Privacy policy · Saajan

The short version

Your practice stays on your phone. Your goals, paath history, streaks, reminders, settings and recent searches are stored only on your device. We never see them.
No account. You don't sign up, and we don't know who you are.
No ads, analytics, crash reporting or tracking. Saajan contains no advertising or analytics code, and we never sell your data.
Voice search is the one exception. While voice search is listening, your voice is streamed through our server to Sarvam AI, which turns it into text so Saajan can find the line. We don't keep the audio or the text. Sarvam's own policy allows it to keep them for a time; the details are below.

Who we are

Saajan ("Saajan: Nitnem Tracker & Gurbani Reader") is made by Gurbaaz Singh Nandra, an independent developer. In this policy "we" and "us" mean the people who make Saajan. This policy covers the Saajan app for iPhone and Android, the Saajan API at gurbani-api.suniai.app that the app talks to, and this website. You can reach us at saajan@suniai.app.

What stays on your phone

Saajan works without an account. All of this is kept only in the app's storage on your device:

Your onboarding answers, Nitnem goal, chosen banis and maryada.
Reminder times and preferences. Reminders are local notifications that your phone schedules itself; there is no push server.
Your paath history, streaks and reading progress, including paaths you mark done yourself.
Reading and app settings: font, size, larivaar, translations, theme and language.
Your last 20 searches, which you can clear at any time.
Gurbani that has been downloaded so it opens offline, and the last week of Hukamnamas.

This data is not sent to us or anyone else. Your phone's own backup (iCloud or Google) may include it if you have device backup turned on; that is between you and Apple or Google. You can export it as a file, or delete it all, from Settings → Data & storage. See Delete your data.

What the app sends to our server

To show Gurbani that isn't on your phone yet, the app asks our API for it. A request says what you want to read or find, for example a bani, a shabad, an Ang, today's Hukamnama, or a search with the letters or words you typed. Requests carry no account, name, advertising ID or device ID.

Like any internet request, each one also reveals your IP address and basic technical details (such as the type of phone software making the request). Here is what happens to them:

Cloudflare sits in front of our server. It receives every request, including your IP address, so it can deliver it, cache common answers and block attacks. Cloudflare acts as our service provider under its privacy policy.
Our server (a virtual server we rent from Contabo) records a short log line for each request it answers: the time, the path (for example /v1/banis), and the result code. The log does not include your IP address or what you searched for, because query text is not logged. Logs are kept in a small rotating file and are overwritten as new requests arrive. We also keep counts, such as requests per minute for each route, which contain nothing about you.
Your IP address for rate limiting. To stop one device from overloading voice search, our server remembers the IP address of each voice-search connection in memory for one minute. It is never written to disk or logged.
The Hukamnama is fetched by our server from GurbaniNow, not by your phone, so GurbaniNow never sees your IP address.

Voice search and your voice

Voice search is optional. The rest of Saajan works without it, and it needs microphone permission, which you can refuse or withdraw at any time in your phone's settings.

When. The microphone is used only while the voice-search sheet is open and listening. It stops when you finish speaking, when you tap to stop, or after 12 seconds at most. Saajan never listens in the background.
What is sent. The audio is streamed over an encrypted connection (WSS) to our server, which passes it straight on to Sarvam AI (Axonwise Private Limited, Bengaluru, India) for speech-to-text in Punjabi. Sarvam sends the text back, and the app uses it to search. Our server connects to Sarvam itself, so Sarvam receives the audio but not your IP address, and never any name, account or device ID.
What we keep. Nothing. Our server doesn't save the audio or the text, and neither does the app. We only count sessions and how long they took.
What Sarvam keeps. Sarvam handles the audio under its own terms, and its published documents don't all say the same thing, so here is the most cautious reading:
- Sarvam's Privacy Policy (updated 29 July 2026) lists API inputs and outputs, which for voice search means the audio clip and its transcript, as kept for a "user-configurable" period, "default: 30 days after last access", and technical usage logs for one year. The same policy says Sarvam may use content to train and improve its models unless the account holder opts out.
- Sarvam's EULA says it "will not use Your Content to train our AI models unless you provide explicit opt-in consent", and its Punjabi speech-to-text page says audio "is processed in real-time and never stored unless explicitly requested" and that API inputs "are never used for model training".
- Sarvam's Trust Center says its production systems run in Microsoft Azure's Central India region; its privacy policy says some processing may also happen outside India.
We are opting Saajan's Sarvam account out of model training and asking Sarvam to keep nothing after processing. We will update this page when Sarvam confirms that in writing. To ask Sarvam about, or for deletion of, data it holds, write to its Data Protection Officer at privacy@sarvam.ai. Because Sarvam receives nothing that identifies you, tell them roughly when you used voice search.

