Legal

DPDP Act compliance

Last updated: 30 April 2026 · Version 1.0

The Digital Personal Data Protection Act, 2023

India's Digital Personal Data Protection Act, 2023 ("DPDP Act") is the law that governs the processing of digital personal data in India. The Central Government notified phased commencement on 13 November 2025: some provisions are already in force, some come into force one year from that date, and the main consent, notice, data-principal-rights, and data-fiduciary obligations come into force eighteen months from that date.

Pratyek is being built around the DPDP Act - not retrofitted later. We treat the notified requirements as product requirements now, even where the statutory obligation has a later commencement date. The full Privacy Policy is at /legal/privacy-policy.

Commencement timeline

The DPDP Act and the Digital Personal Data Protection Rules, 2025 do not switch on all at once. As notified on 13 November 2025, the operational timeline is:

  • 13 November 2025: selected provisions, including definitions and Data Protection Board provisions, came into force.
  • 13 November 2026: Section 6(9) and Section 27(1)(d) are scheduled to come into force; Rule 4 is also scheduled from one year after publication.
  • 13 May 2027: the main processing, notice, consent, data principal rights, data fiduciary duties, and related rules are scheduled to come into force.

1. Service identity and contact

Pratyek is the service that processes the personal data you send into your household chat and Memory dashboard. For privacy questions, email hello@pratyek.com. WhatsApp: +91 93720 23537.

2. Consent

Pratyek operates on affirmative, informed consent. We do not enrol anyone by default. The act of adding Pratyek to your contacts and sending us your first message is your consent to process the messages you send us, for the purpose of providing the service.

Consent can be withdrawn at any time, simply by stopping use of the service or by sending "delete everything" to Pratyek in WhatsApp. Withdrawal of consent triggers data deletion within 30 days.

3. Purpose limitation

The personal data we process is used only for the purpose of providing the Pratyek service to you - filing what you forward, surfacing what you ask for, nudging on the dates you'd want to be nudged on. We do not repurpose your data for advertising, profiling for third parties, or model training.

4. Data minimisation

We extract structured metadata from what you forward, and we keep that. We do not hoard the original raw media. Voice note audio is deleted within 7 days of transcription; raw forwarded files are deleted within 30 days of extraction. We don't ask for personal data we don't need.

5. Notice

The notice required by Section 5 of the DPDP Act is provided through this page, the Privacy Policy, and the on-boarding messages Pratyek sends in WhatsApp the first time you message it. Notices are written in plain English and translated into the language you use. We provide this notice now even though the main notice provisions are scheduled for later commencement.

6. Storage limitation

Personal data is retained only for as long as necessary to provide the service. The retention schedule is published in the Privacy Policy:

  • Voice note audio: deleted within 7 days of transcription.
  • Raw forwarded media: deleted within 30 days of extraction.
  • Server logs: rotated within 30 days.
  • Structured records: retained while the underlying entity is active in your household.
  • Account-level deletion: completes within 30 days of your request, including backups.

7. Accuracy & correction

You can correct any record by telling Pratyek in WhatsApp ("the Adani bill amount was ₹4,237, not ₹4,273") or directly in the dashboard. Corrections are applied immediately.

8. Security safeguards

Reasonable technical and organisational safeguards are in place: encryption in transit (TLS 1.3), encryption at rest, role-based access control to production systems, audit logging of administrative actions, regular backups in India, and incident response procedures. We do not claim perfect security; we do continuously raise the bar.

9. Data principal rights

As a data principal under the DPDP Act, you have the right to:

  • Access the personal data we hold about you.
  • Correct or update any inaccurate data.
  • Erase the data, in whole or in part, on request.
  • Withdraw consent for our processing.
  • Nominate a person to exercise your rights in case of incapacity or death.
  • Grievance redressal - through our grievance officer, then the Data Protection Board of India.

To exercise any of these, write to hello@pratyek.com with the subject line beginning "DPDP". We respond within 7 working days.

10. Grievance redressal

Pratyek handles privacy-related grievances per Section 8(10) of the DPDP Act, and works with the Data Protection Board of India where required.

11. Data Protection Board of India

If you are not satisfied with our response, you have the right to escalate to the Data Protection Board of India, established under Section 18 of the DPDP Act. Contact details are published on the Board's official website.

12. Cross-border transfers

Pratyek does not transfer personal data outside India for storage. Production data and backups live on servers in Bangalore. The only outbound connections are to processors named in our Privacy Policy - Meta (for WhatsApp delivery), OpenRouter (for LLM access), Sarvam (for speech-to-text), Plausible and Google Analytics 4 (for aggregate website analytics) - each under data processing agreements that limit retention and forbid further use.

13. Children

Per Section 9 of the DPDP Act, we do not knowingly process personal data of children under 18 except as authorised by a verifiable parent or guardian (i.e., the household adult who is using Pratyek). We do not perform behavioural monitoring or targeted advertising directed at children - we do not perform behavioural monitoring or targeted advertising of any kind, of anyone, ever.

14. Updates to this notice

Material changes to this notice will be announced through the Pratyek WhatsApp chat with a summary in plain language. The "Last updated" date at the top of the page tracks the most recent revision.