Back to Godify

Legal

Godify — Privacy Policy (India)

Jurisdiction: India

Last updated: 19 July 2026

Effective date: 15 July 2026

This Privacy Policy explains how Godify ("Godify", "we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you use the Godify mobile application, website, and related services (together, the "Service").

We have written this Policy to align with the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025 (the "DPDP Rules"), read with the Information Technology Act, 2000 and the rules made under it. Under the DPDP Act, you are a "Data Principal" and Godify is a "Data Fiduciary" in respect of the personal data you share with us.

Please read the Reflection Journal section (Section 7) carefully. Your private journal is designed so that it never leaves your device and cannot be read by anyone, including us.

1. Who we are (the Data Fiduciary)

The Service is operated by KCN Life Pvt Ltd ("Godify"), the Data Fiduciary, having its registered office at B-95A, Ranhola Road, Vikas Nagar, Uttam Nagar, New Delhi – 110059, India.

For any privacy question or to exercise your rights, you can reach us at:

  • Email: official.godify@gmail.com
  • Grievance Officer: Vansh Saini (see Section 18)

2. What this Policy covers

This Policy applies to personal data we process about you when you:

  • create an account or continue as a guest;
  • talk with the AI companion ("Bhagavan / the Divine") for reflection, comfort, or guidance;
  • select a mood, save a card, or use the daily wisdom and almanac features;
  • write in your private Reflection Journal; and
  • otherwise browse or interact with the Service.

It does not cover third-party services that you reach through links from the Service, which have their own privacy policies.

3. The personal data we collect

We try to collect as little as possible. Depending on how you use the Service, we may process the following categories.

3.1 Information you give us

  • Account and sign-in information. If you choose to sign in, we receive basic identifiers from your chosen method — for example, your name and email address (Google sign-in), your phone number (phone sign-in), or your email address (email sign-in). If you Continue as Guest, we do not ask you to create an account or provide these details.
  • Your conversations. The messages you send to the AI companion, and the responses generated for you.
  • Mood and context. A mood you select (for example, "stressed", "grateful", "fearful") to help tailor a reflection.
  • Saved content. Cards or reflections you choose to save or share.

3.2 Your Reflection Journal (treated specially — see Section 7)

Anything you write in the Reflection Journal is treated as private-by-design. As described in Section 7, journal entries are stored on your own device and are not transmitted to or stored on our servers, and we have no ability to read them.

3.3 Information collected automatically

  • Device and technical information such as device or browser type, operating system, language, and similar settings.
  • Usage and log information such as features used, approximate timestamps, and diagnostic or error logs needed to keep the Service working and secure.

3.4 Sensitive categories

Because the Service is a space for spiritual reflection and emotional support, the things you choose to share may reveal religious or spiritual beliefs and feelings about your mental or emotional wellbeing. Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, information of this nature can be "sensitive personal data." We treat such content with particular care, ask only for what you choose to share, and never require it.

3.5 What we do not do

  • We do not sell your personal data.
  • We do not show third-party advertising or build advertising profiles of you.
  • We do not ask children to provide sensitive data, and we do not knowingly process children's data without verifiable parental consent (Section 13).
  • We do not currently collect payment information. If we later add paid plans, payments will be handled by a regulated payment provider and this Policy will be updated.

4. How we use your data, and our lawful basis

Under the DPDP Act, we process your personal data on the basis of your consent, which you give when you choose to use a feature, and which you can withdraw at any time (Section 10). We use your data only for the following purposes:

  • to provide the Service — to understand your message and generate a thoughtful, scripture-grounded reflection in response;
  • to remember the context of your current conversation so replies make sense;
  • to tailor a reflection to a mood you have chosen;
  • to keep the Service safe and reliable, including detecting misuse and resolving errors;
  • to respond to your requests, questions, and grievances; and
  • to comply with applicable law.

We do not use your conversations or journal to train third-party advertising systems, and we do not use them to make any decision that produces legal or similarly significant effects about you.

