Privacy Policy

About this policy and what KaryaYogi is

KaryaYogi is a private planning and productivity app run by the KaryaYogi team. It gives officers of the Government of India a set of 74 tools to plan, draft and organise their own work. This Privacy Policy explains what data the app handles, what it deliberately does not handle, and the rights you have over your information.

Please read this alongside one plain fact: KaryaYogi is not an official government application and is not a system of record. It does not connect to, replace, or feed into eOffice, HRMS, APAR, pay systems, sanction files, GeM, GFR, CGHS, DoPT portals, or any other authorised government system. Every tool produces private drafts, notes and estimates for your own use. Nothing you do in the app is submitted or filed officially anywhere.

In the language of India's Digital Personal Data Protection Act, 2023 (DPDP Act), KaryaYogi acts as the Data Fiduciary for any personal data it processes, and you are the Data Principal. This policy describes how we meet the obligations that role carries.

Our core approach: your data stays on your device

KaryaYogi is offline-first by design. The tools are built to run entirely on your phone. You can remove your SIM, switch off mobile data, and keep using every tool. The notes, tasks, drafts, plans and estimates you create are stored locally on your device, inside an encrypted vault.

Because the work happens on-device, we do not need to see your content to make the app work. In the default state, with optional cloud sync switched off, your KaryaYogi data does not leave your phone and is not sent to us or to anyone else.

You do not need an account to use the app. You can install KaryaYogi and use all 74 tools without registering, without giving us an email address, and without signing in.

What data we process, and only when

We keep the personal data we handle to the minimum needed for the feature you choose to switch on:

• Nothing required to use the app. Using the tools locally involves no account and no data sent to us.
• Your account email — only if you choose optional sync or the web portal. To sync your data across devices or use the web workspace at my.karyayogi.in, you create an account. For that we process the email address you register with, so we can identify your account and sign you in.
• An encrypted sync blob — only if sync is on. When sync is enabled, your KaryaYogi data is packaged as an encrypted blob and stored on our servers, keyed to your account. It travels and rests encrypted. Sync and the web portal are part of the optional paid plan; the app and all 74 tools remain free.

That is the whole list of personal data we may hold: your account email, and an encrypted copy of your own data if you asked us to sync it. If you never turn on sync or create an account, we hold neither.

What we never collect

Some categories of data KaryaYogi simply does not gather. We do not:

• show advertising or embed advertising trackers;
• use third-party analytics or behaviour-tracking SDKs to profile how you use the app;
• sell, rent or trade your personal data to anyone, ever;
• read your on-device content when sync is off — your notes and drafts stay on your phone;
• require access to your contacts, call logs, messages or location to run the tools.

We also do not collect data from any official government system on your behalf. KaryaYogi has no access to your service records, and it does not pull from or write to any authorised system of record.

Cookies and analytics

The Android app does not use advertising cookies or third-party analytics trackers. There is no ad network and no behavioural profiling inside the app.

The web workspace at my.karyayogi.in uses only the strictly necessary cookies required to keep you signed in and keep your session secure. These are not used to track you across other websites and are not shared with advertisers.

Children

KaryaYogi is built for serving officers of the Government of India and is not directed at children. We do not knowingly create accounts for, or knowingly process the personal data of, children.

If you believe an account has been created in a way that involves a child's data, please write to us at support@karyayogi.in and we will look into it and take appropriate action.

How long we keep your data (retention)

On-device data stays on your device for as long as you keep it there. You control it: you can edit or delete individual items, and the app's Emergency Reset wipes all local KaryaYogi data from the device.

If you use sync, we retain your encrypted sync blob and your account email for as long as your account is active. If you turn sync off, delete your account, or ask us to erase your synced data, we delete the encrypted blob from our systems, subject only to any short technical retention needed for secure backups and any records the law requires us to keep. You can delete your account yourself, instantly, from the self-service account deletion page.

Because you hold the keys to your own copy, a one-tap encrypted local backup lets you produce a backup file that you keep and control, independent of us.

How we protect your data (security)

Security is built into how the app stores and moves data:

• AES-256 encrypted local vault — your on-device data is stored encrypted on the phone.
• App lock — you can lock KaryaYogi behind your device biometric or a PIN.
• Encrypted sync — if you enable sync, your data is encrypted and the synced copy is hosted in India, keyed to your account.
• Encrypted local backup — the backup file you export is encrypted and stays in your control.
• Emergency Reset — a single action wipes all local KaryaYogi data from the device.

No system can promise perfect security, but we design KaryaYogi so that the sensitive work stays on your device by default and anything synced is encrypted. If you ever suspect a security problem, write to support@karyayogi.in.

Your rights under the DPDP Act

As a Data Principal under the DPDP Act, 2023, you have clear rights over the personal data we hold about you. In plain terms, you may:

• Access — ask what personal data of yours we process and get a summary of it;
• Correct and update — ask us to correct or complete inaccurate or incomplete data, such as your account email;
• Erase — ask us to delete your personal data, including your synced blob, where we are no longer required to keep it — or do it yourself, instantly, on the account deletion page;
• Withdraw consent — turn off sync or close your account at any time, as easily as you switched it on;
• Grievance redressal — raise a complaint about how your data is handled and have it addressed;
• Nominate — nominate another person to exercise your rights in the event of your death or incapacity, as the Act allows.

To exercise any of these, write to us using the contacts below. We will verify your request and respond within the timelines expected under Indian law. If you are not satisfied with how we handle your grievance, the DPDP framework allows you to escalate to the Data Protection Board of India.

Changes to this policy

We may update this Privacy Policy as the app develops or as the law changes. When we make a material change, we will update the policy on this page and, where appropriate, notify you in the app or via your registered email.

We encourage you to review this page from time to time so you always know how your data is handled.

How to contact us

You can reach us at:

• Privacy questions and data-rights requests: support@karyayogi.in
• Grievances and complaints: support@karyayogi.in
• Security concerns: support@karyayogi.in

KaryaYogi is published by KaryaYogi. If you need a postal address or the name of the officer responsible for handling your request, that is available on request via the email addresses above.