PRIVACY POLICY
Last Updated: September 15, 2026
Contact: contact@devalay.org
1 · Introduction
Welcome to Devalay, a devotional social-media platform celebrating culture, community, and authenticity.
We respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what we collect, why we collect it, and how you can control or delete your data.
2 · Scope
This Policy applies to the Devalay mobile app, the website https://devalay.org, and any related features, content, or services (collectively, “Services”).
By using the Services, you agree to this Policy.
If you do not agree, please discontinue use of Devalay.
3 · Guest Use – No Login Required
Certain public features—such as temple information, festivals, and events—can be browsed without creating an account.
When using Devalay as a guest, we do not collect your name, phone number, or email.
We may process limited technical data (device type, OS, IP address, crash logs) only to maintain security and performance.
4 · Information We Collect
When you create an account or interact with content, we may collect:
- Account information: your mobile number, which you need to sign in, your name, and anything you add to your profile, such as a photo, bio, date of birth, email or location.
- User-Generated Content (UGC): Posts, comments, media, and related metadata.
- Usage & Device Data: App interactions, device model, OS version, language, IP address, and optional approximate location.
- Reports & Safety Logs: Reports, blocks, and moderation actions used to keep the community safe.
Information you give us for specific features. We collect the following only if you use the feature it belongs to:
- Profile verification: a selfie, which we compare with your profile photo using an automated face-matching service to confirm it is you.
- Selling on Devalay: your PAN, GSTIN if you have one, identity and address documents, and the bank account where we send your earnings.
- Donations: your PAN, for the donation record.
Payments are processed by Razorpay. We do not see or store your card details.
5 · How We Use Information
We use your data only for legitimate purposes:
- To provide, personalize, and improve app functionality
- To moderate and ensure a safe community experience
- To send essential notifications and service messages
- To comply with legal requirements and prevent fraud or abuse
We never sell your personal information.
6 · Legal Basis for Processing
Depending on your region, we process information:
- with your consent,
- to perform a contract (your Devalay account),
- to meet legal obligations, or
- for our legitimate interests (security, analytics, community safety).
7 · Sharing and Disclosure
We may share limited data only with:
- Service providers that help us run Devalay, listed below, under confidentiality obligations
- Law-enforcement authorities when legally required or to protect rights and safety
- Affiliates or successors in case of merger or acquisition (subject to equivalent protections)
We do not sell or rent user data.
We share information with service providers only to run Devalay:
- cloud hosting and storage
- automated checks on photos, videos and their sound, to keep unsafe content off the platform
- sending sign-in codes by SMS
- processing payments, refunds and payouts
- push notifications and crash reports
- place search
- writing assistance our team uses when editing temple and deity information
These providers are Amazon Web Services, Twilio, Razorpay, Google (Firebase and Maps) and Anthropic. They process information on our behalf.
8 · Community Safety and No-Tolerance Statement
Devalay maintains a no-tolerance policy for objectionable content or abusive users.
Posts, comments and messages appear straight away and are covered by automated checks and by reports from the community. Temples and other community entries are reviewed by our moderators before they are published.
You can Report content or Block users directly in the app.
Serious or repeated violations may result in content removal or account suspension.
Urgent safety issues can be reported to contact@devalay.org.
9 · Data Retention
We retain data only as long as necessary to provide our Services or as required by law.
When information is no longer needed, it is securely deleted or anonymized.
Sign-in sessions last up to a year, and accounts that have not been used for six months are deactivated. Records we are required to keep by law, such as orders, payments, donations and seller verification, are kept for as long as the law requires.
10 · Account Deletion
You can permanently delete your account any time from Settings → Delete account, on the website or in the app.
When deletion is confirmed:
- Straight away, you are signed out everywhere, your profile, posts and comments are hidden, and your mobile number is released.
- Within 7 days, your personal information is erased: your name, photos, profile details, follows, likes and saved items, and the text of messages you sent. Your posts, glimpses and comments are removed, and are permanently deleted within 30 days after that.
- Records we are required to keep by law, such as orders, payments, donations and seller verification, are kept for as long as the law requires.
Deletion requests by email to contact@devalay.org are processed within the same timeframe.
11 · Data Security
We protect your information with encryption in transit, restricted access, and private storage for your photos, videos and documents, which are shared only through links that expire.
No system is 100% secure, but we continuously improve our protections.
12 · Children’s Privacy
Devalay is for people aged 18 and over.
If we learn that an account belongs to someone under 18, we will close it and delete its information.
13 · International Data Transfers
Data may be processed in India and other jurisdictions where our providers operate.
We ensure comparable data-protection standards wherever processing occurs.
14 · Your Rights
You may have the right to:
- Access or request a copy of your data
- Correct inaccurate information
- Delete your data (see Section 10)
- Withdraw consent for non-essential processing
- Complain to a data-protection authority
Requests: contact@devalay.org
15 · Links to Other Services
Devalay may link to other websites. We are not responsible for their privacy practices, so please read their policies.
16 · Policy Updates
We may update this Policy periodically.
Major changes will be communicated in-app or by email.
Continued use of Devalay means you accept the updated Policy.
17 · Grievance Officer
If you have a complaint about how we handle your information, or about content on Devalay, you can contact our Grievance Officer:
Deepa Tyagi
PMG Engineering Private Limited, 1504, Logix Office Tower, Noida, Uttar Pradesh 201301, India
Email: contact@devalay.org
We acknowledge complaints within 24 hours and resolve them within 15 days of receiving them.
18 · Contact Us
PMG Engineering Private Limited
1504, Logix Office Tower, Noida, Uttar Pradesh 201301, India