PranLok

Spiritual Wellness Platform

Privacy Policy

At PranLok, operated by PranLok, Duplex No. 1, Sai Siddha Homes, In Front of Holy Cross School, Bairagarh Chichli, Kolar Road, Kolar, Bhopal – 462042, Madhya Pradesh, India(“PranLok,” “we,” “us,” or “our”), we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, and disclose your information when you use our platform — including the PranLok seeker app, healer app, and website.

By using the platform, you consent to the practices described in this policy. If you do not agree, please do not use the platform.

1. Information We Collect

1.1 Information You Provide Directly

  • Account registration: phone number, and optionally email address (for social login), name, and a photo.
  • Profile details: bio, gender, birth date, birth time, and birth place — used to generate your personalised Tattva (element) kundali and AI wellness insights.
  • Wellness data: health concerns, wellness goals, lifestyle preferences, dietary preferences, dosha, colour/taste preferences — used for personalisation and matching with appropriate healers.
  • Healer profile: qualifications, specialisations, experience, consultation fees, bank/UPI details for payouts, PAN details (for KYC), and KYC documents.
  • Shopping: shipping addresses, product orders, and order preferences.
  • Communications: messages exchanged with healers, AI healer chat inputs, call/chat session metadata, and any feedback you provide.
  • Payment initiation: payment method details (e.g. UPI ID) when you add funds — note that we do not store your full card number, UPI PIN, or bank password; this data is handled directly by our payment processor (Razorpay).

1.2 Information Collected Automatically

  • Device & app data: installed app version, device push notification tokens (Firebase Cloud Messaging and iOS VoIP tokens), and basic session metadata.
  • IP address: recorded at account registration as evidence of your acceptance of these Terms and this Privacy Policy (including the no-refund policy).
  • Usage data: call/chat session duration, billing records, order history, feature usage patterns, and WebSocket connection presence (online/offline status).
  • AI processing: your birth details, symptoms, and stated concerns are submitted to third-party AI providers to generate element kundali reports and AI chat responses.

2. How We Use Your Information

We use your information for the following purposes:

  • Service delivery: to create and manage your account, authenticate you, connect you with healers, process payments, generate kundali and AI wellness reports, deliver push notifications, and maintain the core platform functions.
  • Personalisation: to tailor healer recommendations, wellness content, and product suggestions based on your profile, preferences, and dosha.
  • Billing & payouts: to process session charges, maintain wallet balances, facilitate healer payouts, and generate transaction records.
  • Platform improvement: to analyse aggregated, anonymised usage data to improve our services, fix bugs, and develop new features.
  • Legal compliance: to comply with applicable laws, regulations, and legal processes (including tax, KYC, and intermediary obligations under the IT Act), and to enforce our Terms & Conditions.
  • Security: to detect and prevent fraud, abuse, and unauthorised access.

3. Third Parties Who Process Your Data

We share your information only with the following categories of service providers, and only to the extent necessary for them to perform their functions:

  • Payment processor: Razorpay — processes UPI, card, and net-banking payments. They receive payment amount and basic payer details but not your full profile.
  • Authentication provider: Firebase (Google) — used for social login (Google/Apple) and push notification delivery (FCM).
  • SMS provider: a third-party SMS gateway used to deliver OTP messages to your phone.
  • AI service providers: your birth details, symptoms, and wellness data are sent to third-party AI providers to generate kundali reports and AI healer chat responses.
  • Cloud infrastructure: Cloudflare R2 (media/file storage), Redis (session caching), and our MongoDB database hosting provider.

We do NOT sell, rent, or trade your personal information to any third party for their own marketing purposes.

4. Data Retention & Account Deletion

We retain your personal information for as long as your account is active or as needed to provide you with the platform services.

You may request account deletion at any time through the in-app profile screen or via our web page at /delete-account, using your registered phone number or email. When you submit a deletion request:

  • Your request is reviewed and must be approved by our team before it takes effect. Your account remains fully active and accessible until approval.
  • Once approved, your account is deactivated and all active sessions are revoked.
  • You have a 90-day grace period after approval during which you can restore your account by logging in with OTP on the same phone number. Within this period, your data remains intact.
  • After 90 days, your personally identifiable information (name, phone, email, photo, bio, birth details, preferences, push tokens) is permanently anonymised: phone and email are replaced with system identifiers, and all other personal fields are cleared. Your _id, role, wallet balances, and deletion timestamp are preserved for financial records.
  • Transaction records, call/chat billing data, order histories, and payout records are retained as required by applicable law (including tax and accounting regulations) even after account deletion.

5. Children's Privacy

PranLok is not directed at children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can remove it.

6. Data Security

  • All data in transit is protected by HTTPS/TLS encryption.
  • Passwords are hashed using bcrypt before storage — we never store plaintext passwords.
  • Sensitive fields (bank account numbers, PAN numbers) are encrypted at rest using AES encryption.
  • Access to personal data is restricted to authorised personnel and authenticated API calls protected by short-lived JWT access tokens.
  • We regularly review our security practices but no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Subject to applicable law, you have the right to:

  • Access: view the personal data we hold about you via your in-app profile and the GET /api/users/me endpoint.
  • Correct: update your profile information through the in-app edit profile screen.
  • Delete: delete your account as described in Section 4 above.
  • Withdraw consent: stop using the platform and delete your account. For push notifications, you may disable them in your device settings.

To exercise these rights, use the in-app flows or contact us at support@pranyog.in.

8. International Data Transfers

Our servers and third-party service providers may be located outside India. By using the platform, you consent to the transfer of your information to servers outside your country of residence. We take appropriate safeguards to ensure your data remains protected in accordance with this policy and applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email (if available). The “last updated” date at the bottom of this page indicates the most recent revision. Your continued use of the platform after changes take effect constitutes your acceptance of the revised policy.

10. Grievance Officer

In compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, any grievances or concerns regarding your personal data may be addressed to:

  • Name: Yogendra Mishra
  • Email: yogendramishra999@gmail.com
  • Phone: +91 89891 18118
  • Address:Duplex No. 1, Sai Siddha Homes, In Front of Holy Cross School, Bairagarh Chichli, Kolar Road, Kolar, Bhopal – 462042, Madhya Pradesh, India

11. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us at support@pranyog.in.