RasanAi ("we", "our", "the App") is built and operated by Testware Informatics Pvt Ltd. This Privacy Policy explains what personal data we collect when you use the RasanAi mobile application and website (rasanai.app), why we collect it, how we use and protect it, and what rights you have. By using RasanAi, you agree to the practices described in this policy.
1. Who This Policy Applies To
This policy applies to all users of the RasanAi mobile app (iOS and Android) and the website at rasanai.app. If you are under 13 years of age, you may not use RasanAi. If you are between 13 and 18, a parent or guardian must review this policy on your behalf.
2. Data We Collect and Why
We collect only what is necessary to provide the service. The table below is our full disclosure:
| Data | Why we collect it | Linked to you | Shared with |
|---|---|---|---|
| Phone number | OTP authentication — to verify identity and create your account | Yes | Supabase (auth provider) |
| User ID | Anonymous unique ID to link your recipes, meal plans and subscription across devices | Yes | Supabase, RevenueCat |
| Voice / Audio | Hands-free cooking assistant — audio is sent to OpenAI Whisper for speech-to-text transcription and immediately discarded. We do not store recordings. | Yes | OpenAI (transcription only) |
| Purchase history | To verify your Pro subscription and unlock premium features | Yes | RevenueCat, Apple/Google |
| Recipes & meal plans | To save, sync and display your personal recipe library and planner | Yes | Supabase (storage) |
| Camera / photos | Handwritten recipe scanning — image is sent to OpenAI Vision API for OCR and is not stored on our servers | No | OpenAI (OCR, not stored) |
| App preferences | Language, theme, dietary settings — to personalise your experience | Yes | Supabase |
| Device info | OS version, app version — for debugging and compatibility | No | None |
We do not collect: real name, email address, precise location, contacts, browsing history, advertising identifiers, biometric data, or payment card numbers.
3. How We Use Your Data
- Provide the service — authenticate you, sync your recipes, process subscription entitlements
- AI features — send recipe text and voice audio to OpenAI APIs to generate responses. We never send your phone number or account details to OpenAI.
- Improve the App — aggregate, anonymised usage patterns to understand which features work best
- Customer support — respond to your support requests
- Legal obligations — comply with applicable Indian and international laws
We do not use your data for advertising, profiling, or selling to third parties.
4. Third-Party Services
RasanAi uses the following trusted third-party services. Each has its own privacy policy:
| Service | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Supabase | Authentication, database | Phone number, User ID, recipes | supabase.com/privacy |
| OpenAI | AI recipe extraction, OCR, chat assistant, voice transcription | Recipe text, audio, images (no personal data) | openai.com/privacy |
| RevenueCat | Subscription management | Anonymised User ID, purchase status | revenuecat.com/privacy |
| Razorpay | Payment processing (Android) | No personal data — payment handled entirely on Razorpay's page | razorpay.com/privacy |
| Apple App Store | Payment processing (iOS) | Handled by Apple — we never see card details | apple.com/legal/privacy |
| Cloudflare | API edge hosting, website CDN | IP address (standard web traffic) | cloudflare.com/privacypolicy |
5. Data Storage and Security
Your data is stored on Supabase infrastructure (hosted on AWS, Asia-Pacific region). We implement:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Row-Level Security (RLS) — your data is mathematically isolated from other users at the database level
- No passwords stored — authentication is via OTP only (no password to steal)
- API secrets stored in Cloudflare Workers environment — never exposed to the client app
Despite these measures, no system is 100% secure. We will notify you promptly in the event of a data breach that affects your personal information.
6. Data Retention and Deletion
- Active account: We retain your data as long as your account is active
- Account deletion: When you delete your account (via Settings → Delete Account in the App), all your personal data is permanently deleted within 30 days
- Voice audio: Not stored — processed in real-time and discarded immediately
- Camera images: Not stored on our servers — processed by OpenAI and discarded
- Subscription records: Retained for up to 7 years as required by Indian financial regulations (GST compliance)
To request deletion of your account and all associated data, go to Profile → Settings → Delete Account in the App, or email us at [email protected] with subject "Data Deletion Request".
7. Your Rights
Under the Indian Digital Personal Data Protection (DPDP) Act 2023:
- Right to access the personal data we hold about you
- Right to correct inaccurate or incomplete data
- Right to erase your data (right to be forgotten)
- Right to withdraw consent at any time
- Right to grievance redressal via our Grievance Officer
- Right to nominate a person to exercise rights on your behalf
Under GDPR (if you are in the European Economic Area):
- Right to data portability (receive your data in a machine-readable format)
- Right to restrict processing
- Right to object to processing based on legitimate interests
- Right to lodge a complaint with your local supervisory authority
Under CalOPPA / CCPA (if you are in California, USA):
- Right to know what personal information is collected, used, shared or sold
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Children's Privacy
RasanAi is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] and we will delete that information within 48 hours.
For users between 13 and 18, a parent or guardian's consent is required before using the App.
9. Permissions We Request
| Permission | When used | Can you deny it? |
|---|---|---|
| Microphone | Only when you tap the voice assistant button in the cooking screen | Yes — voice features will be unavailable but all other features work normally |
| Camera | Only when you tap "Scan Handwritten Recipe" | Yes — you can still import recipes via URL |
| Photo Library | Only when you choose to upload a photo for recipe scanning | Yes — you can use camera instead |
| Notifications | Meal plan reminders (only if you set them) | Yes — reminders will not fire but all other features work normally |
We do not request access to your contacts, location, Bluetooth, Face ID/Touch ID, or any other system permission not listed above.
10. Cookies and Tracking
The RasanAi mobile app does not use cookies. The website (rasanai.app) uses only essential functional cookies required for the site to work (e.g., remembering your cookie preference). We do not use advertising trackers, cross-site tracking pixels, or analytics cookies that track you across other websites.
11. International Data Transfers
Your data may be processed in countries other than India, including the United States (OpenAI, RevenueCat, Cloudflare) and the European Union (Supabase infrastructure). When data is transferred internationally, it is protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and the service provider's compliance with GDPR.
12. Do Not Track
RasanAi honours browser "Do Not Track" signals on our website. We do not track users across third-party websites. We do not engage in cross-context behavioural advertising.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Send an in-app notification for significant changes
- For major changes affecting your rights, request fresh consent
Continued use of the App after the effective date of the updated policy constitutes your acceptance of the changes.
14. Grievance Officer
As required under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 and the DPDP Act 2023:
Grievance Officer — Testware Informatics Pvt Ltd.
Email: [email protected]
Address: I-13, 1st Main Road, I-Block, Anna Nagar East, Perambur Purasawalkam, Chennai – 600102, Tamil Nadu, India
We acknowledge complaints within 24 hours and resolve them within 15 days of receipt, as required by law.
15. Contact Us
For any privacy questions, data access requests, or to exercise your rights:
- 📧 Email: [email protected]
- 🌐 Website: rasanai.app
- 📍 Address: Testware Informatics Pvt Ltd., I-13, 1st Main Road, I-Block, Anna Nagar East, Perambur Purasawalkam, Chennai – 600102, Tamil Nadu, India
This Privacy Policy is governed by the laws of India. Disputes shall be subject to the exclusive jurisdiction of the courts in Chennai, Tamil Nadu. This policy was drafted to comply with: Apple App Store Review Guidelines, Google Play Developer Policy, India DPDP Act 2023, GDPR (EU) 2016/679, CalOPPA, and CCPA 2018.