Draft for review. This text has not been finalised and may change before launch.
Privacy Policy
Raviga is an app for describing the software you want built. You speak, type or upload your idea, Raviga turns it into a requirements document (a “brief”) and a quote, and our team builds it and hands it over to you. Raviga Apps Private Limited (“we”, “us”) operates Raviga and is the Data Fiduciary for your personal data under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
1. The short version
- Your project stays with you. Recordings and files never leave your phone. Drafts are stored only on your phone.
- To write or price a brief, its text is sent to an AI service, used once, and not stored by us. That service is Claude, by Anthropic, reached through our servers (section 3).
- When you submit, we keep the brief to review and build it, and delete it when you accept the delivery, cancel the project or we decline it. Our team builds it with Claude, Anthropic’s AI, under business terms that do not allow training on your project.
- There is no sign-up. We do not ask for your name, phone number, contacts or location.
- Passwords, API keys, card numbers, Aadhaar and PAN numbers are removed automatically from anything you send.
- You can download what we hold about you, or delete your account, from Settings in the app.
- If you allow it, the app counts how it is used (for example, which steps people reach) with Google Analytics. It never includes your project’s content and is never used for advertising. You can switch it off in Settings.
- We do not sell your personal data or use it for advertising.
2. What stays on your phone
Voice recordings, the documents you attach, the text read from them, your typed notes, transcripts and every draft of your brief are kept only on your phone. Recordings are transcribed and documents are read on the phone itself. We do not receive, back up or sync any of this. If you lose your phone or delete the app, unsubmitted drafts are gone, and moving your account to a new phone moves only your submitted projects.
3. What reaches us, and for how long
Text you send for drafting or pricing. When you ask Raviga to write, update or price a brief, the app sends the text needed for that one request. We check it (see “Automated checks”), send it to our AI provider, return the result to your phone and keep nothing: the request is deleted when processing starts and the result is deleted 15 minutes after it is ready, or shortly after your app collects it.
Projects you submit. The submitted brief (its title and sections), the comments you and our team exchange and your revision requests are kept while we review and build the project. Our team builds it with Claude, so the parts of the brief and comments needed for the work are sent to Anthropic (see “Who we share it with”). While the project is open, its brief and your revision requests are kept as files in a private storage bucket that only our team can access, without your name or contact details. When you accept the delivery (or it is accepted automatically), cancel the project, or we decline it, they are deleted, files included. We keep a short record of the project (its reference, status, dates, credits charged and the repository link) for your history and our accounts.
Device and app details. When you open the app it registers your device. We store a random install identifier (as a one-way hash), the platform, app version, device model and OS version, and access tokens (as one-way hashes). This is how the app knows your projects and credits are yours without a password.
Details you choose to add. A recovery email address (verified with a one-time code), your GitHub username (to transfer the finished code to you) and your AWS account ID (if you want us to deploy into your AWS account).
Purchases. Credits are bought through the Apple App Store or Google Play, via our payments provider RevenueCat. We receive the product, the store transaction ID and the date. We never see your card or bank details.
Notifications. The installation ID Firebase Cloud Messaging gives the app, so we can tell you when your brief is ready or your project changes. Notifications never contain your project’s content.
Usage analytics, only if you allow it. When you switch on usage analytics, the app sends Google Analytics for Firebase a small set of events: for example, that a brief was started or a quote was viewed, with the type of input, the price bracket or the number of credits. Google also records basic app and device details (app version, device model, OS, country) under a random identifier for this installation of the app. The events never include your project’s text, titles, file names or comments, your Support ID, or anything that names you or your project. We do not collect your advertising ID, and Google’s advertising features are switched off. Analytics is off until you switch it on, and you can switch it off at any time in Settings.
Technical data. Your IP address is used briefly to limit abusive traffic. Our servers keep operational logs for one year; they record events, errors and timings, never the content of your project.
4. Why we use it
- To provide Raviga: drafting and pricing your brief, building and delivering your project, and keeping your credits balance. You start this by using the app.
- AI processing, with your consent: drafting, pricing and content checks by Claude, by Anthropic. You give this consent on the first screen and can withdraw it in Settings.
- Usage analytics, with your consent: understanding which parts of the app help people get a project built, so we can improve it. Optional: you choose it on the first screen or in Settings.
- Legal obligations: purchase and credit records are financial records we must keep.
- Security: preventing abuse, fraud and unauthorised access.
