← Back to Nitya Japa

Privacy Policy

Last updated: 7 November 2026

Nitya Japa is a personal tool for tracking daily Mala Jaap. It is built to be private by design: your practice stays on your device and is backed up only to your own account. This policy explains what we collect, why, and the choices you have.

Who is responsible

This policy covers the Nitya Japa application and the website at nityajapa.com. If you have any questions about it, contact us at [email protected].

What we collect

  • Your email address, used only to sign you in. We sign you in with a one-time code sent to your email — there is no password.
  • Your practice data — the malas and jaap you log, your target, baseline, and related settings.
  • Usage and diagnostic data — anonymous analytics about how the app is used (for example, which screens are opened) and crash reports, so we can fix problems and improve the app.

We do not ask for your name, phone number, location, or any other personal details, and we never sell your data.

Where your data lives

Nitya Japa is local-first. Everything you log is stored on your own device first, so the app keeps working offline. To keep your practice safe across devices, your data is also backed up to a private cloud account that only you can read, protected by row-level security so no other user can see it.

We use the following service providers to run the app: Supabase (authentication and encrypted cloud backup), Cloudflare (hosting, content delivery, and bot protection on sign-in), and PostHog (privacy-focused product analytics and error monitoring). These providers process data only on our behalf.

Analytics and session data

We use PostHog to understand how the app is used and to catch errors. Analytics requests are routed through our own domain. Session recordings, where captured, mask all text inputs and your jaap and mala counts, so your actual practice numbers are never recorded. You remain identified only by your account so we can tell returning sessions apart; we do not build advertising profiles.

Bot protection

To stop automated abuse of the sign-in screen, we use Cloudflare Turnstile. It checks that sign-in requests come from a real browser and does not track you across other websites.

How we use your data

  • To sign you in and keep you signed in.
  • To store, back up, and restore your practice across your devices.
  • To understand usage, diagnose crashes, and improve the app.
  • To protect the service against abuse.

How long we keep it

Your practice data is kept for as long as your account exists so it can always be restored. When you delete a log it is hidden from view and can be recovered, so your history is never silently lost. You can ask us to permanently delete your account and all associated data at any time.

Your choices and rights

  • Access and export — you can export your logs as a CSV file from within the app at any time.
  • Correction — you can edit or remove your logs and settings directly in the app.
  • Deletion — email us at [email protected] to permanently delete your account and data.
  • Sign out — signing out clears the data held on your current device.

Security

Data is encrypted in transit. Your cloud backup is protected by row-level security so each account can read and write only its own records. No system is perfectly secure, but we work to protect your data and keep what we collect to a minimum.

Children

Nitya Japa is not directed at children under 13, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be made clear within the app.

Contact

Questions about your privacy? Reach us at [email protected].