Privacy Policy

This Privacy Policy ("Policy") explains how Lyfebynary 0103 LLP ("A Wise Home", "AWH", "we", "us", "our") collects, uses, shares, stores, and protects personal data when you use our websites and mobile applications under the brand A Wise Home (collectively, the "Platform").

We are committed to protecting your privacy and processing your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian laws.

By using the Platform, you acknowledge that you have read, understood and agree to this Policy.

For the purposes of the DPDP Act:

This Policy applies to:

• Personal data collected in digital form, or
• Personal data collected in non-digital form and later digitised,

through:

• Websites: www.awisehome.app, www.houzeguru.com, www.lyfebynary.com
• Mobile applications: A Wise Home (Android and iOS)

This Policy does not apply to:

• Anonymised or aggregated data that cannot reasonably identify you
• Non-personal data

"Personal Data" means any data about an individual who is identifiable by or in relation to such data.

"Data Principal" means the individual to whom the personal data relates.

"Processing" means any operation performed on personal data, including collection, storage, use, sharing, or deletion.

We collect following personal data only where necessary for providing our services.

5.1 Information You Provide Directly

This includes:

Profile and account details

• Name, Email address, phone number
• Date of birth, gender, address and photograph (Optional)
• Similar details of family members added by you (Optional)

Household and service information (optional — added by you)

• Names and salaries of domestic staff
• Household assets (vehicles, appliances, etc.)

Financial and transactional data (optional — added by you)

• Bills, receipts, spending records
• Bank, card, investment, retirement and tax documents

Uploaded documents (optional — added by you)

• Identity documents (Aadhaar, PAN, passport, driving licence, voter ID, ration card)
• Property, insurance, medical, career, income-tax and investment documents

How we treat the three categories above

Household and service information, financial and transactional data, and uploaded documents are entirely optional. The app does not require them to work, and we never ask you for a particular document. You add them only if you want A Wise Home to keep them for you.

• They stay encrypted. Anything you upload is stored encrypted in your account. Our team does not open, read or review it, and we do not use its contents for any purpose of our own — no analytics, no profiling, no advertising, and no training of any AI model.
• AI runs only at the moment you ask. If you ask the AI Assistant about a document, the text needed to answer is processed at runtime and is not retained on the AI inference servers afterwards. Section 10 sets out exactly what is sent.
• What we hold besides the file. Apart from the encrypted file itself, we hold only its metadata — file name, type, size, upload date, and any category or tag you assign. This is what lets the app list and organise your documents for you.
• You stay in control. You can delete any document at any time. Deleting your account removes them as set out in Annexure A.

Communications

• Messages with customer support
• Feedback, surveys, complaints
• Information shared during legal or regulatory interactions

Providing this data is voluntary. The core household-management features work without it; certain optional features will not work unless you add the relevant information.

5.2 Information Generated Through Your Use of the Platform

We collect data relating to your usage, including:

• Clicks, searches, views, and actions
• Features used and content created (to-do lists, calendars, uploads)
• Time, frequency, and duration of use
• AI Assistant questions and, where you use voice input, voice transcripts
• Mentions by other users (where applicable)

5.3 Device and Technical Information

This may include:

• Device identifiers (IP address, UUID)
• Operating system, browser, network information
• Location data (where permitted)
• App foreground/background activity
• Error logs, performance data
• Metadata associated with uploaded content

5.4 Information from Third Parties

We may receive personal data from:

• Authentication providers (e.g. Google / Apple login)
• Payment service providers
• Analytics and infrastructure partners
• Public databases or lawful sources

Such data is processed only where legally permitted.