5. The AI and the service providers we rely on

To run the Service, we use a small number of trusted processors ("Data Processors") who act on our instructions under contract:

  • AI language processing. Your conversation messages (not your Reflection Journal) are sent to our AI processing providers solely to generate a response: Google LLC (Google Gemini, United States) as the primary provider, with OpenAI, L.L.C. (United States) as a fallback when the primary is unavailable.
  • Application hosting and delivery. The Service is hosted and delivered through Vercel Inc. (United States) and associated infrastructure.
  • Sign-in providers. If you sign in with Google, phone, or email, the relevant provider processes your authentication.
  • Product analytics. We use PostHog (hosted in the United States) to measure aggregate, anonymous usage of the Service — see Section 16. It receives only minimal, anonymous usage signals, never the content of your conversations or your Reflection Journal.

These providers receive only the data needed to perform their function, are required to protect it, and are not permitted to use it for their own purposes. Some of them operate outside India (see Section 15).

6. Scripture is verified, not invented

To keep the Service trustworthy, mantras and verses shown to you are drawn from a verified, curated library; the AI is constrained to serve these verified texts rather than invent scripture. This is a quality-and-safety design choice and does not change how your personal data is handled.

7. Your Reflection Journal is private — even from us

We designed the Reflection Journal to be a space that is yours alone.

  • It stays on your device. Journal entries are stored locally on the device you write them on. They are not transmitted to our servers, not backed up to our servers, and not shared with any third party.
  • We cannot read it. Because journal entries never reach us, no one at Godify can view, access, recover, or disclose them — not our staff, not our service providers, and not in response to a routine request. We simply do not hold them.
  • You are in control. You can edit or delete your journal entries on your device at any time. If you delete the app or clear its data, locally stored entries are removed with it. Because we never receive a copy, please keep your own backup if an entry matters to you.
  • If we ever offer cloud backup or sync for the Journal in the future, we will only do so using end-to-end encryption designed so that only you hold the key and we cannot decrypt or read your entries, and we will update this Policy and ask for your explicit consent before enabling it.

8. How we share data

We do not sell or rent personal data. We share personal data only:

  • with the Data Processors described in Section 5, under contract and on our instructions;
  • when you ask us to (for example, using a "share" feature you trigger);
  • to comply with law, a binding legal request, or court order, or to protect the rights, safety, and security of users, the public, or Godify, strictly to the extent permitted and required by law; and
  • as part of a business transfer (such as a merger or acquisition), in which case we will require the recipient to honour this Policy and will notify you.

Your Reflection Journal is never part of any of the above, because we do not hold it.

9. How long we keep your data

We keep personal data only for as long as needed for the purposes described in this Policy, or as required by law, and then delete or anonymise it.

  • Conversations: kept only for your active session, so replies make sense in context. They are not stored long-term on our servers.
  • Account information: kept while your account is active and deleted within a reasonable period after you delete your account or withdraw consent, subject to any legal retention requirement.
  • Logs and diagnostics: kept only briefly, for security and troubleshooting.
  • Reflection Journal: retained only on your device, under your control; we hold nothing to retain.

When you withdraw consent or ask us to erase your data, we will erase it unless we are required to keep it under applicable law, and we will act within the timelines described in Section 12.

10. Consent, and how to withdraw it

Where we rely on your consent, you give it freely and can withdraw it at any time — for example by stopping use of a feature, signing out, deleting your account, or emailing us. Withdrawing consent is as easy as giving it. If you withdraw consent, we will stop the related processing and, where appropriate, erase the relevant data, although this will not affect processing already carried out lawfully before withdrawal, and some features may no longer work.

11. Keeping your data secure

We take reasonable security safeguards to protect personal data in our care against unauthorised access, disclosure, loss, or misuse, including:

  • transport encryption (HTTPS) for data in transit;
  • restricting access to data on a need-to-know basis;
  • keeping our AI provider key and other secrets on the server side, never exposed in the app; and
  • monitoring for errors and abuse.

No method of transmission or storage is perfectly secure, but we work to protect your data and to improve our safeguards over time. If a personal data breach occurs, we will act as described in Section 12.

12. Your rights as a Data Principal

Subject to the DPDP Act, you have the right to:

  • Access — ask what personal data of yours we are processing and a summary of how;
  • Correction and completion — ask us to correct inaccurate or misleading data, and complete or update it;
  • Erasure — ask us to erase your personal data where it is no longer needed and not required to be retained by law;
  • Grievance redressal — raise a concern with us and receive a response (Section 18);
  • Nominate — nominate another individual to exercise your rights in the event of your death or incapacity; and
  • Withdraw consent — as described in Section 10.

