Last updated: September 25, 2026
Bhakti Club ("we", "our", or "us") is operated by Honest Way Healthy Living Private Limited, the entity responsible for your personal data under this Privacy Policy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use the Bhakti Club mobile application, currently available in India on Android. The app's features are updated frequently — this policy is written to apply to the app as a whole, not to any specific feature, so it stays accurate as features are added, changed, or removed.
1. Information We Collect
- Phone Number: Collected for account sign-in. OTP verification is handled by Firebase Authentication (Google) — your phone number is shared with Firebase solely to send and verify the OTP. Apart from Firebase and disclosures required by law (see Section 4), we do not share your phone number with third parties for independent marketing or commercial purposes.
- Usage & Interaction Data: We collect data about how you interact with the app (e.g., which wallpapers, mantras, or features you use) linked to your account, so we can improve the app and personalise what's shown to you. This data is processed on our own servers, not sent to any third-party analytics vendor.
- Favourites & Preferences: Content you mark as a favourite is stored on our servers linked to your account.
- Device & Technical Data: Basic technical data (OS version, device type, app version, IP address, timestamps) for security, compatibility, and troubleshooting.
- Payment Information: When you subscribe, payments are processed by Razorpay, our third-party payment processor, under Razorpay's own Terms and Privacy Policy. We do not receive or store your card, UPI, or bank details — we only receive confirmation of payment status, the plan purchased, and related order/transaction identifiers.
- Push Notification Token: If you enable notifications, a device token is registered with Firebase Cloud Messaging (Google) so we can deliver optional spiritual notifications you've opted into.
- App Events (Meta): We use Meta's App Events SDK to measure how well our app listing and promotions are working. This automatically shares the following with Meta (Facebook): your Android Advertising ID (where available), basic device information (model, OS version), IP address, app version, and event data — including standard events like app installs/opens, and the specific events we log such as registration completed and purchase amount/currency, each with a timestamp. You can reset or delete your Android Advertising ID at any time from your device's Google Settings > Ads, which limits what Meta can associate with your device going forward.
- Other Permissions: Any additional device permission is requested only at the time it's needed for a specific feature, and only with your explicit consent. You can decline, or revoke it later from Android Settings, without losing access to the rest of the app.
- Photographs You Choose to Upload: Some optional features let you upload a photograph of yourself — a profile picture, and the devotional photo features that create personalised images of you. These photographs usually show your face. You choose whether to upload one; the rest of the app works normally if you never do. You may remove or replace an uploaded photograph at any time from within the app, and deleting your account deletes them.
- Images Created From Your Photograph: When you use a feature that creates personalised devotional images, your photograph is sent to an AI image-generation service (see Section 4) which produces new images of you in devotional settings. We store both your original photograph and the generated images so the feature keeps working without asking you to upload again. These are stored privately and are not visible to other users.
- Sensitive Data: We do not collect health data, precise location, contacts, SMS, or microphone content. We do not use facial recognition: we do not create a faceprint or other biometric template from your photograph, we do not use it to identify or verify who you are, we do not match it against any other person's image or against any database, and we do not use it for surveillance or age estimation. Your photograph is used only to create the images you asked for. If a future feature requires health, biometric, precise-location, contacts, SMS, or microphone data, we will update this policy and ask for your consent before collecting it.
2. How We Use Your Information
- To authenticate you and maintain your account.
- To save and sync your favourites across sessions.
- To send optional daily spiritual notifications (only if you opt in).
- To improve app performance, fix bugs, and personalise content and recommendations based on your usage.
- To detect misuse of subscriptions, such as an account being shared across multiple devices or users — using signals like device identifiers, session, and login data — so we can protect the integrity of our service.
- To create the personalised devotional images you request from a photograph you upload, and to display them back to you inside the app.
- To check the quality of the personalised images our systems produce. A small number of authorised staff may view uploaded photographs and generated images for this purpose, under confidentiality obligations, and only to keep the feature working correctly — never to browse or share them.
- To measure the effectiveness of our marketing, via Meta's App Events SDK as described above.
- We may show different users different prices, plans, or feature variations as part of ongoing testing and improvement; the data-processing aspects of this are covered here, and the commercial terms are covered in our Terms of Use.
3. Basis and Purpose of Processing
Photographs are processed only with your consent. Uploading a photograph is entirely optional and is never required to use Bhakti Club, to hold an account, or to buy a subscription. You give consent by choosing to upload; you can withdraw it at any time by removing the photograph in the app or by deleting your account, and we will delete the photograph and the images generated from it as described in Section 7.
We process personal data only for lawful purposes: where you have given consent (e.g. notifications, optional permissions, marketing measurement); where processing is necessary to provide a service you requested (e.g. authentication, subscriptions); for certain permitted uses such as keeping the service secure and preventing fraud or subscription abuse; and where required by applicable law. Where processing relies on your consent, you may withdraw it at any time as described in Section 8 — this does not affect processing already carried out before withdrawal.
4. Third-Party Service Providers
We share data with the following categories of service providers, only as needed for them to perform their function, and subject to their own privacy policies:
- Google / Firebase — authentication (OTP) and push notification delivery.
- Razorpay — payment processing for subscriptions.
