● GDPR & Privacy By Architecture

Privacy Policy

Effective Date: October 23, 2026 • Applies to the Svayam Android Application

At Svayam, privacy is not a marketing promise or an optional setting—it is the foundational architectural principle of the software. Svayam is engineered from the ground up as a 100% offline, local-first utility.

We do not operate backend user databases, telemetry ingestion pipelines, or external analytics endpoints. When you use Svayam, your thoughts, audio recordings, journals, and reflections never leave your physical device.

        🏛️ Summary of Core Privacy Commitments
        No Remote Processing: All AI inference (Google LiteRT, Whisper) runs strictly on your smartphone hardware.
No User Accounts: No signups, email registrations, or authentication servers.
Zero Telemetry: No analytics SDKs, trackers, or ad identifiers are bundled into the binary.
Encrypted Local Storage: All journal entries, semantic vector embeddings, and backups are stored locally in an encrypted sandbox.

      

1. Identity & Data Controller Contact

For the purposes of the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and applicable European data protection legislation, the responsible Data Controller is:

Software Developer: Gaurav Bobhate
Project: Svayam
Email: contact@svayam-ai.eu
Full Legal Disclosure: Detailed summons-capable address details are available in our Impressum.

Because Svayam operates without remote servers, we do not store, process, or have any technical access to your personal journal entries or identifiers.

2. Audio Data & Microphone Access (RECORD_AUDIO)

🎙️ Strict Microphone Access Mandate

Svayam requests Android's android.permission.RECORD_AUDIO permission solely and exclusively to provide an interactive, private voice journaling and dictation feature.

By technical architecture:

Strictly On-Device Transcription: Microphone audio is captured strictly when you tap the record button and streamed directly to a local, embedded Whisper speech-to-text neural network running in your device's memory.
Zero Cloud Transmission: Raw audio waveforms, voice samples, and transcriptions are never recorded remotely, uploaded to any cloud server, or transmitted over the internet under any circumstance.
Immediate Memory Ephemerality: Temporary audio buffers stored in RAM during active dictation are purged immediately upon conversion to text. No raw acoustic recordings are archived unless you specifically export an encrypted backup file to your own storage.
Zero Third-Party Sharing: Your voice data is never shared with third parties, AI aggregators, advertising brokers, or external APIs.

3. Device Permissions & Technical Usage

Svayam requests minimal Android system permissions, each tied strictly to offline functionality:

Permission	Technical Purpose	Network Transmission
`RECORD_AUDIO`	Enables local speech-to-text dictation via on-device Whisper models.	None (0 bytes) — Processed in local device RAM.
`USE_BIOMETRIC` / `USE_FINGERPRINT`	Enables optional App Lock authentication using Android KeyStore and system credentials.	None — Handled exclusively by Android hardware Keystore/TEE.
`INTERNET` (Restricted)	Used exclusively for user-initiated downloads of open-weights AI model files (e.g. Gemma, Whisper) from official Hugging Face repositories.	Zero user data upload — Outbound GET requests only for verified open model binaries.

4. Local Semantic Vector Memory & AI Processing

Svayam provides personalized contextual coaching and semantic timeline recall:

On-Device SQLite Vector Database: Your journal entries are embedded into numerical vectors using a local embedding model and stored in an embedded SQLite database (sqlite-vec).
Sandboxed Reasoning: When you converse with Svayam or query past experiences, context retrieval (RAG) and reasoning execute entirely via local LLM engines (Google LiteRT) on your phone's processor. No external OpenAI, Anthropic, or proprietary cloud APIs are ever contacted.

5. Data Security & Backup Encryption

Because your journal contains your most intimate reflections, data protection is enforced at the cryptographic level:

Device Sandboxing: App data is stored within Android's protected application sandbox, isolating it from other installed apps.
Export Vaults: When you generate a manual backup, data is packed into an encrypted container (.svym) using industry-standard AES-256 GCM encryption derived from a 128-bit key or passphrase created by you.
Zero-Knowledge Principle: The developers of Svayam hold no encryption keys or backdoor escrow mechanisms. If you lose your encryption key, data cannot be recovered.

6. Tracking, Analytics & Cookies

Svayam upholds a strict zero-telemetry policy:

The Android app contains no advertising SDKs, no analytics trackers (e.g. Google Analytics, Firebase Analytics, Flurry), and no crash-reporting telemetry tools (e.g. Sentry, Crashlytics).
This static website (hosted via Cloudflare Pages) does not set tracking cookies or perform behavioral profiling. Any standard HTTP web server access logs collected by Cloudflare for DDOS defense adhere strictly to European privacy standards and Cloudflare's GDPR Data Processing Addendum.

7. Your GDPR Rights

Under European data protection law (GDPR Articles 15-22), users possess fundamental rights regarding their personal data, including the right of access, rectification, erasure, restriction, and portability.

Because Svayam is a self-sovereign, local-first utility:

Right to Access & Portability: You have continuous, instantaneous access to your entire journal and can export it at any time from the app settings in standard formats or encrypted vaults.
Right to Erasure (Right to be Forgotten): You maintain complete physical authority over your data. Clearing app storage in Android Settings or uninstalling the app permanently purges all databases, embeddings, and settings from your device.

8. Policy Revisions & Updates

We may update this Privacy Policy from time to time to reflect functional improvements or legal amendments. Any revisions will be published immediately on this page with an updated effective date.

9. Questions & Inquiries

If you have any questions, suggestions, or concerns regarding privacy practices or technical data isolation in Svayam, please reach out directly:

Data Privacy Contact:
Email: contact@svayam-ai.eu
Web: https://svayam-ai.eu