Play Data Safety

This page mirrors the Data safety declaration filed for Digital Darzi in Play Console, App content, Data safety. It is the plain-language version of the same answers, so anyone can check what the app collects without opening the Play listing. The full detail sits in the Privacy Policy.

Data collection and security

• Does the app collect or share any of the required user data types? Yes.
• Is all collected data encrypted in transit? Yes. All traffic uses HTTPS/TLS.
• Can users request that their data is deleted? Yes, in the app via Settings, Account, Delete account, and by emailing support@thedigitaldarzi.com. Data is purged within 30 days.
• Data deletion URL: https://www.thedigitaldarzi.com/account-deletion
• Account creation methods: username and password, and OAuth (Google Sign-In).

Data types collected

Analytics sits behind a real in-app opt-out, in the app’s privacy settings, so those rows are declared as optional. Crash reporting is deliberately not tied to that toggle, because a crash we never hear about is a crash we cannot fix, so crash logs and diagnostics are declared as required.

No data type is declared as processed ephemerally, and none is declared as shared.

Nothing is shared

"Shared" in Play’s sense means transferring data to a separate company that then uses it for its own purposes. Every service listed above is a processor acting on our behalf, under a data-processing agreement, which Play explicitly excludes from its definition of sharing. We do not sell your data, and we do not use it for advertising.

What the app never touches

Digital Darzi does not collect precise location, contacts, calendar, photos from your gallery, microphone audio, SMS, or camera images, and it does not request those permissions. The only photo it ever receives is the profile picture attached to your Google account, and only if you sign in that way.

Account deletion

Play requires a URL that anyone can reach without installing the app, because the people most likely to want deletion are the ones who have already uninstalled it. An in-app button on its own does not satisfy the policy. The URL declared in Play Console is:

https://www.thedigitaldarzi.com/account-deletion

In the app, Settings, Account, Delete account removes the account from Supabase Auth; the related tables cascade from there. The app then clears its local cache, its settings store, and the encrypted store that holds the screen-lock PIN. Everything is fully purged within 30 days.

The one thing that is not deleted is the record of subscription payments, kept with the name and account removed. Deleting the record of money that changed hands would make refunds, chargebacks and tax records unanswerable. Play accepts retention for a stated legal reason; it does not accept silence about it.

Deleting an account here does not cancel Play billing. Google holds the subscription against the Google account, not against ours, so it has to be cancelled in the Play Store separately. The in-app confirmation dialog says the same thing, for the same reason.

Keeping this accurate

This declaration is re-reviewed whenever an SDK is added or removed, a new field starts being collected, or the analytics opt-out changes. If anything here stops matching the app, email support@thedigitaldarzi.com and we will correct it.