GitaPray Privacy Policy

Overview

Blue Sparrow is a solo developer based in India and operates GitaPray, a Bhagavad Gita reading, spiritual-practice and mindful app-blocking companion. This policy explains what information the app handles, why it is needed, where it goes and the choices available to you. GitaPray is designed around data minimisation, purpose limitation, transparency and the rights provided by the EU General Data Protection Regulation and other applicable privacy laws.

GitaPray does not use a Blue Sparrow-operated server to synchronise your prayer, meditation, japa, favourite, verse-note, blocked-app or unlock-history database. That working database stays on your device unless you deliberately use the optional Google Drive backup described below.

Data we handle

GitaPray may handle the following categories:

• Practice records that you create, including prayer completion, meditation and japa sessions, goals, streaks, favourites and notes attached to verses.
• App-blocker records on Android, including selected application names and package identifiers, unlock times, durations and any intention you choose. Usage access lets GitaPray detect a selected app; overlay access lets it present the mindful pause.
• Preferences such as verse language, theme, reminder times, notification settings, ambient-sound choices, onboarding goals and strict-mode choices.
• Optional account information from Google and Firebase Authentication, including an account identifier, email address, display name and profile image URL.
• Limited Firebase profile and subscription records for signed-in users, including account timestamps, entitlement state, product identifiers and expiry information.
• Purchase and entitlement information handled by Google Play and RevenueCat, such as product, transaction, renewal and subscription status. Blue Sparrow does not receive your full payment-card details.
• Information you deliberately submit through support or feedback, including reply email, optional name and subject, message, app version, platform and locale. Extra diagnostics are included only when you select that option.
• Technical security information used by Firebase App Check and Google Play Integrity to verify that requests come from a genuine installation.

GitaPray does not need contacts, SMS content, call history, precise location, microphone recordings, camera media or browsing history. It removes Android advertising-ID permission and does not create a cross-app advertising profile.

Religious practice, verse notes and app-use choices can be sensitive. They remain in the local database and optional encrypted backup rather than being added to the Firebase profile.

How we use data

Information is used only as reasonably necessary to:

• Provide Gita verses, saved items, notes, practice tracking, statistics, reminders, widgets, app pauses and user-selected backups.
• Authenticate an optional account and keep premium access associated with the correct user.
• Process purchases, restore entitlements and prevent subscription abuse.
• Receive and answer a support or feedback request that you choose to send.
• Protect GitaPray and connected services, diagnose a request you explicitly accompany with diagnostics and maintain reliability.
• Meet applicable record-keeping, privacy, consumer-protection and security obligations.

GitaPray does not sell or rent personal information. It does not use personal information for targeted advertising. Firebase Analytics and Firebase Crashlytics components are included in the application. GitaPray's app-owned analytics and error handlers currently write diagnostic messages locally rather than intentionally sending practice events or errors to those Firebase products. Provider defaults and release configuration can nevertheless affect automatic collection of limited app-interaction, device, performance or crash information. Blue Sparrow is reviewing the production collection state and will keep this disclosure and any required controls current. GitaPray does not intentionally attach verse notes, selected-app lists, unlock intentions or scripture content to those services.

Sharing and processors

Blue Sparrow does not share personal information for independent advertising. Limited information may be processed by these service providers for the stated feature:

• Google and Firebase for optional sign-in, authentication, the limited user profile, entitlement status, App Check and Google Drive backup.
• Firebase Analytics and Firebase Crashlytics for limited usage measurement and diagnostics if collection is active in the installed release.
• RevenueCat and Google Play for products, purchases, receipts, subscription entitlements and store updates.
• Blue Sparrow's support-request service and its delivery providers when you submit contact or feedback information.
• Infrastructure, security or professional service providers where reasonably needed to operate, protect or comply with obligations relating to the service.

These third-party providers act under their own terms and privacy notices, and may process limited account, purchase, security or support information in locations determined by their infrastructure. Blue Sparrow may also disclose information when legally required, or to protect users and the service from fraud, abuse or serious security threats, while limiting the disclosure to what is necessary.

Cloud and backups

Guest use does not upload your practice database. If you sign in, Firebase receives the optional account and limited profile or entitlement information described above. This is separate from your local practice records.

