Your data, your rights.

1. Who This Applies To

This notice applies to all individuals who create an account and use the Boli voice assistant application. By clicking "I Agree" below, you provide free, specific, informed, and unambiguous consent as required under Section 6 of the DPDPA 2023. You must be at least 18 years of age to use Boli. If you are under 18, you may only use Boli with the verifiable consent of a parent or guardian.

2. Personal Data We Collect

We collect the following categories of personal data:

• Identity data: Your name, email address, and Google profile ID, obtained via Google Sign-In (OAuth 2.0).
• Contact data: Mobile phone number and city, collected during profile setup.
• Preference data: Your preferred Indian language and how you heard about us.
• Voice data: Audio recordings you make while using Boli. Audio is transmitted to Sarvam AI for real-time transcription and is also stored by us in encrypted form to improve and train our Indian-language AI models. You may request deletion of your stored voice recordings at any time (see Section 7 — Your Rights).
• Conversation data: Text transcripts of your conversations and saved phrases, stored in our database.
• Usage & log data: Session identifiers, device type, browser user-agent, errors, and events within the app. Collected for security and service improvement.
• Consent record: The date, time, and IP address at which you gave consent, as required by DPDPA 2023.

3. Why We Process Your Data (Purposes)

We process your personal data only for the following stated purposes:

• To provide the Boli voice assistant service in your chosen Indian language.
• To personalise your experience (language preference, saved phrases, conversation history).
• To authenticate your identity securely via Google OAuth.
• To contact you for service updates, bug fixes, or critical notices (not marketing without separate consent).
• To improve and train Indian-language AI models using your voice recordings, transcripts, and conversation outcomes. Voice data used for training is stored in encrypted form and linked to your account so you can request its deletion.
• To detect, prevent, and investigate security incidents and abuse.
• To comply with legal obligations under Indian law.

4. Third-Party Data Processors

To deliver the service, we share your data with the following processors who are contractually bound to protect it and use it only as instructed:

• Google LLC (USA) — OAuth 2.0 authentication. Google Privacy Policy
• Sarvam AI Pvt. Ltd. (India) — Speech-to-text and text-to-speech processing of your voice audio. Audio is processed in real-time by Sarvam; separately, we retain a copy in our own encrypted storage for AI model training purposes. Sarvam Privacy Policy
• Groq, Inc. (USA) — Large language model inference for generating conversational responses from your text transcript. Groq Privacy Policy
• Supabase, Inc. (USA) — Cloud database hosting for your account data, conversations, and logs. Data is stored in encrypted form. Supabase Privacy Policy

We do not sell your personal data to any third party for commercial purposes.

5. Data Retention

• Account data (name, email, phone, city): Retained for as long as your account is active, or up to 3 years after last sign-in.
• Conversation history & saved phrases: Retained until you delete them or your account is closed.
• Voice audio: Stored in encrypted form for up to 3 years from the date of recording, or until you request deletion, whichever is earlier. Used solely for Indian-language AI model training and service improvement.
• Usage logs: Retained for 90 days for security and debugging purposes.
• Consent records: Retained for 7 years as required by applicable law.

6. Your Rights Under DPDPA 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access (Section 11): Request a summary of the personal data we hold about you and the processing activities performed.
• Right to Correction & Erasure (Section 12): Request correction of inaccurate data or erasure of data that is no longer necessary. You can update most data directly in the app under Account settings.
• Right to Withdraw Consent (Section 6(4)): You may withdraw your consent at any time by deleting your account. Withdrawal does not affect the lawfulness of processing done before withdrawal.
• Right to Grievance Redressal (Section 13): Lodge a complaint with our Grievance Officer (see below). We will respond within 48 hours.
• Right to Nominate (Section 14): You may nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email us at privacy@singularraritylabs.com with subject line "DPDPA Data Request". We will respond within 72 hours.

7. Grievance Officer

As required under the DPDPA 2023 and IT Act Rules, our Grievance Officer for data-related complaints is:

If you are not satisfied with our response, you may approach the Data Protection Board of India once constituted under Section 18 of the DPDPA 2023.

8. Security

We implement industry-standard security measures including encrypted data storage (AES-256), HTTPS-only transmission, JWT-based authentication with 30-day expiry, and access controls. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the Data Protection Board as required by law.

9. Cookies & Local Storage

Boli uses browser localStorage to store your authentication token and sessionStorage to track your session for error logging. No third-party advertising cookies are used.

10. Changes to This Notice

If we make material changes to how we process your data, we will notify you in-app and request fresh consent where required. The current version and effective date are always shown at the top of this page.

11. Governing Law

This notice is governed by the laws of India. Any disputes shall be subject to the jurisdiction of courts in New Delhi, India.

12. Privacy Policy

Our Privacy Policy is fully integrated into this document. The data collection practices, retention policies, and your rights (as detailed in Sections 1 through 10) constitute our complete Privacy Policy in compliance with the Digital Personal Data Protection Act, 2023. We do not sell your data. Voice audio is strictly used for the Boli service and to improve Indian-language AI models as outlined above.

13. Refund Policy

Due to the nature of Boli's AI voice generation which incurs immediate computational costs, Boli is a non-refundable service. However, if you experience technical issues or are mistakenly charged during the manual subscription process, please contact us at singularraritylabs@gmail.com within 7 days. Refunds remain at our sole discretion.