This Privacy Policy explains how LegalLekh ("we", "us") handles information when you use our voice-to-text dictation application. We have built LegalLekh so that your recordings stay under your control, and this policy reflects our obligations under India's Digital Personal Data Protection Act, 2023 (DPDPA).

1. Our privacy-first design

LegalLekh works without an account. You do not log in, and we do not build a profile of you. The core principles are:

Recordings stay on your device. Audio and transcripts are stored in an encrypted local database on your phone.
Audio is only sent when you choose. A recording leaves your device solely when you tap "Transcribe".
Audio is deleted immediately. Once our server returns the transcript, the audio file is erased from the server. We do not retain it.

2. Information we process

a. Audio you submit for transcription

When you transcribe, your recording is transmitted securely to our transcription service, converted to text, and then deleted. We do not store the audio after processing.

b. Email address (optional)

If you sign up to be notified about our launch, we store your email address only to send you that update. You can ask us to delete it at any time.

c. Technical data

We may process limited, aggregated technical information (such as crash reports and anonymous usage metrics) to keep the app reliable. This is not used to identify you.

3. Your rights under the DPDPA 2023

As a Data Principal, you have the right to:

Access a summary of the personal data we process about you;
Request correction or erasure of your personal data;
Withdraw consent you have previously given;
Nominate another individual to exercise your rights in the event of death or incapacity;
Grievance redressal through the contact below.

4. Data retention

Transcription audio is retained only for the seconds required to process it, then deleted. Deleted recordings on your device move to a recycle bin and are permanently purged after 30 days. Email addresses are retained until you ask us to remove them.

5. Security

Recordings and transcripts on your device are protected with AES encryption. Data in transit to our transcription service is encrypted over HTTPS. In the unlikely event of a personal-data breach, we will notify affected users and the Data Protection Board as required, within 72 hours.

6. Children

LegalLekh is intended for legal professionals and is not directed at children under 18.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

8. Contact & grievance officer

For any privacy request or grievance, write to us at [email protected]. We will respond within the timelines prescribed under the DPDPA.