Privacy Policy

R Gupta Consultancy Services Inc. ("RGCS," "we," or "us") provides Suvichaar, an AI-guided reflection app inspired by ideas from the Bhagavad Gita. Questions about this policy or privacy requests can be sent to hello@rgcs.ca.

• Reflection messages. Text you submit and the generated response.
• Pseudonymous session information. A random Supabase user identifier and authentication tokens let the app make protected requests without requiring your name or email address.
• Security information. An IP address may be used to create a one-way hash for abuse prevention and rate limiting. Request identifiers, timestamps, status codes, and error categories may appear in operational logs.
• Purchase information. If you buy Premium, we process the product identifier, store, subscription expiry, and a signed transaction or purchase token. We store a one-way hash of the store purchase key. Apple or Google processes your payment details.
• Support communications. We process the email address and information you choose to send when contacting support.

The current app does not request a named profile and contains no advertising, cross-app tracking, behavioural analytics, contacts, location, camera, microphone, photo-library, or custom crash-reporting SDK.

• Generate and return AI-guided reflections.
• Create and secure a pseudonymous app session.
• Prevent abuse, enforce rate limits, diagnose failures, and protect the service.
• Verify purchases, restore Premium access, and prevent purchase fraud.
• Answer support and privacy requests and comply with legal obligations.

We do not sell personal information or use it for targeted advertising.

We disclose information only as needed to operate Suvichaar:

• Supabase provides authentication, database, and serverless backend services.
• OpenAI processes reflection messages to generate responses.
• Apple and Google process app distribution, purchases, subscription status, refunds, and related fraud signals.
• Vercel hosts this policy and may process ordinary web request information when you visit rgcs.ca.

These providers may process information outside your province, state, or country, including in the United States. We remain responsible for our use of providers and require protections consistent with this policy and applicable law. We may also disclose information when required by law or to protect rights, safety, and security.

Suvichaar does not save reflection messages as chat history in the app or its application database. Each message is sent through our Supabase function to OpenAI. We set the OpenAI Responses API request to store: false. OpenAI may still retain prompts and responses in abuse-monitoring logs for up to 30 days by default, unless a different approved data-control setting or legal exception applies.

Short-lived rate-limit hashes are automatically removed. Pseudonymous authentication records, purchase entitlement records, and necessary security logs are retained while needed to provide the service, maintain subscription access, meet legal obligations, resolve disputes, and prevent fraud. Support communications are retained only as long as reasonably needed for those purposes.

Depending on where you live, you may ask to access, correct, or delete personal information, withdraw consent, or object to or restrict certain processing. Send a request to hello@rgcs.ca. We may need information from your device or store purchase to locate a pseudonymous record and verify that the request belongs to you. You may also complain to your local privacy regulator.

Deleting the app removes local session data from that installation. Manage or cancel subscriptions through your Apple App Store or Google Play account. Store records remain subject to the applicable store's policies and legal requirements.

We use HTTPS in transit, restricted server credentials, row-level database controls, and one-way hashing for store keys and rate-limit identifiers. No system is completely secure. Do not submit passwords, financial account details, government identifiers, or other information you do not want processed by AI providers.

Suvichaar is not directed to children who cannot legally consent to data processing in their jurisdiction. A parent or guardian who believes a child submitted information may contact us for deletion.

We may update this policy as the service or law changes. We will post the revised policy here and change its effective date. Material changes will receive additional notice when required. Contact: hello@rgcs.ca.