gives us only the photo you choose), or your phone's advertising identifier. The App does not track you across other companies' apps or websites, and it shows no ads.

3. How we use it

Only to:

• produce your Vastu analyses and reports, and answer your questions through Deesha;
• keep your properties, reports and credits in your account;
• process purchases and Creator Rewards;
• send the notifications you allowed;
• answer your support messages;
• keep the App working: fix crashes, and, if you allowed it, understand which parts of the App are used so we can improve them;
• prevent fraud and abuse, for example the same post being claimed twice.

We do not sell your information, rent it, or share it for advertising.

4. Who processes it for us

We use these service providers. Each receives only what it needs for its task:

• Supabase (Mumbai, India): database, file storage and sign-in. Holds everything stored in your account.
• OpenRouter, and Google's Gemini models through it (United States and other countries): the AI that analyses floor plans and powers Deesha. Receives your floor plan images, property and room details, and your questions to Deesha.
• Apple and Google: sign-in, in-app purchases and delivering notifications. Receive your sign-in, purchase receipts, and the notification token and text.
• Expo (United States): passes notifications to Apple and Google. Receives the notification token and text.
• Sentry (United States): crash reports. Receives crash details and your account identifier.
• Resend (United States): delivers support and alert emails to us. Receives your support message, your email address and any screenshot.
• Google (YouTube): checks Creator Rewards posts. Receives only the public link of a post you submitted.
• PostHog (European Union), only if you allowed analytics: usage analytics. Receives usage events, your account identifier, app version and phone model.

The AI services process your floor plans to produce your report. We have set them so that your floor plans and questions are not used to train AI models.

Some of these providers process data outside India. By using the App you agree to this transfer. We choose providers that protect data with encryption and contracts.

We may also disclose information if the law requires it, or to protect our users or the App from fraud or abuse.

5. How we keep it safe

Data is encrypted in transit (TLS) and at rest. Floor plans and photos are kept in private storage that only your account can open, and the database lets each person reach only their own records.

6. How long we keep it

• While your account exists, we keep what you have created so you can return to it.
• When you delete your account (Profile, then Delete account), we permanently delete your properties, floor plans, photos, reports, chats, credits, purchase records, support messages, creator code and notification tokens. Removal from backups completes within 30 days.
• Kept after deletion, without your name or email: cost records of the AI analyses (with no identity attached), and, if you took part in Creator Rewards, the post link and whether it was paid, so that the same post can never be paid twice.
• Crash reports and usage analytics are kept by Sentry and PostHog for a limited period (up to 90 days for crash reports, up to 12 months for analytics) and then deleted.

7. Your rights

Under the Digital Personal Data Protection Act you can:

• see your information (it is in the App), and correct your name with Google or Apple;
• delete your account and your data at any time (Profile, then Delete account);
• withdraw consent for usage analytics (in Profile) and for notifications (in your phone's settings) at any time; the App keeps working;
• export your reports as PDF;
• nominate someone to exercise these rights for you in case of death or incapacity, by writing to us;
• complain to our Grievance Officer (below), and, if you are not satisfied with the answer, to the Data Protection Board of India.

8. Children

VastuScan is meant for adults. It is not intended for anyone under 18, and we do not knowingly collect information from anyone under 18.

9. Changes to this policy

We will tell you in the App about any significant change before it applies. The date at the top shows when this policy last changed.

10. Contact and Grievance Officer

Varun Agarwal, Grievance Officer
Email: support@vastuscan.app

We acknowledge every complaint within 3 days and resolve it as soon as we can, and in any case within 90 days.