Privacy Policy

Udyra is an AI Operating System built and operated by:

Aryan Kushwaha
Uttar Pradesh, India
Email: udyra590@gmail.com
Website: https://udyra.in

We collect the following categories of information:

2.1 Account Information

When you register, we collect:

• Full name
• Email address
• Profile picture (if provided via Google OAuth)
• Identity type (Founder / Researcher / Creator / Strategist)
• Your first goal (collected during onboarding)
• Account creation date and last login

2.2 Life OS Data (User-Generated Content)

When you use the Life OS surface, we collect and store:

• Goals — your short-term, quarterly, and annual goals
• Decisions — decision logs including context, options, outcomes
• Journal entries — private text entries written in the Journal surface
• Timeline events — milestones, events, and personal markers
• People — names, roles, relationship context, and notes you add
• Knowledge notes — saved bookmarks, ideas, concepts, and notes
• Mood entries — emoji-based mood logs tied to journal entries

This data is stored in your private Udyra account and is not shared with other users or third parties except as described in this policy.

2.3 AI Conversation Data

When you use the Think (Chat), Expose, or Agent surfaces:

• Prompts and messages you send
• AI responses generated
• Agent configurations and run logs
• Tool audit requests (Expose sessions)

Conversation data may be processed by third-party AI providers (currently Anthropic) to generate responses. See Section 5 for details.

2.4 Usage Data

We automatically collect:

• Pages visited and features used
• Time spent on each surface
• Device type, browser, and operating system
• IP address and approximate location (city/region level)
• Session duration and frequency

2.5 Payment Data

• Payments are processed by Razorpay (India)
• Udyra does NOT store your full card number, CVV, or banking credentials
• We store: plan type, subscription status, transaction ID, and billing date
• Razorpay's privacy policy applies: razorpay.com/privacy

2.6 Authentication Data

• If you sign in with Google, we receive your name, email, and profile picture from Google
• We do not receive or store your Google password
• If you use email magic link, we store your email and session token

3.1 Provide the Service

• Create and manage your account
• Store and retrieve your Life OS data across sessions
• Generate AI responses using your context (goals, decisions, past conversations)
• Run Agent automations you have configured
• Process your subscription and manage plan access

3.2 Improve the Platform

• Analyze aggregate usage patterns to improve features
• Identify and fix bugs and performance issues
• Develop new surfaces and capabilities

3.3 Communicate with You

• Send account-related emails (welcome, password reset, billing receipts)
• Notify you of important changes to the platform or this policy
• Respond to your support requests

3.4 Legal and Safety

• Comply with applicable Indian laws and regulations
• Detect and prevent fraud, abuse, or unauthorized access
• Respond to lawful government requests

We do NOT use your data to:

• Sell your personal information to advertisers
• Display advertisements within the platform
• Train AI models on your private journal entries or decisions without your explicit consent

4.1 Where Your Data is Stored

Your data is stored on Supabase infrastructure. Supabase uses AWS data centers. By default, data may be stored on servers outside India. We are actively working to enable India-region data residency for PRO plan users.

4.2 Security Measures

• HTTPS encryption for all data in transit (TLS 1.2+)
• Row-level security (RLS) on all Supabase database tables
• Supabase Auth for secure session management
• No plain-text password storage (passwords are hashed by Supabase Auth)
• Regular security reviews of database access policies

4.3 Data Retention

• Active account data: retained as long as your account exists
• Deleted account data: permanently deleted within 30 days of account deletion
• AI conversation logs: retained for 90 days, then auto-deleted
• Payment records: retained for 7 years as required by Indian tax law (GST Act)

4.4 No Absolute Security Guarantee

No method of internet transmission or electronic storage is 100% secure. While we implement strong security measures, we cannot guarantee absolute security of your data.

Udyra uses the following third-party services. Each has its own privacy policy:

Important — Anthropic/Claude API: When you send a message in the Think, Expose, or Agent surfaces, your prompt is sent to the Anthropic API to generate a response. Anthropic's data use policies (as of the effective date of this policy) state that API inputs are not used to train Anthropic's models by default. However, please refer to Anthropic's current privacy policy for the most accurate information.

6.1 Right to Access

You may request a copy of all personal data we hold about you by emailing udyra590@gmail.com with subject: "Data Access Request — [your email]". We will respond within 30 days.

6.2 Right to Correction

You may update your name, email, and profile directly in your account settings. For other corrections, email us.

6.3 Right to Deletion

You may delete your account at any time from your account settings. Account deletion permanently removes:

• Your profile and account information
• All Life OS data (goals, decisions, journal, people, knowledge)
• AI conversation history
• Agent configurations

Payment records are retained for 7 years as required by law.

6.4 Right to Data Portability

You may request an export of your Life OS data (JSON format) by emailing udyra590@gmail.com. We will provide this within 30 days.

6.5 Right to Withdraw Consent

You may stop using Udyra at any time and delete your account. For AI processing opt-out requests, contact us.

6.6 For Indian Users — IT Act 2000

Udyra complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

Udyra uses:

• Session cookies — to keep you logged in (essential, cannot be disabled)
• Preference cookies — to remember your theme and surface preferences
• Analytics cookies — to understand usage patterns (can be disabled)

You may disable non-essential cookies in your browser settings. Disabling session cookies will prevent you from staying logged in.

Udyra is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us immediately at udyra590@gmail.com and we will delete the account.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to registered users
• Show an in-app banner for 7 days after the update

Continued use of Udyra after changes constitutes acceptance of the updated policy.

For privacy-related questions, requests, or complaints:

Email: udyra590@gmail.com
Subject line: "Privacy — [your request]"
Response time: Within 5 business days

Mailing Address:
Aryan Kushwaha
Udyra
Uttar Pradesh, India