We process personal data only for the following purposes:

6.1 Providing Our Services

• Creating and managing your account
• Enabling household management features
• Facilitating transactions and bill payments
• Connecting you with partner services (with consent)

6.2 Improving and Securing the Platform

• Feature development and testing
• Analytics and usage insights
• Security monitoring and fraud prevention
• Internal research and system improvements

6.3 Communication

• Service updates and notifications
• Customer support and grievance handling
• Feedback and surveys
• Transaction confirmations and OTPs

6.4 Legal and Regulatory Compliance

• Compliance with laws and court orders
• Audits, investigations, and regulatory requests
• Enforcement of legal rights

6.5 Other Purposes

• Any other purpose for which you provide specific consent

6.6 AI-Assisted Features

• Answering your questions through the AI Assistant, as described in Section 10

We process personal data:

• Primarily based on your consent, obtained through clear affirmative actions within the Platform, or
• Without consent, where permitted under the DPDP Act, such as for legal compliance or contractual necessity

The AI Assistant relies on separate, specific opt-in consent, in addition to your general consent. See Section 10.

You may withdraw your consent at any time as described below.

You may withdraw your consent by:

• Accessing Privacy and Permissions Settings within the A Wise Home app, or
• Writing to us at info@awisehome.app

Upon withdrawal, we will stop processing the relevant personal data unless retention is required by law.

We do not sell your personal data.

We may share personal data with:

9.1 Group Entities

For internal operations and service delivery, on a need-to-know basis.

9.2 Service Providers and Partners

Including:

• Cloud hosting providers
• Payment processors
• Analytics and security vendors
• Customer support and infrastructure providers
• AI service providers (see Section 10)

All such entities are contractually required to protect your data.

9.3 Legal and Emergency Situations

Where required by law, court order, or to respond to medical emergencies threatening life or health.

9.4 Public Disclosure by You

Where you voluntarily make information public through the Platform.

A Wise Home offers an AI Assistant that answers questions about your household. This section explains how it handles your data.

10.1 Scanning happens on your device

Document and receipt scanning runs on your own device, using an on-device model. The scanning itself never sends your document to an external AI service.

10.2 Cloud AI service providers

The AI Assistant is served by two enterprise AI services. A request is routed to one or the other, via an encrypted channel, depending on their availability and the kind of request:

• Amazon Bedrock (Amazon Web Services), in the United States or India wherein your data is processed on AWS infrastructure.
• Google Gemini API (Google LLC), paid tier, in the United States.

Both act as our Data Processors under written contracts, as required by Section 8(2) of the Digital Personal Data Protection Act, 2023. A Wise Home remains the Data Fiduciary and remains accountable to you for how your personal data is handled.

10.3 Why data is sent

Data is sent only to answer your request. It is never used for advertising, for profiling, or for any purpose you have not asked for.

10.4 How it is protected

• Every request is encrypted in transit over TLS.
• Neither provider uses your data to train or improve their AI models.
• Amazon Bedrock: your request is processed strictly at runtime and is not retained on the inference servers. It is not stored and is not shared with third parties.
• Google Gemini API: Google does not use your prompts or responses to improve its products. It does keep limited logs of AI requests for a short period, solely to detect misuse of the service, as its terms require.
• We do not store your conversations. AI Assistant conversations exist only for the duration of your session and are never written to our servers.
• AI inference takes place in the United States. Your stored data stays in India — see Section 18.

10.5 What is sent

When you use the AI Assistant, the following may be sent to one of the providers above:

• your question, and a voice transcript where you use voice input;
• the household context needed to answer you — for example a task title, a category, or a family member's nickname;
• text from a document, where you ask the Assistant about a document you have scanned or uploaded.

Where document text is sent, it is sent in full and unedited, via an encrypted channel, in machine readable format.

10.6 Your consent and your control

• The AI Assistant is opt-in. Before anything is sent to an AI service provider, you are shown an in-app disclosure and must give your explicit consent.
• You may withdraw that consent at any time: Settings → Privacy and Permissions → AI Features, or by writing to info@awisehome.app.
• If you decline, or later withdraw, the AI Assistant stops working. Every other part of A Wise Home continues to work normally.

10.7 The limits of AI output

AI-generated answers can be incomplete or wrong. They are not financial, legal, tax, medical or professional advice — always rely on the original document. We do not use AI to make automated decisions about you that carry legal or similarly significant consequences.

We use cookies, SDKs, and similar technologies to:

• Enable core functionality
• Remember preferences
• Analyse usage and improve services

We use third-party analytics cookies and SDKs (Firebase Analytics, PostHog and AppsFlyer). We do not use advertising cookies and we do not permit third parties to use cookies on the Platform for advertising.

