This Privacy Policy explains how NyayMitra ("NyayMitra", "we", "us", or "our") collects, uses, discloses, stores, protects, and deletes information when you use the NyayMitra mobile application, website, backend APIs, AI legal information features, account features, guest features, incognito features, support channels, and related services (together, the "Service").
NyayMitra is an India-focused AI legal information assistant. Users may ask questions about disputes, criminal law, consumer rights, employment, tenancy, cybercrime, property, family issues, police procedure, legal notices, and other legal topics. Because these questions may be sensitive, this Privacy Policy is written to be explicit about what is collected, why it is collected, where AI processing fits, and what choices users have.
1. Service Provider And Data Fiduciary
The Service is provided under the name "NyayMitra".
For privacy requests, user rights requests, child/minor data requests, data deletion requests, account deletion requests, and grievances, contact:
Email: support.nyaymitra@gmail.com
App: NyayMitra
Subject line: Privacy Request
For purposes of Indian privacy law, the publisher of NyayMitra is the Data Fiduciary for personal data processed through the Service, unless a separate legal entity is identified in the app, website, or another official notice.
2. Plain-Language Summary
This summary does not replace the full Privacy Policy.
- We collect account information when you sign up, sign in, continue as guest, or upgrade a guest account.
- We collect and process legal questions, chat messages, AI answers, sources, and conversation metadata to provide the chat service.
- Normal and guest chats may be saved to your account history.
- Incognito chats are not shown in your account history, but they are still sent to backend and AI systems to generate an answer and may be processed in logs, temporary records, security systems, or provider systems.
- We use third-party infrastructure and AI providers to operate the Service.
- We do not sell personal data.
- We do not use chat content for third-party advertising.
- We do not currently use tracking for cross-app or cross-site advertising.
- We do not currently request camera, contacts, SMS, call log, precise location, photo library, microphone, health, or payment-card permissions.
- The current app uses internet access, secure local token storage, local app preferences, and platform share features.
- Children under 13 may not use the Service. Users under 18 should use the Service only with parent or guardian consent and supervision.
- You can delete individual chats, clear chat history, log out, and request account/data deletion.
3. Important Legal And AI Notice
NyayMitra provides general legal information and AI-generated guidance. It is not a law firm, does not provide professional legal advice, does not represent you, and does not create an advocate-client, lawyer-client, fiduciary, confidential, or privileged relationship.
Do not submit information that you would not want processed by an AI system, backend system, service provider, or support/security team where required. If your matter is urgent or serious, contact a qualified advocate, legal aid authority, court helpdesk, police, emergency service, or relevant government authority immediately.
4. Scope Of This Policy
This Privacy Policy applies to information processed through:
- The NyayMitra mobile app.
- The NyayMitra web or API service, if available.
- Account creation, login, guest login, guest upgrade, and authentication.
- AI chat, saved chat history, incognito chat, and source display.
- Settings, language selection, copy/share actions, and local preferences.
- Support, feedback, bug reports, and user communications.
- Security, diagnostics, logs, abuse prevention, and service monitoring.
This Privacy Policy does not apply to third-party websites, legal source websites, courts, government websites, device operating systems, payment providers, external lawyers, external legal aid organizations, or destination apps you choose through the share sheet.
5. User Types And Account Lifecycle
5.1 Visitor Or First-Time User
Before you create an account or continue as guest, the app may store onboarding completion state and may process basic technical information needed to load the Service.
5.2 Guest User
If you choose "Continue as Guest", the backend creates a guest user record and issues an authentication token. Guest mode allows you to use core features without immediately providing an email address.
Guest user data may include:
- Guest user ID.
- Display name such as "Guest".
- Preferred language.
- Guest authentication token.
- Guest chat history.
- Account creation timestamps.
Guest history may be preserved if you upgrade the guest account to a registered account.
5.3 Registered User
If you create an account, we collect the information needed to create, secure, and manage that account, including your name, email address, password hash, preferred language, and account identifiers.
5.4 Guest Account Upgrade
If you upgrade from guest mode to a registered account, your guest account may be converted into a registered account so that prior guest chat history can remain connected to the same account. The upgrade process may collect your name, email address, password, and preferred language.
5.5 Login And Session
When you log in, the app stores an authentication token using platform secure storage where available. This token lets the app call authenticated backend APIs and load your conversations.
5.6 Logout
Logging out removes the local authentication token from the device. Logout does not automatically delete server-side account data or saved chat history.
5.7 Account Deletion
You may request account deletion by contacting support.nyaymitra@gmail.com. If an in-app account deletion feature is available, you may use that feature. Account deletion is described in Section 17.
6. Information We Collect
The exact information collected depends on the features you use.
