๐Ÿ•‰๏ธ
Jaap Karma Legal & Compliance
โ† All Policies Grievance & Rights
Legal Portal / Privacy Policy

Contents

  • 1. Spiritual Ethos & Scope
  • 2. Data Handling Summary
  • 3. Local Device Storage
  • 4. Device Permissions
  • 5. Third-Party SDKs & Analytics
  • 6. India DPDP Act 2023
  • 7. EU & UK GDPR Compliance
  • 8. US CCPA / CPRA & COPPA
  • 9. Australia Privacy Principles
  • 10. Data Retention & Deletion
  • 11. Statutory Grievance Redressal
  • 12. Policy Updates
India DPDP 2023 Compliant EU / UK GDPR US CCPA / CPRA Offline-First

Privacy Policy

Effective Date: September 29, 2026
Last Updated: September 29, 2026
Jurisdiction: India & Global

1. Spiritual Ethos, Dignity & Scope

Welcome to Jaap Karma ("Application", "Service", "we", "us", or "our"). Jaap Karma is a sacred digital companion engineered for prayer counting, Naam Smaran (divine chanting), Mantra Japa, meditation bead counting, and spiritual vow (Sankalp) tracking.

We hold that spiritual practice and meditative devotion are among the most intimate, sacred, and reverent human experiences. Devotional practices must never be subjected to commercial surveillance, behavioral tracking, user profiling, advertising targeting, or unsolicited cloud harvesting.

๐Ÿ•‰๏ธ The Sacred Zero-Egress Principle

Jaap Karma does not collect, record, harvest, transmit, broker, or sell any personal data whatsoever. The application is built from the ground up on a 100% offline-first architecture. Every count you register, every sacred mantra you chant, and every personal resolution you make resides exclusively within the sandboxed local storage of your personal device.

2. Executive Summary of Data Handling

Compliance Question Official Statutory Declaration
Do we collect Personally Identifiable Information (PII)? NO. We never request, collect, or store your name, email address, phone number, physical address, Aadhaar/Govt ID, or biometric identifiers.
Is user registration or cloud login required? NO. The app has zero accounts, zero social logins (Google, Apple, Meta), zero authentication tokens, and zero centralized cloud databases.
Is chanting history sent to external servers? NO. 100% of bead counts, mala rounds, session durations, timestamps, and custom mantras stay inside your physical device's local database.
Are third-party analytics or tracking SDKs installed? NO. Zero Google Firebase, zero Google Analytics, zero Meta Pixel, zero Sentry, zero crash beacons, and zero advertising SDKs.
Does the application access the Internet? NO. The Android production manifest deliberately does not declare or request the android.permission.INTERNET permission. The app is physically incapable of transmitting network packets.

3. Information Stored Locally on Your Physical Device

To enable offline counting, streak calculation, and persistence across app restarts, Jaap Karma stores the following utility parameters strictly in your device's local memory via an encrypted-ready SQLite database (powered by the Drift engine) and local device preferences (SharedPreferences / UserDefaults):

  • Chanting Counters & Historical Totals: Cumulative bead counts, completed 108-bead malas, active mantra identifiers (e.g., Shree Ram, Om Namah Shivaya, Hare Krishna, Gayatri Mantra, Maha Mrityunjaya, or custom inputs), session durations (seconds), and daily completion dates for practice streak statistics.
  • Custom Mantra Configurations: Any custom mantra names, deity names, target counts, and phonetic transliterations entered voluntarily by the user.
  • Sankalp (Spiritual Vow) Progress: User-defined vow titles, target repetition counts, start dates, and target completion deadlines.
  • Client Application Preferences: Visual theme selection (Light Parchment, Nocturnal Brahma Muhurta Dark Mode, or System Default), user interface language (English or Hindi), haptic vibration toggle, tap sound toggle, and daily target bead count.
๐Ÿ”’ Hardware-Sandboxed Security

All local data is stored exclusively within the secure, operating-system-enforced application sandbox (/data/data/com.jaap.karma/ on Android and the isolated app container on iOS). Other applications installed on your phone cannot access, inspect, or modify your practice records.

