Privacy Notice
1. Who we are
Data Fiduciary: Alara (alara.co.in), operated from India.
Contact / Grievance: hello@alara.co.in
Support: hello@alara.co.in
2. Personal data we process
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, email, profile photo (Google Sign-In) | Account creation, authentication, support | Consent |
| Chat messages, prompts, uploads | AI responses, chat history, media generation | Consent |
| IP address, browser, device info | Security, abuse prevention, pricing region | Legitimate use / Consent |
| Payment status (via Razorpay) | Subscription management — no card numbers stored by us | Contract / Consent |
| Preferences (theme, response mode) | Stored locally on your device | Consent (cookie banner) |
3. How we obtain consent
Before Google Sign-In, we show an itemised notice and ask you to agree to our Terms, read this Privacy Notice, and consent to account-related processing. Optional marketing emails require a separate opt-in. Consent is recorded with a timestamp.
You may withdraw consent at any time with equal ease — via Settings → Withdraw data consent in the app, or by emailing hello@alara.co.in.
4. Third-party processors
- Google OAuth & Gemini API — sign-in and AI processing (data may be processed outside India; see Google's policy)
- Razorpay — payments
- Vercel — hosting and infrastructure
- ipapi.co — approximate location from IP for pricing
We do not sell your personal data. We do not use your chats to train our own models.
5. Cookies & local storage
We use a session cookie for login (alara_session, HTTP-only). Preferences and consent choices are stored in your browser's localStorage. Minimal analytics may load on alara.co.in only if you accept our cookie banner — no ad tracking.
6. Data retention
We keep account and chat data while your account is active. You may request erasure at any time; we aim to complete deletion requests within 14 days. Inactive accounts may be reviewed for deletion after extended inactivity, with notice where required.
7. Your rights (Data Principal)
Under the DPDP Act, 2023, you have the right to:
- Access a summary of personal data we hold and processing activities
- Correct inaccurate or misleading data
- Erasure of data no longer necessary for the stated purpose
- Withdraw consent (without affecting prior lawful processing)
- Nominate another person to exercise your rights in the event of death or incapacity
- Grievance redressal via hello@alara.co.in
- Complaint to the Data Protection Board of India when constituted
8. Children's privacy
Alara is not directed at children under 13. Users under 18 should use Alara with a parent or guardian's permission.
9. Security
We use HTTPS encryption in transit and industry-standard practices on our hosting infrastructure. No method of transmission is 100% secure; please use a strong Google account and report suspicious activity.
10. Changes to this notice
We may update this notice. Material changes will be communicated in-app or by email. The notice version is shown at sign-in; continued use after an update may require fresh consent where legally required.
11. Trademarks & third-party brands
Product names, logos, and icons displayed in Alara — including those for GitHub, Figma, Google Drive, Higgsfield, Model Context Protocol (MCP), and similar services — are trademarks or trade dress of their respective owners.
We show them only to identify integrations, connectors, or features available or planned in the Service. Their use does not imply affiliation, sponsorship, or endorsement by those companies. All rights belong to the respective trademark holders.
12. Contact
Privacy & grievance queries: hello@alara.co.in