6.1 Account And Identity Information
We may collect:
- Full name or display name.
- Email address.
- Password authentication data, stored as a password hash rather than plain text.
- User ID.
- Guest ID.
- Account type, such as guest or registered.
- Preferred language.
- Account status, such as active, upgraded, suspended, or deleted.
- Account creation and update timestamps.
- Login state and token metadata.
6.2 Authentication And Security Information
We may collect:
- Access tokens issued by the backend.
- Token issuance and expiration metadata.
- Failed login attempts.
- Password reset or account recovery events if enabled.
- Security event logs.
- Abuse prevention signals.
6.3 Legal Questions, Chat Content, And User Content
We collect and process the content you submit, including:
- Legal questions.
- Follow-up messages.
- Prompts.
- Facts and descriptions you type into chat.
- Optional support messages.
- Optional feedback or bug reports.
- Text you provide while using future document, attachment, or voice features if those features are enabled.
Your legal questions may include personal or sensitive information if you choose to include it. Examples include names, addresses, phone numbers, police station details, FIR facts, court case facts, family disputes, employment facts, salary details, tenancy details, property information, financial disputes, cybercrime details, consumer complaint facts, domestic violence details, medical facts, or information about children. You should submit only what is necessary.
6.4 AI Answers And Conversation Records
We may store or process:
- AI-generated answers.
- Legal source links and titles.
- Conversation titles.
- Conversation language.
- Pinned or unpinned status.
- Message timestamps.
- Response time or latency.
- Conversation ID or session ID.
- Saved history and deleted-history metadata.
6.5 Incognito Session Information
In incognito mode, we process:
- Incognito question text.
- Incognito session ID.
- Selected language.
- AI answer and source information.
- Temporary conversation context needed for follow-up answers.
- Technical logs, security logs, and provider processing data.
Incognito mode prevents the chat from appearing in your normal in-app account history. It does not guarantee that all server, provider, backup, network, security, or diagnostic records are immediately deleted.
6.6 Device, App, Network, And Usage Information
We may collect:
- App version.
- Platform, such as iOS, Android, web, macOS, Windows, or Linux.
- Device model or device category.
- Operating system version.
- Browser or webview information where applicable.
- IP address.
- Approximate location inferred from IP address.
- Date and time of requests.
- API endpoint usage.
- Feature usage, such as chat, history, settings, language, pin, delete, clear, copy, or share.
- Crash logs.
- Error logs.
- Diagnostic and performance information.
6.7 Local Device Storage
The app may store the following on your device:
- Authentication token in secure storage where supported.
- Onboarding completion state.
- Selected preferences such as language or app state.
- Temporary UI state.
6.8 Support, Feedback, And Grievance Information
If you contact us, we may collect:
- Your name.
- Email address.
- Account identifier.
- Support message.
- Screenshots or files you choose to provide.
- Bug details.
- Device and app details relevant to support.
- Records of our communication with you.
7. Information We Do Not Currently Collect Through The App
Based on the current app implementation, the app does not intentionally request or collect:
- Precise GPS location.
- Contacts.
- Calendar.
- SMS.
- Call logs.
- Phone state.
- Camera photos.
- Photo library.
- Microphone recordings.
- Biometric identifiers.
- Health and fitness data.
- Payment card number.
- Government ID images.
- Advertising ID for cross-app advertising.
If future versions add document upload, image upload, voice input, payments, notifications, analytics, crash reporting, identity verification, lawyer booking, or other features, we will update this Privacy Policy where required.
8. App Permissions
The current production app is expected to use:
- Internet access: to communicate with NyayMitra backend APIs and AI services.
- Secure storage: to keep authentication tokens on device where supported.
- Local preferences: to remember onboarding and settings.
- Share sheet access: only when you choose to share an AI answer through another app.
If future features require microphone, camera, files, photos, notifications, or location permissions, the app should show a clear purpose-specific explanation and request permission only when needed.
9. How We Use Information
We use information to:
- Provide the Service.
- Create, authenticate, secure, maintain, and upgrade accounts.
- Provide guest access.
- Provide saved chat history.
- Provide incognito chat.
- Generate AI legal information responses.
- Send selected chat context to AI providers so follow-up questions can be answered.
- Search or retrieve public legal sources where AI grounding is enabled.
- Show source links and citations.
- Personalize responses by selected language.
- Save, load, pin, delete, and clear conversations.
- Let you copy or share responses when you choose.
- Provide support and respond to grievances.
- Debug errors and maintain service reliability.
- Monitor service health and performance.
- Prevent fraud, spam, scraping, abuse, illegal use, and unauthorized access.
- Protect users, the public, and the Service.