- Meta (Facebook) — marketing and app-install measurement via App Events.
- Google Cloud Platform — hosting and infrastructure for our backend and database.
- AI image-generation providers (currently Google, via the Gemini API) — if, and only if, you use a feature that creates personalised images, the photograph you uploaded is sent to this provider so it can generate those images. It is sent for that purpose alone. We do not send your name, phone number, email, or any other account identifier with it. The provider processes it under its own terms and privacy policy. We may change or add providers; if we do, this section will be updated.
We do not sell, trade, or rent your personal information. We may also disclose information where required by law, court order, or a government/regulatory authority, or where necessary to protect our rights, users, or the public, and to investigate fraud or abuse. If Bhakti Club is involved in a merger, acquisition, financing, or sale of all or part of the business, your information may be transferred as part of that transaction, subject to this policy or its successor.
5. International Data Transfers
Our primary infrastructure runs in India (Google Cloud Platform, asia-south1). However, some of our service providers (Firebase, Razorpay, Meta, and our AI image-generation provider) may process or store data on servers located outside India as part of their global infrastructure. Where this happens, we take reasonable steps to work with service providers that maintain appropriate data-protection and security safeguards, subject to applicable Indian law.
6. Data Storage & Security
Photographs you upload for the personalised-image features, and the images generated from them, are stored in private storage that is closed to public access. They are not published, not listed in any public index, and are not reachable by a permanent link. When the app needs to show them to you, it uses a temporary link that expires after a short period, so access is re-checked each time rather than granted permanently to anyone holding a URL. Other users of Bhakti Club cannot see them.
Your data is stored on Google Cloud Platform servers (asia-south1 region). We use industry-standard measures — encryption in transit (TLS) and at rest, and OWASP-aligned security practices — to protect it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your data and will act promptly and notify you where required by law if a breach materially affects you.
7. Data Retention
We keep an uploaded photograph, and the images generated from it, for as long as you keep the feature in use — because they are what the feature reuses each time. If you remove or replace a photograph, we delete the previous one and the images generated from it. If you delete your account, both are deleted along with the rest of your account data. Deleted files may persist briefly in encrypted backups until those backups naturally roll off our standard cycle.
We retain your account data for as long as your account is active. Active account data is normally deleted or de-identified promptly after we complete a deletion request, except where we're required or permitted to retain limited records — such as transaction/payment records, fraud-prevention logs, or records needed to comply with tax, accounting, or legal obligations. Usage and interaction logs are retained for up to 12 months. Deleted data may also persist briefly in encrypted backups until they naturally roll off our standard backup cycle. Please keep the information associated with your account accurate and up to date.
Trial eligibility. Introductory trials are offered once per phone number. If you have used a trial and later delete your account, we retain a one-way hashed identifier derived from your phone number — not the number itself — solely to prevent the same trial from being claimed again. It is not linked to your name, profile, or any other account data, and it is not used for any other purpose.
8. Your Rights & Account Deletion
You have the right to access, correct, delete your personal data, and withdraw consent you've previously given (e.g. for notifications, optional permissions, or an uploaded photograph) at any time. You can remove an uploaded photograph directly in the app without deleting your account, and doing so also deletes the images generated from it. You may also exercise any additional rights available to you under applicable Indian data-protection law, including rights relating to grievance redressal and nomination, where applicable. You can delete your account directly within the Bhakti Club app (Settings > Delete Account) or via our Account Deletion page on the web. Deleting your account stops all future renewals of your subscription; we will not charge you again after deletion. The UPI AutoPay mandate may still appear in your UPI app until it expires, and you can revoke it there at any time. When you delete your account we erase your personal data; a de-identified record of your usage and subscription, with no name, phone number or photograph attached, is kept under an anonymous account number so that our business and accounting records remain accurate. For any other request, contact us at nandeeswar@neuralhex.com — we will respond within the period required by applicable law and aim to address requests promptly, and may ask you to verify your identity first.
9. Grievance Officer
In accordance with Indian law, including the Digital Personal Data Protection Act, 2023, you may raise any grievance about how your personal data is handled with our designated grievance contact:
Designated Grievance Contact, Honest Way Healthy Living Private Limited
Registered Office: 7-33/1 Sai Prabhat Nagar, Khammam, Telangana, India
Email: nandeeswar@neuralhex.com
10. Children's Privacy
Bhakti Club is intended for adults aged 18 and above and is not directed to children. A child may access devotional content only under the supervision of a parent or guardian, using an account the parent or guardian created and manages, and must not independently create an account or purchase a subscription. We do not knowingly collect personal data directly from a child through an account they created themselves. If you believe a child has created an account or provided us personal data independently, please contact us at nandeeswar@neuralhex.com and we will take steps to delete it.
11. Third-Party Links & Content
The app may contain links to external websites or content we don't operate. We aren't responsible for the privacy practices of any third-party site you visit through such links, and this policy does not cover them.
12. Cookies & Tracking
The Bhakti Club app does not use cookies. If you access any web pages linked from the app, standard browser cookies may apply.
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via the app or email. Continued use of Bhakti Club after changes constitutes acceptance of the updated policy.
14. Contact Us
Questions about this Privacy Policy? Reach us at our contact page or email nandeeswar@neuralhex.com.