Privacy Policy
This Privacy Policy explains how mansi (the "App", "we", "us", "our") collects, uses, stores, and shares information about you when you use our mobile application or website. We comply with the Indian Digital Personal Data Protection Act, 2023 (DPDP Act).
mansi is operated by Astravanta (sole proprietorship, Bengaluru, India).
Address: Bengaluru, Karnataka, India
1. Who can use mansi
mansi is for users 18 years of age or older. We verify your age via date-of-birth at signup. If we discover information collected from anyone under 18, we delete it immediately.
2. What we collect
| Category | Specifically | Why |
|---|---|---|
| Account info | Phone, name, DOB, optional gender | Account, OTP, age confirmation |
| Conversation data | Messages sent/received, generated images | Deliver chat, persist history |
| Memory facts | Short summaries of facts you've shared | Make conversations feel personal |
| Coin / payment | Coin balance, packs purchased, Razorpay IDs | Process and receipt purchases |
| Device info | Push token, platform, IP, app version | Notifications, abuse prevention, debugging |
| Activity | Last-active time, message timestamps | Re-engagement and aggregate analytics |
We do NOT collect: card numbers (Razorpay handles directly), precise location, contacts, gallery, microphone, camera, or biometric data.
3. How we use your information
- Operate the App — account, chat, image generation, memory.
- Process payments via Razorpay.
- Send notifications you've consented to.
- Block abusive accounts.
- Improve the App via anonymized aggregate analytics.
- Comply with lawful Indian government requests.
We do not sell your information to advertisers. We do not share conversations with anyone except AI providers (below) for reply generation.
4. Third-party services
| Provider | What they get | What they do |
|---|---|---|
| xAI (Grok) | Message text, conversation history, persona prompt | Generate AI reply. Does not train on API inputs by default. |
| Google (Gemini) | Persona reference image + image prompt | Generate in-chat image. Paid-tier inputs not used for training. |
| DeepSeek / Sarvam | Same as xAI (fallback only) | Generate reply when primary unavailable |
| Razorpay | Phone, name, amount, order ID | Process payments. Cards stay between you and Razorpay. |
| MessageCentral / 2Factor | Phone number, OTP code | Send OTP SMS |
| AWS S3 (Mumbai region) | AI-generated images | Store and serve images |
| Expo / EAS | Crash reports | Bug fixes |
5. AI-generated content disclosure
Every persona is a fictional AI character. They are not real people. Any apparent emotion or memory is generated by AI models on demand.
Images shown in chat are AI-generated by Google's Gemini model from a fixed reference image we provide. They depict fictional characters, not real people.
We label generated images with an "AI" tag in chat per Indian MeitY guidance on synthetic media.
6. Data retention
- Account info — until you delete your account
- Conversations and memory — until you delete your account or tap "Clear chat memory" in Settings
- Coin transaction logs — 7 years (Indian financial-records law)
- Payment metadata at Razorpay — per Razorpay's policy
- Push tokens — until you uninstall or revoke notifications
On account deletion: conversations, memory, name, gender, DOB are erased within 30 days. Hashed phone number retained 90 days to prevent ban evasion.
7. Your rights (DPDP Act 2023)
- Access — request a copy of your data
- Correction — fix incorrect information
- Deletion — permanently delete your account
- Withdraw consent — stop using the App at any time
- Grievance redressal — escalate to our Grievance Officer
To exercise any right, email contact@astravanta.com with subject "DPDP request — [your action]". We respond within 30 days.
Unresolved complaints can be escalated to the Data Protection Board of India.
8. Security
- HTTPS / TLS 1.2+ on all traffic
- Phone numbers hashed in our database
- No password store — OTP-only authentication
- Rotated API keys, least-privilege access
Breach affecting your data → notification within 72 hours per DPDP Act.
9. Children's privacy
mansi is not for anyone under 18. Email contact@astravanta.com if you believe a minor has registered.
10. Cookies and tracking
The mansi mobile app does not use cookies. Anonymized aggregate analytics only — no advertising SDKs.
11. International transfers
Most data stays on Indian servers (Bengaluru). Some is processed outside India when sent to xAI, Google, DeepSeek, or Sarvam. AWS data is in the Mumbai region (India).
12. Changes to this policy
Material changes will be communicated in-app at least 7 days before taking effect. The "Last updated" date above always reflects the current version.
13. Contact
Subject: "Privacy / DPDP request"
Response time: within 30 days
Grievance Officer: Nagaraj Bhat
By using mansi, you confirm that you have read and understood this Privacy Policy and that you are 18 years of age or older.