Automated checks
Everything you send is checked automatically before it is used: for passwords, keys and identity or card numbers, which we remove; for text that is too short or unreadable; and, using Claude for a moderation check and a policy check, for projects we cannot take on under our Terms of Use. Content that fails the policy check is refused. Repeated refusals can pause an account for a day, and repeated pauses can restrict it. We keep a record of each check (the result, the reason category and a one-way fingerprint of the text, never the text itself) for 90 days, so the same refused text is recognised if it is sent again. If you think a check got it wrong, write to the Grievance Officer and a person will review it.
5. Who we share it with
We share personal data only with the processors below, only as needed to run Raviga, and under contracts that require them to protect it.
- Amazon Web Services (Mumbai, India): hosting, databases and email.
- Anthropic (United States): Claude, the AI behind the app’s own features and the AI our team builds with. Through the Claude API it writes and updates your brief, estimates its size for the quote, and checks what you send (moderation and a policy check). Our team uses Claude and Claude Code, on a Claude business plan, with the brief, comments and code needed to build a submitted project. Under Anthropic’s commercial terms it does not train its models on this data. It deletes it within 30 days, except content its automated checks flag for breaking its usage policy, which it may keep for up to 2 years.
- RevenueCat (United States), Apple and Google: in-app purchases.
- Google Firebase: push notifications and, if you allow it, usage analytics (Google Analytics for Firebase). Advertising features are off, and Google may use the data only to provide the service to us and for technical support.
- GitHub: your GitHub username, to transfer your project’s repository to you.
- Our build team: the people who build a submitted project see its brief, comments and delivery details, and receive an email with its summary. They build it with Claude (above). They never see your drafts, recordings, files or device details.
We may disclose data where Indian law requires it, for example to a court or a government authority acting lawfully.
6. Processing outside India
Anthropic, RevenueCat, Apple, Google and GitHub may process data outside India, including in the United States. The DPDP Act permits this except to countries the Government of India restricts; we will stop any such transfer if a restriction applies.
7. How long we keep it
- Recordings, files and drafts: never on our servers.
- Text sent for drafting or pricing: deleted from our servers within 15 minutes; Anthropic deletes its copy within 30 days (see section 5).
- Submitted briefs, comments and revision requests: until the project is accepted, cancelled or declined, then deleted. Copies sent to Claude while building are deleted by Anthropic within 30 days (see section 5).
- Records of automated checks (no content): 90 days.
- Data export downloads: the link stops working after 24 hours.
- Server logs (no content): one year.
- Usage analytics (no content): 2 months in Google Analytics, then deleted.
- When you delete your account: everything is erased 7 days later (so you can change your mind), except the credits ledger. That is a financial record, so we keep it for as long as Indian tax and company law requires, with your account identifier replaced by a one-way hash so it no longer identifies you. Deleting the app removes your drafts from your phone.
- Backups: our database keeps encrypted backups for 35 days, so data deleted as described above can remain in them for up to 35 days more, until those backups expire. We use them only to recover from a failure.
8. Your rights
Under the DPDP Act you can do the following (a one-page summary: Your rights):
- Access your data: download a copy from Settings in the app. It includes everything our servers hold, and the app adds the drafts on your phone.
- Correct it: edit your drafts, recovery email and delivery details in the app, or comment on a submitted project.
- Erase it: delete your account from Settings in the app. Active projects (submitted, being built or awaiting your acceptance) must be cancelled or accepted first; write to us if you need help with that.
- Withdraw consent to AI processing or to usage analytics from Settings in the app.
- Nominate someone to exercise these rights if you die or cannot act: write to the Grievance Officer.
- Complain to our Grievance Officer (below). If you are not satisfied with the reply, you can complain to the Data Protection Board of India.
9. Children
Raviga is for adults building software for themselves or their business. You must be 18 or older to use it. We do not knowingly process the personal data of children.
10. Security
Data is encrypted in transit (HTTPS) and at rest. Secrets and identity numbers are removed from what you send before it is used. Access tokens, install identifiers and recovery keys are stored only as one-way hashes. Drafts on your phone are protected by your phone’s own security. Access to production systems is limited to the people who run Raviga. If a personal data breach affects you, we will tell you and the Data Protection Board as the law requires.
11. Changes
When we change this policy we update the version above, and the app asks you to review and accept it again before you continue.
12. Contact and grievances
Questions or complaints about your data or about Raviga: write to membersupport@miraquill.com. We acknowledge them within 24 hours and resolve them within 15 days.
For anything else: support@miraquill.com.