DevaBell Privacy Policy

Effective date: 25 September 2026 Last updated: 25 September 2026

This Privacy Policy applies to the DevaBell.com website and the DevaBell application. It explains how BRIGHTSIDE TECHNOLOGY SDN. BHD. ("DevaBell," "we," "us") handles personal information when you use the DevaBell deity companion, daily Meditation, Today’s Sandesh, account, membership, and related websites or applications (together, the "Services"). DevaBell is designed first for India. Additional country-specific rights may apply where you use the Services.

Wording such as “if enabled” refers to a planned feature; it becomes applicable only after release and notice.

1. Entity and contacts

Data fiduciary/controller: BRIGHTSIDE TECHNOLOGY SDN. BHD.

Privacy contact: service@brightsidetechltd.com

Support contact: service@brightsidetechltd.com

India grievance email: service@brightsidetechltd.com

All privacy questions, requests, grievances, and complaints are handled through service@brightsidetechltd.com.

2. Information we process

We may process information you provide, information generated by your use, and information received from an enabled sign-in or payment provider:

Account information: if production enables Google or Apple sign-in, the name, email, profile image, or Apple private relay email you choose to share. We do not receive your Google or Apple password. Guest mode does not require an account.
User content: prayers, worries, questions, gratitude, conversation titles, and messages exchanged with a deity. Please do not submit passwords, payment credentials, identity numbers, precise addresses, medical records, or another person’s private information.
Preferences and practice data: selected deity (Ganesha, Krishna, or Durga), language, Sankalp, Dhyana duration, Japa count, Aarti completion, reminder setting, and reminder time.
Membership and support data: if enabled, order number, plan, billing period, payment/entitlement/renewal/refund status, support tickets, and necessary case records. Payment card details are normally handled directly by the store or payment processor; we do not retain full card numbers unless necessary and disclosed.
Technical and usage data: sign-in state, feature events, timestamps, errors, latency, network status, app/browser and device basics, IP address, user agent, timezone or operating-system version, as configured in production.

The current static prototype did not show camera, microphone, contacts, precise location, cookies, localStorage, sessionStorage, notification APIs, or analytics initialization. “Not found in the prototype” is not a guarantee about a future native build; production evidence must be reviewed before release.

3. Purposes and legal bases

We may process information to provide the Services, perform a contract, obtain consent where required, comply with law, and protect safety and security. Purposes include:

1. operating guest access, sign-in, deity selection, Home, conversations, history, and Meditation;

2. saving and synchronizing preferences, conversations, practice progress, reminders, and membership when those production features are enabled;

3. handling subscriptions, restore, renewal, cancellation, refunds, grace periods, fraud prevention, and support;

4. generating localized Sandesh, audio, and AI responses when the corresponding production services are enabled;

5. preventing abuse, troubleshooting, securing accounts and payments, and maintaining required audit records; and

6. producing aggregated, de-identified, or privacy-suppressed measurements for quality, retention, practice, and subscription operations.

We do not sell personal information. If advertising or cross-context tracking is introduced, we will describe it before activation and provide the required choices.

4. AI, automation, and devotional limits

If AI or automated replies are enabled, your input may be sent to selected model, safety, translation, or speech providers to generate a response, classify safety, or prevent abuse. Before production launch, we must identify providers, regions, retention, training use, and human-review scope in this policy or the third-party list.

AI output, deity personas, scripture explanations, Sandesh, and Meditation are devotional and general-information experiences. They are not medical, mental-health, legal, financial, religious-authority, or emergency advice. Do not rely on them for diagnosis, treatment, medication, investment, legal, or personal-safety decisions. In an emergency or where self-harm or harm to others is possible, contact local emergency services or a qualified professional; DevaBell does not provide guaranteed crisis response.

5. Sharing and recipients

We may share the minimum information necessary with service providers for hosting, storage, identity, AI/safety, speech, notifications, payments, support, analytics, or crash handling when those services are actually enabled. Store and payment providers may process purchase and account data under their own policies. If Parivar is enabled in the future, only Family Sankalp or reminders that you explicitly share may be shared between authorized profiles; chat history, deity, and language should remain isolated.

We may disclose information to comply with law, valid legal process, security or fraud investigations, or to protect users, the public, or our rights. In a merger, acquisition, financing, restructuring, or asset transfer, information may transfer subject to confidentiality and applicable law.

Support and safety access to chat should be purpose-limited, least-privilege, redacted, and audited. These controls must be implemented and tested before production claims are made.

6. International transfers and security

Providers or hosting may be located outside India. Before launch we will document storage regions, recipients, contractual safeguards, encryption, access controls, and applicable Indian transfer requirements. We use reasonable technical and organizational safeguards, but no system is absolutely secure.

7. Retention

We retain information only as long as needed for the stated purpose, legal obligations, dispute resolution, security, or audit. Our standard retention period is 180 days:

account and authentication records: 180 days
conversations and practice records: 180 days, including backup expiry
reminder settings: 180 days
orders, refunds, and tax records: 180 days, or longer where tax or accounting law requires
support and audit logs: 180 days
analytics/de-identified data: 180 days

After deletion or consent withdrawal, we delete, anonymize, or restrict processing as required. Legally retained records are isolated and deleted when the retention period ends.

8. Your rights and choices

Depending on applicable law, you may request access, confirmation, correction, export, restriction, deletion, withdrawal of consent, or cessation of marketing, and may complain about processing. We may verify identity to protect an account.

Send requests to service@brightsidetechltd.com. Deletion covers primary data, caches, indexes, analytics copies, exports, and backup expiry. Guest data may exist only on the current device; clearing browser or app data can remove it.

9. Children and family use

The Services are not directed to children. Minimum age: 18 years. You must be at least 18 years old to use the Services. Where required, we will use age assurance, child-safety controls, and no child-targeted advertising. Parivar must not launch until family authorization, shared reminders, and deletion are reviewed.

10. Cookies, local storage, and external resources

The static prototype uses in-memory state and resets on refresh. It loads Inter from Google Fonts (`fonts.googleapis.com` and `fonts.gstatic.com`) and Lucide from `https://unpkg.com/lucide@latest`; those requests may expose basic network metadata to the respective services. Production should self-host or pin these resources and update the third-party disclosure if external requests remain.

11. Changes, complaints, and store role

We may update this policy for feature, legal, or security changes and will provide notice or obtain consent where required. Google Play, Apple App Store, and other distribution platforms are not the controller for DevaBell’s processing; their own account, payment, device, and privacy terms also apply. Contact service@brightsidetechltd.com for questions or complaints.

Website: https://www.brightsidetechltd.com/devabell/index.html