Data Safety

What Sarvoch collects and how we protect it.

This page is maintained by Nevika Innovations Private Limited to summarise how the Sarvoch app handles your data, aligned with the Google Play Data Safety disclosure format and India's DPDP Act, 2023. For the full legal terms see our Privacy Policy.

Data collection & sharing

A summary of the categories of data the app handles.

Data type	Collected	Shared	Optional	Purpose
Name & email address	Yes	No	No	Account creation, sign-in, GST invoices, transactional emails
Phone number	Yes	No	No	OTP verification during sign-in and checkout (MSG91)
Profile picture	Yes	No	Yes	Displayed in the app; sourced from Google sign-in when used
Messages, prompts & AI responses	Yes	Yes	No	Providing the AI chat and assistant features; sent to model providers to generate responses
Uploaded documents & images	Yes	Yes	Yes	Document Q&A, vision and voice features; content sent to model providers only while processing your request
Voice recordings & generated audio	Yes	Yes	Yes	Speech-to-text and text-to-speech via ElevenLabs
Saved prompts & memory entries	Yes	No	Yes	Personalising future answers for you only
Purchase & billing information	Yes	Yes	Yes	Processing payments through Cashfree; GST-compliant invoicing
Device & log information (IP, user agent, timestamps)	Yes	No	No	Security, rate limiting, abuse prevention and debugging
Approximate location (derived from IP)	Yes	No	No	Fraud prevention and legal jurisdiction; we do not collect precise GPS location

"Shared" means the data is sent to a third-party processor to deliver the requested feature. It does not mean the data is sold or shared for advertising — Sarvoch does not sell personal data and does not run ads.

Security practices

Controls that protect your data in transit and at rest.

• All traffic between your device and Sarvoch is encrypted in transit using HTTPS/TLS.
• Data at rest is stored on managed database and object storage services with encryption enabled.
• Row-level security policies restrict every record to its owning user account.
• Per-user rate limits are enforced on chat, image, voice and OTP endpoints to prevent abuse.
• Access to production data by our team is limited to authorised operations and support work.

Third-party processors

Services that process data on our behalf to deliver features.

• Model providers (OpenRouter and connected LLM providers) — process prompts, documents and images to generate AI responses.
• ElevenLabs — speech-to-text and text-to-speech.
• Cashfree Payments — payment processing and UPI/card checkout.
• MSG91 — phone OTP delivery.
• Resend — transactional email such as GST invoices and account notices.
• Managed cloud database & storage — hosts account, conversation and document data.

You are in control

Export, correct or delete your data at any time.

• Export: download a full JSON copy of your account data from Profile → Account Settings.
• Delete: permanently erase your account, conversations, documents and memory from the same screen. Historical GST invoices are retained anonymised for the statutory period required by Indian law.
• Correct: update your profile from within the app, or write to us for anything you cannot edit yourself.
• Request by email: for any DPDP data-principal request, email hello@nevika.ai and we will respond within statutory timelines.

Children

Sarvoch is not directed at children under 18.

Sarvoch is intended for users aged 18 and above. If you believe a minor has created an account, write to hello@nevika.ai and we will remove the account.

Contact

Grievance officer and data protection contact.

Nevika Innovations Private Limited, Mumbai, India.
Email: hello@nevika.ai

This disclosure is provided for transparency and Play Store review; it does not replace the Privacy Policy or Terms of Service, which govern your use of Sarvoch.