Privacy policy

 

This Privacy Policy applies to Nivaala Voice App

Last Updated: April 2026

This policy (“Privacy Policy”) sets forth the manner in which Nivaala (OPC) Private Limited (“Nivaala”, “we”, “us”, or “our”), in its capacity as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), collects, processes, stores, and protects the Personal Data of individuals (“Data Principals” or “you”) who access or use our mobile application designed to record and preserve heirloom recipes via voice and text, and to enable users to discover and share recipes through the Food Atlas, a community-built map of Indian food culture.

  1. Scope and Applicability

This Policy applies to all Personal Data (as set out under 2 below) collected by the Company through its digital interfaces, including but not limited to its web application, mobile platforms, and associated services (together “Services”). This Policy governs the processing of Personal Data in accordance with the DPDP Act and any rules or regulations framed thereunder.

 

  1. Categories of Personal Data Collected

(a) Please note that the following categories of Personal Data is collected for the purpose of subscribing to the Services to the extent of registration, authentication of users and identity verification through One-Time Passwords (OTP) via SMS or messaging platforms :

- First Name

- Last Name

- Email Address

- Mobile Number

(b) Location Data: Where a user chooses to publish a recipe using the Food Atlas feature available on the Services, the location inputted by you, associated with that recipe (city or region) is also collected and displayed publicly.  Location data is displayed solely for this purpose and only upon explicit user consent. Users may unpublish a recipe at any time, upon which the associated location data will be removed from the Food Atlas.

 

  1. Legal Basis for Processing

Processing is undertaken on the basis of valid consent obtained from the Data Principal in accordance with Section 7 of the DPDP Act. The Data Principal may withdraw consent at any time through Settings .

 

  1. Consent Management

  1. Consent is obtained through clear affirmative action at the time of data submission on the sign-up page of Nivaala.

  2. You have the right to access, review, and withdraw consent by writing to hello@nivaala.co or, for Food Atlas location consent, directly through Settings in the app, explicitly stating the purpose of your request and providing any revised details where applicable.

  3. You understand and agree that the withdrawal of consent shall not affect the lawfulness of processing undertaken prior to such withdrawal.


  1. Disclosure and Sharing of Personal Data

We do not disclose Personal Data to third parties except:

  1. To authorised service providers, including Brevo (for OTP and SMS delivery) and Adalo (our application platform, which operates on Amazon Web Services infrastructure);

  2. Where required under applicable law, judicial order, or regulatory mandate

  3. Third-party processors (if any) are contractually bound to maintain confidentiality and comply with applicable data protection standards.


  1. Data Retention and Storage

Personal Data shall be retained only for the duration necessary to fulfil the stated purposes or as mandated by applicable law. Upon cessation of purpose or withdrawal of consent, such data shall be securely erased or anonymised.


The information made available by you on the application is stored on Adalo’s platform, which operates on Amazon Web Services (AWS) infrastructure, with appropriate technical and organisational safeguards.


  1. Rights of Data Principals

Subject to applicable law, you have the following rights:

  1. Right to Access: Obtain confirmation and access to your Personal Data;

  2. Right to Correction: Request rectification of inaccurate or incomplete data;

  3. Right to Erasure: Request deletion of Personal Data upon withdrawal of consent;

  4. Right to Grievance Redressal: Lodge complaints regarding data processing; 

  5. Right to Nominate: Appoint a nominee to exercise rights in case of incapacity

Requests may be submitted to the grievance officer details provided below.


  1. Security Measures

We implement reasonable security safeguards, including encryption, access controls, and audit trails, to prevent unauthorised access, disclosure, or misuse of Personal Data.


  1. Children’s Data

Our services are not intended for individuals under the age of 18. We do not knowingly collect Personal Data from minors. If you believe a minor has provided data, please contact us for prompt deletion.


  1. Grievance Redressal Mechanism

For any concerns, complaints, or requests regarding your Personal Data, please contact our designated Grievance Officer:

Name: Shruti Taneja

Email: hello@nivaala.co 


  1. Amendments to the Privacy Policy

This Privacy Notice is subject to change from time to time. We reserve the right, at our sole discretion, to modify the terms of this Privacy Notice from time to time in order to ensure compliance with applicable laws or in response to changing regulatory or operational requirements ("Updated Terms"). The Updated Terms shall be effective immediately (unless we state otherwise) and shall supersede the terms of this Privacy Notice. We will notify you of any changes to this Privacy Notice if the changes significantly affect your rights or as may be required by law. Your continued use of the Nivaala platform/service after any updates will mean you have accepted those changes. If you do not agree to the updates you should stop using the platform/service immediately. 


  1. Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising hereunder shall be subject to the exclusive jurisdiction of the courts located in New Delhi, India