- Comply with laws, legal process, court orders, government requests, and regulatory obligations.
- Enforce our Terms and Conditions.
- Improve product quality, safety, and usability.
We do not use legal chat content for third-party advertising. We do not sell personal data.
10. AI Processing
NyayMitra uses third-party AI and search/grounding services to generate legal information responses.
When you ask a question, we may send the following to AI and search providers:
- Your current question.
- Recent relevant conversation history.
- Selected language.
- System instructions that define answer style and safety requirements.
- Technical request metadata needed to provide the service.
AI and search providers may process this data on servers outside your country. They may retain data according to their own service terms, enterprise configurations, abuse monitoring, safety systems, or legal obligations.
We do not guarantee that AI providers will treat your submissions as legally privileged or professionally confidential. Do not submit information that requires attorney-client privilege, advocate-client privilege, or strict confidentiality.
We do not routinely publish your chat content. Authorized personnel or service providers may access limited data when necessary for support, debugging, security, legal compliance, abuse investigation, or service operation.
11. Legal Query Sensitivity And User Responsibility
Legal questions may involve highly sensitive facts. You are responsible for deciding what to include.
Before submitting a question, consider removing or anonymizing:
- Full names.
- Phone numbers.
- Email addresses.
- Addresses.
- Aadhaar numbers or other government identifiers.
- Bank account or card details.
- Passwords and OTPs.
- Private images.
- Exact case numbers where not necessary.
- Names of children.
- Medical details not necessary to the legal question.
- Confidential documents.
- Communications with your lawyer.
If you need confidential legal advice, consult a qualified advocate directly.
12. Sharing And Disclosure Of Information
We may disclose information as described below.
12.1 Service Providers
We may share information with vendors and processors that help us operate the Service, such as:
- Cloud hosting providers.
- Database providers.
- Backend infrastructure providers.
- AI model providers.
- Search and legal-source grounding providers.
- Security providers.
- Diagnostics and error monitoring providers if enabled.
- Customer support tools if enabled.
- Email or notification providers if enabled.
These providers may process information only for the services they provide to us, subject to applicable contracts and law.
12.2 Device Platforms And Share Destinations
Device operating systems and device manufacturers may process some information when you install, update, report, or use the app.
If you use the share button, your device's share sheet lets you send content to another app or recipient. The destination app receives the content you choose to share and handles it under its own policy.
12.3 Legal And Safety Disclosures
We may disclose information if we reasonably believe disclosure is necessary to:
- Comply with law.
- Respond to legal process, court orders, law-enforcement requests, government requests, or regulatory requests.
- Protect rights, safety, property, or security.
- Investigate fraud, abuse, unauthorized access, cyber incidents, or policy violations.
- Prevent harm or respond to emergencies.
- Enforce our Terms and Conditions.
12.4 Business Transfers
If NyayMitra is involved in a merger, acquisition, financing, reorganization, sale of assets, insolvency, transfer of operations, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and notice requirements.
12.5 With Your Direction Or Consent
We may disclose information when you direct us to do so or consent, such as when you share a response, request support, upgrade an account, or connect a future third-party feature.
13. Legal Bases And Lawful Purposes
Depending on your location, we process personal data based on:
- Consent.
- Performance of the Service requested by you.
- Compliance with law.
- Security and fraud prevention.
- Responding to your requests.
- Legitimate uses permitted by applicable law.
- Protection of vital interests in emergencies where applicable.
For users in India, we aim to process digital personal data consistently with the Digital Personal Data Protection Act, 2023 and applicable rules, including notice, lawful purpose, consent where required, purpose limitation, data minimization, reasonable security safeguards, grievance redressal, and user rights.
14. Children, Minors, And Parental Consent
NyayMitra is not directed to children under 13. Children under 13 must not create an account, continue as guest, use incognito mode, submit legal questions, or provide personal information.
In India, a child is a person under 18 years of age for purposes of the Digital Personal Data Protection Act, 2023. Users under 18 should use the Service only with the consent and supervision of a parent or legal guardian.
14.1 Account Creation By Minors
Users under 18 must not create a registered account or guest account unless a parent or legal guardian has reviewed this Privacy Policy and Terms and Conditions and has consented to the minor's use.
We do not knowingly permit unsupervised child accounts. If we learn that a child or minor has created an account without required consent, we may suspend, delete, or restrict the account and delete related personal data where required by law.
14.2 Minor Legal Questions
Legal questions involving minors can be highly sensitive. Users should not submit a child's full name, address, school, identity documents, photographs, medical details, family details, or case details unless necessary and submitted by a parent, guardian, lawyer, or authorized person.
