KarmYogi Privacy Policy
Last updated: May 2026
KarmYogi (“we”, “us”) provides a kindness-economy mobile and web app under the brand KarmYogi (the “App”). This policy explains what personal data we collect when you use the App, how we use it, where it is stored, and how you can delete it. We comply with India’s Digital Personal Data Protection Act, 2023 (DPDP) and applicable global privacy frameworks.
1. What we collect
•
Email address — required for one-time-password login.
•
Display name — required; shown on your posts and to people you transact KARM with.
•
Phone number — optional; used only if you choose to add it for account recovery.
•
Profile photo — optional; you may add or remove it at any time.
•
Approximate location — optional; used only when you tap a “show nearby kindness” feature.
•
Date of birth — optional; helps us run age-appropriate features (e.g. KarmYogi Juniors).
•
KARM transactions — the amounts and counterparties of every transfer you initiate.
•
Posts, comments, reactions — content you create inside the App.
•
Device identifier and crash logs — to keep the App working and investigate problems.
2. How we use it
•
To run the App — log you in, deliver KARM, display your activity to people you follow.
•
To contact you about your account — OTP delivery, notifications you have opted into, security alerts.
•
To investigate crashes, abuse, and security incidents.
•
To compute aggregate analytics (such as “number of daily active users”). No personally identifying data is shared in aggregates.
3. What we do NOT do
•
We do not sell your data to anyone.
•
We do not share your data with advertisers.
•
We do not use third-party trackers or data brokers.
•
We do not use your data for personalised advertising.
4. Where the data lives
All personal data is stored in encrypted form on servers located in India. Backups are also encrypted and stored in India. Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256 disk encryption).
5. Sharing with service providers
We use a small number of trusted infrastructure providers to operate the App — email delivery (transactional OTP), cloud hosting, and crash-reporting. These providers are contractually limited to processing data on our behalf and do not have permission to use it for any other purpose.
6. Children
The App is intended for users aged 13 and over. KarmYogi Juniors is a parent-operated mode: the parent’s account holds all data; the child does not have a separate account and cannot independently sign in or transact.
7. Your rights
•
Access — request a copy of the personal data we hold about you.
•
Correct — fix anything that is wrong.
•
Withdraw consent — at any time, for any optional data you provided.
•
Lodge a complaint — with the Data Protection Board of India under the DPDP Act, 2023.
8. Account deletion
You can delete your KarmYogi account and all associated personal data at any time. The simplest way is to send an email from your registered address to official@karmyogi.in requesting deletion. Full instructions are at karmyogi.in/delete-account.
We complete deletion within 30 days of confirmation. KARM transaction records may be retained in fully anonymised aggregate form for legal and tax reasons, but no personally identifying data is kept after deletion.
9. Changes to this policy
If we make any material change to this policy, we will update the “Last updated” date at the top of the page and notify active users in-app at least 7 days before the change takes effect.
10. Contact us
For any privacy question, write to official@karmyogi.in. We aim to respond within 5 business days.