4. Device Operating System Permissions

In adherence to the principle of strict data minimization under Section 8 of the Indian DPDP Act 2023 and Article 5(1)(c) of the EU GDPR, Jaap Karma requests only the minimum hardware capabilities necessary to function:

Operating System Permission Technical Identifier Statutory Purpose & Necessity
Haptic Vibration android.permission.VIBRATE Provides tactile feedback upon each bead count and a distinct mala completion pulse, enabling devotees to chant with closed eyes in deep meditation without looking at the screen.
Local Notifications android.permission.POST_NOTIFICATIONS Allows the device operating system to display optional, user-configured local daily practice reminders (e.g., morning Brahma Muhurta or evening Sandhya). Calculated and delivered 100% on-device. Zero push servers.
Exact Alarm Timing SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM Enables exact, punctual firing of scheduled local reminders at the user's requested time without drift caused by battery optimization.
Internet Access android.permission.INTERNET EXPLICITLY OMITTED. Not requested and not declared in the production application manifest. Zero network traffic is possible.

5. Third-Party Services, Trackers & Data Brokers

Jaap Karma maintains a strict zero-tracker policy:

  • Zero Advertising SDKs: We do not integrate Google AdMob, Unity Ads, AppLovin, ironSource, or any commercial ad network.
  • Zero Analytics Platforms: We do not integrate Google Firebase Analytics, Mixpanel, Amplitude, AppsFlyer, or Adjust.
  • Zero Remote Telemetry & Crash Reporting: We do not transmit crash dumps or stack traces to Sentry, Crashlytics, or Bugsnag.
  • Zero Social Media Tracking: No Facebook SDK, Meta Graph API, TikTok Pixel, or social tracking cookies.
  • Zero Data Brokering: We do not rent, trade, lease, monetize, or sell user information to any third party, government agency, or corporate broker under any circumstances.

6. India: Digital Personal Data Protection Act, 2023 (DPDP Act)

Jaap Karma is engineered to comply with the statutory standards of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 (including the IT Rules, 2011 and IT Intermediary Guidelines Rules, 2021).

A. Data Fiduciary & Data Principal Relationship

Because Jaap Karma operates 100% offline without transmitting personal data to external servers, we do not ingest or process digital personal data on remote computing infrastructure. In statutory terms:

  • Data Minimization (Section 8): We practice total data minimization by processing zero personal data.
  • Notice & Consent Architecture (Sections 5 & 6): All permissions (vibration, notifications) are opt-in and controlled directly through native operating system dialogs and in-app settings.
  • Protection of Children (Section 9): The Application collects zero personal data from any individual, including minors. No tracking, behavioral monitoring, or targeted advertising is conducted.

B. Statutory Rights of the Data Principal

Under Chapter III of the DPDP Act 2023, you hold the following statutory rights:

  • Right to Access (Section 11): All stored records (bead counts, custom mantras, history) are immediately visible to you on your device screen within the Statistics, History, and Settings views.
  • Right to Correction & Erasure (Section 12): You may modify or delete any custom mantra, reset session counters, or permanently wipe all application data at any time via device settings.
  • Right of Grievance Redressal (Section 13): You have the right to register grievances with our designated Statutory Grievance Redressal Officer (detailed in Section 11 below) and to escalate unresolved complaints to the Data Protection Board of India (DPBI).
  • Right to Nominate (Section 14): You have the right to designate a nominee to exercise your rights in the event of death or incapacity. Since all data resides locally on your physical device, your designated nominee may manage or retrieve your device data through physical hardware access and operating system backup procedures.

7. European Union & United Kingdom: GDPR Compliance

For users residing in the European Economic Area (EEA) and the United Kingdom, Jaap Karma complies with the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and the UK Data Protection Act 2018 (UK GDPR).

A. Legal Basis for Processing (Article 6)

Because all data processing occurs entirely within the client device sandbox to execute user-demanded counting functions, processing is strictly necessary for the performance of the utility service requested by the user (Article 6(1)(b)) and based upon user consent for optional sensory feedback and reminders (Article 6(1)(a)).

B. Catalog of Data Subject Rights

In accordance with GDPR Chapter III (Articles 15 through 22):

  • Right of Access (Article 15): You have complete visibility into all data recorded by the app directly on your device screen.
  • Right to Rectification (Article 16): Custom mantras and preferences can be edited directly inside the app.
  • Right to Erasure ("Right to be Forgotten" - Article 17): Clearing application data or uninstalling the app permanently erases all records immediately.
  • Right to Data Portability (Article 20): Data remains in accessible local SQLite format within the operating system sandbox.
  • Right to Lodge a Complaint: You have the statutory right to lodge a complaint with your national Data Protection Authority (DPA) in the EU or the Information Commissioner's Office (ICO) in the United Kingdom.

