Privacy Policy

Who we are

Bodha is a daily Bhagavad Gita companion app developed and operated by AMVRIT (“we,” “our,” or “us”). This Privacy Policy applies to the Bodha mobile application (iOS and Android) and the website at bodha.app (collectively, the “Services”). AMVRIT acts as the data controller for personal data processed through the Services.

Contact for privacy matters: [email protected]

What we collect

Device identifier

On first launch, Bodha generates a random UUID and stores it locally on your device under “device ID.” This identifier is not linked to your name, Apple ID, Google account, or any personally identifying information. It is used solely to maintain your streak, saved verses, badges, and challenge progress across sessions on the same device.

Anonymous usage events

Bodha sends anonymous events to PostHog, our analytics provider, to help us understand how the app is used and improve content quality. These events include actions such as opening the app, swiping through cards, tapping the AI insight button, completing a challenge, sharing a verse, and flagging an insight. All events are associated only with your device identifier — never with your name or any personal identity.

Community engagement data

When you like or save a verse, Bodha records that action anonymously (device identifier only) to power community features such as verse save counts displayed inside the app. This data is aggregated. No individual user's behaviour is surfaced to other users, and it is never used to build an advertising profile.

Purchase and subscription data

If you subscribe to Bodha Premium or make a one-time purchase, the transaction is processed by Apple (App Store) or Google (Play Store). Bodha uses RevenueCat solely to verify your entitlement status and unlock Premium features. RevenueCat receives your app's purchase receipt — not your payment card details, which never leave Apple or Google.

AI insight feedback

If you flag an AI-generated verse insight using the in-app flag button, Bodha records the card identifier and your device identifier. No text you write is collected — only that a flag was submitted. This signal is used to review and improve insight quality.

Website and contact data

If you contact us by email or submit a support request, we collect your email address and the content of your message in order to respond. This data is not used for marketing without your consent.

What we do not collect

• Your name, email address, or phone number (unless you contact us directly)
• Your location
• Your contacts, calendar, camera, or microphone
• Data from other apps on your device
• Biometric or health data
• Your Apple ID or Google account information
• Precise advertising identifiers (IDFA/GAID)

How we use your data

Data collected by Bodha is used only to:

• Maintain your streak, saves, badges, and challenge progress across sessions
• Display community verse engagement counts (anonymised and aggregated)
• Verify your subscription status and unlock Premium features
• Improve app content and AI insight quality using aggregated, anonymous usage patterns
• Review and correct insights flagged by users
• Respond to support and privacy requests you send us directly
• Comply with legal obligations

Bodha does not sell your data. Bodha does not share your data with advertisers. The Bodha app contains no advertisements.

Legal basis for processing

Depending on your jurisdiction, we rely on one or more legal bases:

• Contract performance — to deliver features you have purchased or use
• Legitimate interests — to improve the app using anonymous usage signals, prevent fraud, and maintain service security
• Consent — for optional analytics where required by law (you can withdraw at any time via consent preferences)
• Legal obligation — to comply with applicable laws

Data storage and security

Your streak, saves, badges, and challenge progress are stored locally on your device using iOS or Android secure local storage. This data does not leave your device unless you are a Premium user who has enabled cloud backup, in which case it is stored in encrypted form in your personal iCloud (iOS) or Google Drive app data folder (Android) — accessible only to your own Apple ID or Google account.

Anonymous usage events and community engagement data are stored on Supabase-hosted servers. PostHog analytics data is stored on PostHog's infrastructure. Both providers maintain industry-standard security practices. Supabase infrastructure is hosted in the EU.

We use appropriate administrative, technical, and organisational safeguards to protect all data. No method of transmission or storage is completely secure, and we continuously improve our controls.

Third-party services

Bodha uses the following third-party providers:

International data transfers

Bodha is developed in India and our third-party providers process data in the EU and the United States. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms and require providers to apply equivalent protection standards.

Children's privacy

Bodha is not directed at children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children under 13. If you believe a child has used Bodha and data has been collected, contact us at [email protected] and we will delete it promptly.

Your privacy rights

Subject to applicable law, you may have rights to access, correct, update, delete, or receive a portable copy of your data; to withdraw consent; to object to or restrict certain processing; and to lodge a complaint with a supervisory authority.

To exercise these rights or request deletion of your device's associated data, contact us at [email protected]. Because most data is stored locally on your device, uninstalling the app removes it immediately. For server-side data, we will respond within 30 days.

We do not sell personal data or share personal data for cross-context behavioural advertising as defined by applicable privacy laws.

Data retention

We retain anonymous usage event data for up to 24 months for analytics purposes, after which it is deleted or permanently aggregated. Community engagement counts (like and save totals) are retained indefinitely as they are aggregate-only and contain no individual user data. Support correspondence is retained for up to 3 years or as required by law.

Changes to this policy

We may update this policy to reflect legal, technical, or product changes. We will revise the effective date above and provide additional in-app notice for material changes. Continued use of Bodha after the effective date constitutes acceptance of the updated policy.

Contact us

Privacy requests and questions: [email protected]
General support: [email protected]
Technical and security reports: [email protected]