This Privacy Policy explains how Uchhal ("Uchhal", "we", "us" or "our"), the provider of the dias application and related backend and web services (together, the "Service"), collects, uses, stores, shares and protects your personal data. dias is a study/work companion that lets you record sessions (timed, audio, video, screen and call), take notes, run AI-assisted mock interviews, evaluate answers, track progress and keep everything in a personal cloud content drive.
We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India and other applicable laws. In this policy, "you" refers to the Data Principal whose personal data we process, and Uchhal acts as the Data Fiduciary.
The Service is operated by Uchhal (uchhal.in), including the dias mobile app and the companion web app at dias.uchhal.in. For any privacy-related question or request, contact us at kapilchaudhary8280@gmail.com.
We collect only the data needed to provide the Service:
| Category | What it includes | Why we collect it |
|---|---|---|
| Account data | Name, email address, phone number, and hashed password. | To create and secure your account and authenticate you. |
| Recordings | Audio, video, screen recordings and call recordings you make in the app. | To store, play back and organise your study/work sessions. |
| Notes and mind maps | Hand-written notes, notebooks and mind maps you create. | To provide the notebook feature and keep your notes with your sessions. |
| Interview & Q&A data | Mock-interview audio and transcripts, your answers, AI evaluations, question-and-answer and search activity. | To run mock interviews, evaluate your answers and provide search/Q&A features. |
| Progress & usage data | Goals, progress and journey tracking, and usage statistics (including AI token usage for interview/search/Q&A features). | To track your progress and manage feature usage. |
| Content drive metadata | Folder and file names, timestamps and organisation of your content drive. | To organise and let you browse your uploaded content. |
| Device permissions | Microphone, camera, screen-recording and photo-library access, requested only when you start a relevant recording or import media. | To capture and let you attach the media you choose to record or import. |
We do not sell your personal data, and we do not use it for advertising.
We process your personal data to:
Our lawful basis for processing is your consent under the DPDP Act, and, where applicable, the legitimate uses permitted by that Act. You may withdraw consent at any time (see Your rights).
Recordings you make are stored locally on your device during capture and, once you finish a session, uploaded to your personal content drive. By using the Service you consent to the processing described in this policy.
We share your data only with the service providers needed to deliver the Service. Each processes data on our instructions for the stated purpose:
| Provider | Purpose | Data shared |
|---|---|---|
| Amazon Web Services (AWS) | Backend hosting (serverless compute) and storage of your recordings, notes and files in your content drive. | Account data, recordings, notes and content-drive files (region: Asia Pacific, Mumbai —
ap-south-1). |
| AI providers | Transcription of session audio, mock-interview evaluation, and search/Q&A features. | Audio, transcripts and text you submit for these features. |
We may also disclose data where required by law, or to protect the rights, safety and security of users, the public or Uchhal. If Uchhal is involved in a merger, acquisition or asset sale, your data may be transferred, subject to this policy.
We aim to store your data in India (AWS Mumbai region). Some sub-processors — in particular AI providers used for transcription, interview evaluation or search — may process data on servers located outside India. We transfer such data only to the extent permitted by the DPDP Act and only for the purposes described in this policy. By using the Service you consent to such transfers.
We keep your personal data for as long as your account is active, or as needed to provide the Service and meet legal obligations. You can delete individual recordings, notes and files from your content drive at any time from the app.
Using Delete account in the app locks your account so it can no longer be accessed and signed into; it does not immediately erase your stored data. If you want your data permanently erased rather than just deactivated, email us at kapilchaudhary8280@gmail.com and we will delete your account and associated data. See Delete Account for details on both options. After erasure, residual copies may persist for a limited period in backups and in sub-processor systems before being erased in the ordinary course. We do not retain data longer than necessary.
We use reasonable technical and organisational safeguards to protect your data, including:
No system is perfectly secure. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by the DPDP Act.
As a Data Principal, you have the right to:
To exercise any of these rights, email kapilchaudhary8280@gmail.com. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.
The Service is intended for use by students and working professionals aged 18 and above. We do not knowingly collect personal data from children, and we do not use any data for tracking, behavioural monitoring or targeted advertising directed at children. If you believe we hold a child's data without proper consent, contact us and we will delete it.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where changes are significant, provide a more prominent notice. Continued use of the Service after an update means you accept the revised policy.
For any questions, requests or complaints about your personal data or this policy, contact our grievance point of contact:
We aim to acknowledge and respond to requests within the timelines required by law.