8. United States: CCPA/CPRA, California "Shine the Light" & COPPA

A. California Consumer Privacy Act (CCPA) as amended by CPRA

Under the California Consumer Privacy Act (California Civil Code ยงยง 1798.100 et seq.):

  • Notice at Collection: We do not collect categories of personal information listed under Civil Code ยง 1798.140.
  • Do Not Sell or Share Personal Information: We affirmatively state: We do not sell, rent, disclose, or share your personal information with any third party for monetary or other valuable consideration, nor for cross-context behavioral advertising.
  • Right to Know & Delete: You have the absolute right to know what information is stored and to erase it completely by clearing local app storage.

B. California "Shine the Light" Law (Civil Code ยง 1798.83)

We do not disclose personal information to third parties for direct marketing purposes.

C. Children's Online Privacy Protection Act (COPPA, 15 U.S.C. ยงยง 6501โ€“6506)

Jaap Karma is designed for general audiences, including families and children practicing cultural traditions or mindfulness. We do not knowingly collect personal identifiable information from children under the age of 13. The application does not collect personal data from any user regardless of age.

9. Australia: Privacy Act 1988 & Australian Privacy Principles (APPs)

In accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth):

  • APP 1 (Open and Transparent Management): This Privacy Policy clearly outlines our zero-data-collection practices.
  • APP 3 & APP 5 (Collection of Solicited Personal Information & Notification): We do not solicit or collect personal information.
  • APP 8 (Cross-Border Disclosure): No data is transferred overseas because zero data leaves your local device.
  • APP 12 & APP 13 (Access and Correction): All local data is directly accessible and editable by you within the app.

10. Data Retention & Permanent Deletion Mechanism

Because Jaap Karma does not maintain remote user accounts or centralized servers, you hold sole sovereignty over your data. We cannot remotely access, modify, export, or delete your data on your behalf.

Step-by-Step Instructions to Delete 100% of Data:

  1. To erase all chanting history, mantras, and preferences immediately:
    • On Android: Open your device's Settings โ†’ Apps & notifications โ†’ Jaap Karma โ†’ Storage & cache โ†’ Tap "Clear Storage" (or "Clear Data").
    • On iOS: Open device Settings โ†’ General โ†’ iPhone Storage โ†’ Jaap Karma โ†’ Tap "Delete App".
  2. By Uninstalling the Application: Simply uninstalling or deleting Jaap Karma from your device will cause the mobile operating system to immediately and permanently destroy the local SQLite database and all sandboxed files.
โš ๏ธ Backup Notice

Because there is zero cloud synchronization, once data is deleted from your physical device or if your device is lost or factory-reset without a prior device-level backup, the data is permanently irrecoverable. We cannot restore deleted practice history.

11. Statutory Grievance Redressal Officer (India Mandate)

In compliance with Section 13 of the Digital Personal Data Protection Act, 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated an official Statutory Grievance Redressal Officer to address privacy inquiries, rights requests, and compliance grievances.

๐Ÿ›ก๏ธ Statutory Grievance Redressal Officer Details

Designated Officer Grievance & Privacy Officer
Organization / App Jaap Karma Legal & Compliance
Official Email [email protected]
Support Email [email protected]
Acknowledgment Window Within 48 Hours (Statutory)
Resolution Window Within 30 Days (Statutory)
Appellate Authority Data Protection Board of India
Official Portal User Rights & Redressal Portal

12. Modifications to This Privacy Policy

We may periodically update this Privacy Policy to reflect architectural enhancements, operating system guideline revisions, or evolving statutory requirements across India, the United States, the European Union, and other jurisdictions. Any modifications will be posted to this Legal Portal with an updated "Last Updated" timestamp.

We encourage devotees and users to periodically review this document. Continued use of Jaap Karma following any updates constitutes acceptance of the revised terms.

๐Ÿ•‰๏ธ
Jaap Karma Sacred Digital Beads

A sacred, privacy-first, offline-first digital chanting companion engineered for peace, devotion, and absolute data sovereignty.

Legal Documentation
  • Privacy Policy
  • Terms & Conditions
  • Spiritual & Health Disclaimer
  • Data Safety & Permissions
User Protection
  • User Rights & Deletion
  • Cookie Policy
  • Sacred Content Guidelines
  • Open Source Licenses
ยฉ 2026 Jaap Karma. All rights reserved. Built with reverence for Sanatana traditions and global privacy laws.
Compliant with India DPDP Act 2023, EU GDPR, US CCPA & Australia Privacy Act.