If you request Google Drive backup, GitaPray exports supported local records, encrypts the backup on your device using AES-256-GCM, and uploads the encrypted archive to GitaPray's hidden app-data folder in your own Google Drive account. GitaPray requests only the Drive app-data scope, not general access to your visible Drive files. The archive includes supported account, prayer, preference, favourite, verse-note, meditation, japa, selected-app and unlock records. Automatic backup is opt-in and associated with the signed-in user. GitaPray is configured to retain up to five of its most recent backup archives by removing older app archives on a best-effort basis.

Google controls the physical storage and regional handling of your Drive account. Your account settings and Google's terms therefore govern that copy. Signing out disables GitaPray's user-scoped automatic-backup setting on the device but does not itself erase archives already held in Drive. Existing archives must be managed through your Google account or a supported provider control.

Retention

Local information remains until you delete it with app controls, clear app storage or uninstall the app. Uninstall behaviour can vary where an operating-system backup is enabled.

Google Drive archives remain until removed through the Google account, by GitaPray's best-effort backup rotation, or under Google's retention rules. Firebase account and entitlement records are kept while the account or subscription relationship is active and for a limited period afterwards where needed for security, purchase reconciliation or applicable obligations. Support messages and delivery logs are kept only for support, abuse prevention and operational record needs, then deleted or de-identified according to the relevant retention process.

The in-app Delete all data action clears supported information from that device, resets device preferences and signs out. It does not delete Firebase Authentication, the Firestore profile, RevenueCat records, Google Play purchase records, support messages or existing Drive archives. A separate authentication deletion method exists in the app's service layer but is not currently exposed by the Delete all data control. Contact [email protected] for an end-to-end account-data request, and use Google Play, Google Drive or provider-facing controls where those providers require direct action.

Security

GitaPray uses proportionate safeguards including platform app storage, HTTPS for network requests, Firebase App Check, scoped Drive permission, encrypted backup archives and access rules for signed-in Firebase records. The on-device database is kept in app-private storage but is not described as independently encrypted. Access within Blue Sparrow is limited to the solo operator and service providers that need it for their assigned purpose.

No device, transmission or connected service can be guaranteed completely secure. Keep your device lock, Google account and purchase account protected, install trusted updates and avoid including unnecessary sensitive information in a support message.

Your rights

Depending on where you live and subject to applicable exceptions, you may have rights to know or access personal information, correct it, obtain a portable copy, delete it, restrict or object to processing, and withdraw consent where consent is the basis. You may also have a right to complain to your local data-protection authority. These protections include, where applicable, the EU GDPR and EEA rules, UK GDPR, India's Digital Personal Data Protection framework, California and other US state privacy laws, Brazil's LGPD, Canada's privacy laws, and comparable laws in other regions.

Most practice information can be viewed, changed or removed locally. You can disable reminders, revoke Android usage or overlay access, stop using app blocking, sign out, disable backup and clear app data through app or device settings. Store subscriptions must be managed through Google Play.

To exercise a privacy right, email [email protected] with the app name and enough detail to identify the relevant account or request. Blue Sparrow may ask for proportionate verification and will respond within the period required where you live. There is no charge for an ordinary request, although clearly excessive or repeated requests may be handled as permitted by applicable law.

Children

GitaPray is intended for a general audience interested in personal spiritual practice and is not designed to collect children's information. A parent or guardian should supervise use by anyone who cannot validly make their own privacy choices. Do not create an account, enable cloud features or submit support information for a child unless the responsible adult has a valid basis and provides any required permission. Contact [email protected] if you believe a child's personal information has been provided inappropriately.

International transfers

The main practice database stays on your device. Optional Google, Firebase, RevenueCat, Google Play and support connections may process limited information outside your country or region. For transfers that require safeguards, Blue Sparrow and relevant providers rely on appropriate contractual, adequacy or other lawful mechanisms and apply data-minimisation and security measures.

Blue Sparrow does not claim that every item of GitaPray information remains exclusively in the European Union. EU users receive the protections required by the EU GDPR, while provider-controlled account, purchase, security and backup information follows the provider's disclosed infrastructure and transfer safeguards.

Changes

This policy may change when GitaPray, its providers or applicable requirements change. Material updates will be presented in the app or on the website where appropriate, and the updated date will be revised. Earlier processing remains governed by the version applicable at that time unless a change must apply sooner for security or legal reasons.

Contact

Blue Sparrow is the developer and privacy contact for GitaPray. For privacy questions, rights requests or account-data deletion, email [email protected]. For general help, email [email protected]. Product and policy information is available at https://bluesparrow.dev.