You may manage cookies through browser or device settings.

We retain personal data only as long as necessary for the purposes stated above.

Indicative retention periods: Refer Annexure A: Data Retention Schedule

Where deletion is requested, data may be retained for longer period if required for legal or safety reasons.

We implement reasonable technical and organisational safeguards to protect personal data, including:

• Encryption of data at rest, and encryption in transit over TLS
• Access controls
• Monitoring and incident response procedures

In the event of a personal data breach, we will:

• Notify the Data Protection Board of India, where required
• Inform affected Data Principals, as applicable

• Account holders must be 18 years of age or above. An account may be created for a child only by a parent or guardian, with verifiable consent
• Personal data of children is processed only with verifiable parental or guardian consent
• We do not engage in targeted advertising or profiling of children

You may:

• Request access to a summary of your personal data
• Request correction or updating of inaccurate data
• Request erasure of personal data
• Withdraw consent
• Nominate another person to exercise your rights in case of death or incapacity

Requests can be made through info@awisehome.app

If you are not satisfied with our response, you may have the right to escalate the matter to the Data Protection Board of India in accordance with applicable law.

Your data is stored in India. Your account records, uploaded documents and backups are hosted in AWS Mumbai and remain in India at all times.

Storage region: AWS Mumbai (ap-south-1)

AI inference is the one exception. The AI models we use are not offered in the Mumbai region. When you use an AI-assisted feature, only the data needed to answer that specific request leaves India, and only for as long as the request takes to process:

• Amazon Bedrock (United States) — used for AI inference. The request is transmitted over an encrypted TLS connection, processed strictly at runtime, and is not retained on those inference servers. It is not used to train any model and is not shared with third parties.
• Google Gemini API (paid tier), United States — The request is transmitted over an encrypted TLS connection. Google does not use your prompts or responses to improve its products; it retains limited logs for a short period solely to detect misuse of the service, as required by its terms.

No copy of your stored data — documents, account records or backups — is kept outside India. These transfers are made under written data-processing contracts and are permitted under Section 16 of the DPDP Act, 2023.

We may update this Policy from time to time. Material changes will be communicated through the Platform. Continued use of the Platform constitutes acceptance of the updated Policy.

A Wise Home | DPDP Act, 2023

Technical Architecture (for transparency)

Our technical architecture, for transparency:

• Auth: Firebase Authentication
• App DB: Firebase Firestore / Realtime DB
• Files & documents: AWS S3 (private buckets)
• Payments: Razorpay / Stripe-like PSP
• Analytics: Firebase Analytics + PostHog + AppsFlyer
• AI inference: Amazon Bedrock (Gemma, United States) and Google Gemini API, paid tier (United States); on-device model for document scanning
• Logs & monitoring: AWS CloudWatch
• Backups: Automated daily backups (30–90 day lifecycle)

1. General Retention Rules (Applied Globally)

• Active users: Data retained while account is active
• Account deletion:
  • Soft delete → 30 days
  • Hard delete → after 30 days
• Backups: Overwritten within 90 days
• Anonymised analytics: Retained indefinitely

2. Data Retention Table

Scroll the table sideways to see all columns.

3. Cross-Border Data Storage

Safeguard: No storage in restricted jurisdictions

4. Exceptional Retention (Overrides)

Data may be retained beyond stated periods if required for:

• Legal proceedings
• Regulatory investigation
• Fraud / abuse investigation
• Enforcement of contractual rights

Such data is:

• Access-restricted
• Logged
• Reviewed periodically

5. Deletion & Anonymisation Workflow (Operational)

1. User triggers Delete Account
2. Account enters 30-day cooling-off
3. After 30 days:
   • Firestore records deleted
   • S3 objects permanently removed
   • Auth account destroyed
   • Backups overwritten within 90 days
   • Analytics anonymised

6. Review Cycle

• Reviewed annually
• Updated on:
  • Feature changes
  • Infrastructure changes
  • DPBI guidance