14.3 No Targeted Advertising To Children
The current app does not show targeted advertising. We do not knowingly profile children for targeted advertising or behavioral advertising.
14.4 Parent Or Guardian Requests
Parents and guardians may contact support.nyaymitra@gmail.com to request review, correction, or deletion of personal data submitted by a child or minor. We may require verification before acting on the request.
15. Security
We use reasonable technical and organizational safeguards designed to protect information, including:
- HTTPS/TLS for data in transit.
- Secure token storage on supported devices.
- Password hashing.
- Access controls.
- Backend authentication.
- Database access restrictions.
- Logging and monitoring for security and reliability.
- Vendor review where feasible.
- Data minimization where practical.
No system is completely secure. You are responsible for keeping your device, email account, password, and login credentials secure.
16. Retention
We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Typical retention periods:
- Account information: retained while the account is active and for a reasonable period afterward for legal, security, backup, audit, and dispute purposes.
- Saved chat history: retained until you delete conversations, clear chat history, delete your account, or request deletion, subject to backups and legal retention.
- Guest account data: retained while the guest account exists or until deleted, upgraded, or expired under future inactivity rules.
- Incognito chat data: not shown in account history, but may remain temporarily in session records, server logs, backups, security systems, or provider systems.
- Security logs: retained as needed for security, abuse prevention, investigation, and legal compliance.
- Support records: retained as needed to resolve the issue and maintain business records.
- Backups: retained for a limited period until overwritten or deleted according to backup schedules.
We may retain de-identified or aggregated information that no longer identifies you.
17. Deletion And Account Closure
You may:
- Delete individual conversations from History where available.
- Clear all chats from Settings where available.
- Log out from the app.
- Request account deletion by contacting support.nyaymitra@gmail.com.
When you request account deletion, we will delete or de-identify account information and saved chat history unless retention is necessary for:
- Legal obligations.
- Security and fraud prevention.
- Abuse investigation.
- Dispute resolution.
- Backup restoration limits.
- Compliance with court, government, or regulatory requirements.
- Enforcing our Terms.
Deletion from active systems may occur before deletion from backups. Backup copies will be deleted or overwritten according to normal backup cycles.
Deleting the app from your device does not automatically delete your account or server-side data.
18. Your Privacy Rights
Depending on applicable law, you may have rights to:
- Confirm whether we process your personal data.
- Access personal data.
- Correct inaccurate or incomplete personal data.
- Delete personal data.
- Withdraw consent where processing is based on consent.
- Restrict or object to certain processing.
- Receive a copy of certain personal data.
- Nominate another person to exercise rights where law allows.
- File a grievance with us.
- Complain to an applicable regulator or data protection authority.
To exercise rights, contact support.nyaymitra@gmail.com. We may verify your identity before fulfilling the request. We will respond within the timeframe required by applicable law.
19. International Data Transfers
Your information may be processed in India and in other countries where our hosting, database, AI, search, security, support, and infrastructure providers operate. Data protection laws in those countries may differ from the laws where you live.
Where required, we use appropriate contractual, technical, and organizational safeguards for cross-border transfers.
20. Automated Processing
The Service uses automated processing and generative AI to produce responses. AI responses may affect how you understand legal options, but the Service does not make legally binding decisions, court decisions, government decisions, or professional legal determinations about you.
You should not rely on AI output as the sole basis for legal decisions.
21. Cookies And Similar Technologies
The mobile app primarily uses local secure storage and app preferences. If the Service includes a website, web app, or embedded web content, cookies or similar technologies may be used for session management, security, preferences, diagnostics, or analytics if enabled.
If advertising or cross-site tracking technologies are introduced in the future, we will update this Privacy Policy and request consent where required.
22. Third-Party Links And Legal Sources
AI responses may include links to government websites, law databases, court websites, legal information websites, news sources, or other external sources. We do not control third-party websites and are not responsible for their privacy practices, security, accuracy, availability, or content.
23. Changes To This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and provide additional notice where required by law or platform policy.
If you continue using the Service after an updated Privacy Policy becomes effective, your continued use means you accept the updated policy where permitted by law.
24. Contact And Grievance Redressal
For privacy questions, child/minor data requests, deletion requests, consent withdrawal, access/correction requests, or grievances, contact:
Email: support.nyaymitra@gmail.com
App: NyayMitra
Subject line: Privacy Request
Please include:
- Your account email, if any.
- Whether you used guest mode.
- Device/platform if relevant.
- A clear description of your request.
- Proof of authority if you are contacting us for a child, minor, or another person.
Do not include unnecessary sensitive legal facts in the first message.
NyayMitra provides legal information, not legal advice. For legal advice specific to your situation, consult a qualified lawyer.