Privacy Policy

This Privacy Policy describes how LiPi Apps ("we," "us," or "our") collects, uses, and shares your personal information when you use our mobile applications, website (lipiapps.in), and client development services.

This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

This document has two parts:

• Part A — For users of our mobile applications
• Part B — For clients who hire us for development

1. Definitions

For the purpose of this Privacy Policy:

• Data Fiduciary — LiPi Apps (determines purpose of processing)
• Data Principal — You (the user whose data is processed)
• Personal Data — Any information identifying you
• Processing — Collection, storage, use, sharing of data
• Consent — Your free, specific, informed permission
• Data Processor — Third party processing data on our behalf

2. Information We Collect

We collect the following categories of personal data:

• Account Information — Email address, phone number, display name
• Device Information — Device ID, model, operating system, IP address
• Usage Data — App activity, game statistics, preferences
• Payment Information — Transaction ID and payment status from Razorpay (we do NOT store card or bank details)

We do not collect biometric data, precise location, contacts, or unnecessary permissions.

3. How We Use Your Information

• To provide, maintain, and improve the Apps
• To process payments and activate premium features
• To provide customer support
• To send important notifications (updates, security)
• To detect, prevent, and address fraud or abuse
• To comply with legal obligations

4. Legal Basis for Processing

Under the DPDP Act, we process your data based on:

• Consent — For marketing and optional features
• Contract — For app usage and payment processing
• Legal Obligation — For tax, accounting, and compliance
• Legitimate Interest — For security and fraud prevention

5. Consent & Withdrawal

Your consent is obtained at the time of signup or purchase. You have the right to:

• Withdraw consent at any time
• Request details of data processed
• Withdrawal may result in limited service (e.g., app may not function fully)
• To withdraw — email support@lipiapps.in

6. Payment Information

All payments are processed securely through Razorpay. We do not store or have access to your card, UPI, or bank details. Razorpay has its own privacy policy governing payment data.

7. Data Sharing

We do NOT sell your personal data. We may share it with:

• Payment Processors — Razorpay (for payment processing)
• Service Providers — Hosting, analytics, customer support
• Legal Authorities — When required by law or court order

8. Data Security

We implement industry-standard security measures:

• HTTPS / SSL encryption for all data in transit
• Encrypted storage for sensitive data
• Restricted access to personal data
• Regular security audits
• Secure development practices

However, no method of transmission over the internet is 100% secure.

9. Data Breach Notification

In the event of a data breach affecting your personal data:

• We will notify affected users within 72 hours
• We will report to the Data Protection Board of India
• We will investigate and prevent recurrence
• Contact support@lipiapps.in for concerns

10. Data Retention

We retain your personal data only as long as necessary:

• Account data — until account deletion
• Payment records — as required by tax laws (typically 8 years)
• Usage data — for up to 2 years
• Support tickets — for 3 years

11. Your Rights (DPDP Act)

Under the DPDP Act, 2023, you have the right to:

• Access — Know what data we hold about you
• Correction — Request correction of inaccurate data
• Erasure — Request deletion of your data
• Withdraw Consent — At any time
• Grievance Redressal — File complaint with us or the Board
• Nominate — Nominate someone to exercise rights on your behalf

To exercise any right, email support@lipiapps.in. We respond within 30 days.

12. Children's Privacy

• We do NOT knowingly collect data from anyone under 18
• Verifiable parental consent is required for users under 18
• No behavioral tracking or targeted ads for children
• If we discover data from under-18 users, it is deleted immediately
• Parents/guardians can email support@lipiapps.in

13. Marketing Communications

• We may send promotional emails about new features, offers, and updates
• You can opt-out at any time
• Opt-out link is included in every promotional email
• Essential emails (receipts, security alerts) cannot be opted out

14. International Data Transfers

Some of your data may be processed outside India:

• Razorpay — payment servers may be outside India
• Google Play — global distribution servers
• Cloud hosting — may be outside India

We ensure adequate protection and comply with DPDP Act cross-border data transfer rules.

15. Third-Party Services

Our Apps use the following third-party services:

• Razorpay — Payment processing
• Google Play Services — App distribution
• Firebase — Analytics and crash reporting (if used)

Each of these has its own privacy policy.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of our services constitutes acceptance.

17. Client Information We Collect

For client projects, we collect:

• Business Information — Business name, type, Udyam/GST number
• Contact Information — Name, email, phone, address
• Project Information — Requirements, SOW, specs, feedback
• Payment Information — Invoices, transaction IDs (via Razorpay)
• KYC Documents — PAN, GST, Aadhaar (as legally required)

18. How We Use Client Information

• To execute the project as per the SOW
• To issue invoices and process payments
• To provide project updates and support
• To comply with tax and legal obligations
• To maintain records for legal and audit purposes

19. Project Data & Confidentiality

We treat all client project data as confidential:

• Project specifications and requirements are never shared
• Client business data is stored securely
• Access is restricted to team members working on the project
• Data is deleted after the agreed retention period

20. NDA Handling

If a client signs a Non-Disclosure Agreement (NDA) with us:

• We strictly adhere to the NDA terms
• All project information is protected
• We do not disclose project details to third parties
• NDA obligations survive after project completion

21. Source Code Confidentiality

• Client source code (if purchased) is never shared
• Git repositories are private and access-controlled
• We do not reuse client-specific code in other projects
• Source code is delivered via secure channels only

22. Client's User Data (Data Fiduciary / Processor)

• Client is responsible for obtaining valid consent from their users
• Client is responsible for complying with DPDP Act for their users
• LiPi Apps processes user data only on the client's instructions
• We do not use client's user data for our own purposes
• We assist clients with data subject requests

23. Data Processing Agreement (DPA)

For projects involving end-user data, a Data Processing Agreement (DPA) is signed between LiPi Apps and the client before project start. The DPA defines:

• Categories of data processed
• Purpose and duration of processing
• Security measures implemented
• Data deletion timelines
• Liability split for data breaches
• Assistance with data subject requests

24. Client Data Protection

• Client data stored in encrypted form
• Access restricted to authorized team members
• Secure transfer via encrypted channels
• Regular backups and security audits
• Client data never used for our marketing without consent

25. No Third-Party Sharing

We do NOT share client data with:

• Marketing companies
• Data brokers
• Competitors
• Any unauthorized third party

Exception: When required by law or court order.

26. Client Data Retention

• Project files — 2 years after project completion
• Signed agreements (Service, Source, NDA) — 8 years
• Invoices and payment records — 8 years (tax compliance)
• Source code repositories — as agreed in DPA
• After retention period, data is securely deleted

27. Cookies & Tracking

Our website uses cookies:

• Essential Cookies — Required for the website to work
• Payment Cookies — Razorpay for secure transactions
• Analytics Cookies — Google Analytics / Firebase (if used)
• We do NOT use advertising or tracking cookies
• You can manage cookies in your browser settings

28. Grievance Officer

In accordance with the DPDP Act, 2023, our Grievance Officer can be contacted at:

29. Contact Us

For any privacy-related questions, contact us at:

• Email: support@lipiapps.in
• Website: lipiapps.in

30. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023. Any disputes shall be subject to the exclusive jurisdiction of courts in Tamil Nadu, India.

31. Updates & Notification

We may update this Privacy Policy periodically. Material changes will be notified via:

• Email to registered users
• In-app notification
• Website announcement

Continued use of our services after updates constitutes acceptance of the revised policy.