What we don't do

We don't have accounts, so we hold no names, emails, phone numbers or passwords.
We don't use analytics, advertising, attribution or crash-reporting tools, in the app or on this website.
We don't track you across apps or websites, and we don't use your device's advertising identifier.
We don't access your location, contacts, photos or files.
We don't sell, rent or trade any data.
This website sets no cookies and loads no third-party scripts.

If we ever add crash reporting (we may use Sentry in future, to find and fix crashes), or accounts to sync your history between devices, we will update this policy and the store privacy labels first, and tell you in the app before anything changes.

We use a small number of service providers, only to run Saajan:

Provider	What for	What they receive
Cloudflare	Network, caching, security; hosts this website	Every request to our API and this site, including IP addresses
Contabo	Hosts our API server	The server and its short logs (no IP addresses)
Sarvam AI	Speech-to-text for voice search	Voice audio, only while voice search is listening
Apple and Google	App distribution and updates	What their app stores collect under their own policies

We may disclose information if the law requires it, but there is very little we could disclose: we don't hold data that identifies you.

How long data is kept

Data	Where	Kept for
Your practice, settings and searches	Your phone	Until you delete them or the app
Request log lines (no IP, no search text)	Our server	Until overwritten (the log files have a fixed size cap)
IP address for voice rate limiting	Our server's memory	One minute
Voice audio and transcript	Our server	Not kept
Voice audio and transcript	Sarvam AI	Per Sarvam's policy (see above)

Your choices and rights

Depending on where you live (for example under India's Digital Personal Data Protection Act, the GDPR in the UK and EU, or Californian law), you may have rights to access, correct, delete or move your data, and to object to how it is used. Because your data lives on your phone, you can use most of these yourself: view and export it in the app, and delete it from Settings or by deleting the app. We hold no data linked to you, so we usually can't find anything to give you, but you are always welcome to ask us at saajan@suniai.app. You can also complain to your local data protection authority.

Where the GDPR applies, we rely on our legitimate interest in providing the features you ask for (and in keeping the service secure) to process requests and voice audio.

Children

Saajan is a Gurbani reader suitable for all ages, but it is not directed at children under 13. We don't knowingly collect personal information from anyone, children included: there are no accounts and nothing is stored about the person using the app. If a child uses voice search, their voice is handled as described above; parents can turn off microphone access for Saajan in the phone's settings. If you believe a child has sent us personal information, write to us and we will help.

Security

All traffic between the app and our API is encrypted (HTTPS and WSS). Our server only accepts connections through Cloudflare and stores no personal data. Data on your phone is protected by your phone's own security, so keep a screen lock on.

Where data is processed

Cloudflare serves requests from data centres around the world, close to you. Our API server is in a Contabo data centre. Sarvam processes voice audio mainly in India. By using voice search you understand your audio is processed there.

Changes to this policy

When we change this policy we will update the date at the top. If a change affects what leaves your phone, we will also tell you in the app before it takes effect.

Contact

Questions or requests: saajan@suniai.app. We are a very small team and read every message.