RiloyaDraft for owner and lawyer review. Fill every
[BRACKETED]placeholder before publishing. Not legal advice.
Last updated: 19 October 2026
Applies to: the Riloya apps on Android, iPhone, Mac and Windows, the Riloya Chrome extension, and this website.
Who we are
Riloya is operated by Riloya, India, India ("Riloya", "we", "us"). Under the Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary for the personal data described here.
The short version
- What you save is yours. We do not sell it and never use the content of your memories for advertising.
- Free plan: your photos, voice notes and files stay on your phone only. Titles, tags and keyword search are created on your device. Free users see ads (Google AdMob).
- Pro plan: your media is backed up to the cloud and synced across your devices, and there are no ads.
- Our AI features send the specific text you ask about to an AI processor to produce an answer. This is a product feature that you control.
- You can export everything, or delete your account and its data, from inside the app at any time.
What we collect, and why
| Data | Why | Basis (DPDP Act) |
|---|---|---|
| Account details: email, name, sign-in method (email, Google or Apple) | To create your account and sign you in | Consent; necessary for the service |
| Memories you save: notes, links, text, and (Pro only) photos, voice notes, documents | To store and find your memories | Consent |
| Details derived from your memories: titles, tags, summaries, transcripts, text read from images, search vectors | To make memories searchable and answer your questions | Consent |
| Reminders and automations; precise location only if you create a place-based reminder | To remind you at the right time or place | Consent (withdraw in phone settings) |
| Connected Google Drive or Gmail, only if you connect them — metadata only (title, sender, date, link) and a sealed access token | So your files appear in search | Consent; disconnect anytime |
| Device info: notification token, time zone, language | To deliver notifications | Legitimate use |
| Advertising identifiers (free plan only), collected by Google AdMob | To show and measure ads | Consent where required; you can reset or limit ad tracking in your phone settings |
| Payment records: plan, amount, transaction reference | To give you the plan you paid for; legal records | Contract; legal obligation |
| Referral information and, for physical gifts, delivery details | To run Refer & Earn | Consent |
| Support requests and reports | To help you and keep the service safe | Consent; legitimate use |
| Product analytics (event names and counts, never memory content or search text) and crash reports | To improve and fix the app | Legitimate use |
We do not collect your contacts, the text of your searches into analytics, or your location except for place reminders you create.
Where your data is stored
- Free plan — on your device. Photos, voice notes and files you save stay in your phone's app storage. They are not uploaded to our servers, are not synced to other devices, and will be lost if you lose your phone, reset it or uninstall the app. Text memories and account data are stored in our cloud database so your account works.
- Pro plan — cloud backup. Your media is uploaded to our cloud storage (Google Firebase / Google Cloud, primarily the asia-south1 Mumbai region; we may later use Cloudflare R2 for storage — [OWNER: confirm provider and region]) and synced to your signed-in devices. When you upgrade, media already on your phone is uploaded automatically. If you leave Pro, media already in the cloud stays there; new media is saved on the phone only.
- Guest mode. Without an account, everything stays on your device.
AI processing
Riloya has optional AI features: answering questions about your memories ("Ask"), summaries, and reading text in photos and documents.
- On the free plan, tagging and keyword search run on your device. When you use Ask, the question and the relevant memory text are sent to an AI processor to produce the answer.
- On Pro, memories may also be sent to an AI processor to create summaries, tags and semantic-search vectors, including (within limits) memories saved before upgrading.
- Our AI processors are OpenRouter, Groq, Google (Gemini), Anthropic and OpenAI; which one handles a request depends on the task. [OWNER: keep this list in sync with the admin AI Routing settings.]
- Aadhaar, PAN and passport numbers are masked before text is sent to a model.
- We use these processors only to perform the task you asked for, under API terms that do not allow training on your data. [LAWYER: confirm each provider's data-use terms, including free OpenRouter models.]
- AI output can be wrong. Check important details against the original.
Advertising (free plan only)
Free users see ads served by Google AdMob. AdMob may use your device's advertising ID, IP address and app-usage information to show and measure ads, as described in Google's policy. We never share the content of your memories with advertisers. Where required we ask for your consent before personalised ads, and you can opt out of ad personalisation in your phone settings. Pro users see no ads.
Who else receives your data
- Google Firebase / Google Cloud: sign-in, database, Pro cloud storage, notifications, crash reports, analytics.
- Google AdMob (free plan only): advertising.
- AI processors listed above.
- Google Play, the App Store, and payment gateways [OWNER: list the gateways you actually use, e.g. Razorpay]: payments. We never see full card or bank details.
- Gift voucher providers: only what is needed to issue a voucher.
- Authorities, where the law requires.
We do not sell your personal data.
How long we keep it
- Memories and account data: until you delete them or your account.
- Deleted memories: in Trash for 30 days, then permanently deleted.
- Deleted account: locked at once and permanently deleted 30 days later (sign in within 30 days to cancel).
- Backups expire within 35 days.
- AI usage records (model, tokens, cost — never text): 400 days.
- Records we must keep by law (payments, audit logs): as long as the law requires.
- On-device media (free plan): stays on your phone until you delete it or uninstall the app.
Security
Encryption in transit and at rest, per-account database rules enforced on the server, keys kept server-side, two-factor authentication for administrators, and audited, reason-required access to memory content. If a personal data breach happens, we will inform you and the Data Protection Board of India as the DPDP Act requires.
Your rights
Under the DPDP Act you can: access your data (Me → Export my data); correct it; erase it (delete memories, or Me → Delete account, or our account deletion page); withdraw consent at any time; nominate someone to exercise your rights; and complain to our Grievance Officer and then to the Data Protection Board of India.
Children
Riloya is for people aged 18 and over. We do not knowingly process children's data. If you believe a child has an account, contact us and we will delete it.
Changes
If we change this policy in a way that affects how your data is used, we will update the date above and ask you to accept the new version in the app.
Contact and Grievance Officer
Support and privacy: riloyaofficial@gmail.com
Grievance Officer (IT Rules 2021 and DPDP Act): Grievance Officer, Riloya, Riloya, India — riloyaofficial@gmail.com. We acknowledge grievances within [24 hours] and resolve them within [15 days]. [LAWYER: confirm timelines.]