How to exercise your rights. Email us at official.godify@gmail.com (or contact the Grievance Officer in Section 18). We may need to verify your identity before acting. We will respond within the timelines required under the DPDP Act and DPDP Rules — for grievances and erasure requests, within the prescribed period (and in any case without undue delay). We will tell you if a request cannot be fully met and why.

If a breach happens. If a personal data breach affects you, we will notify you without undue delay and report it to the Data Protection Board of India as required, including within the timelines set out in the DPDP Rules (a detailed report to the Board within 72 hours, subject to any extension permitted).

13. Children and minors

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from a child (a person under 18) or from a person with a guardian, without verifiable parental or guardian consent as required by Section 9 of the DPDP Act and Rule 10 of the DPDP Rules. We do not carry out tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has used the Service without such consent, please contact us and we will take appropriate steps, including deletion where required.

14. Wellbeing, sensitive moments, and crisis safety

Godify offers reflection and comfort. It is not a medical, psychological, legal, or financial service, and it is not a substitute for a qualified professional or for emergency help.

If the Service detects that you may be in distress or at risk of harm, it may show you supportive words and government mental-health helpline information (such as the Government of India Tele-MANAS and KIRAN helplines). This safety feature exists to help you reach real human support; we do not use it to profile you or to share your situation with third parties, and any such processing is solely to display help to you in the moment.

15. Transfers outside India

Some of our service providers (Section 5) operate outside India, so your data may be processed in other countries. Where this happens, we rely on contractual protections and process such transfers in accordance with the DPDP Act, which permits transfer of personal data outside India except to any country or territory specifically restricted by the Central Government. Your Reflection Journal is never transferred, because it never leaves your device.

16. Cookies and analytics

The Service uses only the storage and similar technologies needed to make the app work (for example, to keep you signed in, remember a preference, or store your local journal on your device). We do not use third-party advertising or cross-site tracking cookies.

To understand how the Service is used in aggregate and to improve it, we use PostHog for product analytics. Analytics data is processed and stored in the United States (PostHog US Cloud), and by our hosting provider Vercel, under standard contractual clauses and appropriate safeguards for international transfers as described in Section 15. It is configured to be cookieless and to respect your browser's Do Not Track setting; we do not use analytics cookies, we do not record your screen or sessions, and we do not automatically capture your clicks or what you type. We collect only minimal, anonymous usage signals (such as the app being opened, a first message being sent, or a reply being shown) so we can see, for example, how many people use Godify and whether they return — we never capture the contents of your conversations or your Reflection Journal, which stays on your device. We do not sell this data, and we do not use it for advertising.

17. Changes to this Policy

We may update this Policy from time to time. If we make a material change, we will update the "Last updated" date and, where appropriate, notify you within the Service. Your continued use after an update means you have read the revised Policy; where the law requires fresh consent, we will ask for it.

18. Grievance Officer and how to contact us

If you have a question, concern, or complaint about how we handle your personal data, please contact our Grievance Officer. We will acknowledge and respond within the period required under the DPDP Act and Rules.

  • Grievance Officer: Vansh Saini
  • Email: official.godify@gmail.com
  • Address: KCN Life Pvt Ltd, B-95A, Ranhola Road, Vikas Nagar, Uttam Nagar, New Delhi – 110059, India

19. The Data Protection Board of India

If we do not resolve your concern to your satisfaction, you have the right to register a complaint with the Data Protection Board of India, the authority established under the DPDP Act, in the manner prescribed under the DPDP Rules.

20. Governing law and jurisdiction

This Policy is governed by the laws of India. Subject to the powers of the Data Protection Board of India and applicable law, the courts at New Delhi, India, will have jurisdiction over any dispute arising from this Policy.

21. Important disclaimers

  • Not professional advice. Reflections offered through the Service are for spiritual comfort and personal reflection only and are not medical, mental-health, legal, or financial advice. Please consult a qualified professional for those needs, and trust your own judgement before acting on anything.
  • No guaranteed outcomes. We do not promise any specific result from using the Service.
  • In an emergency. If you or someone else is in immediate danger, please contact local emergency services or a qualified professional right away.
Return to Godify