Privacy Policy

• Account information, such as email address, full name, password credentials handled by Supabase Auth, password reset activity, and invitation status.
• Family record information, such as family member names, relationships, workspace membership roles, and storage location labels.
• Jewellery and purchase information, such as seller names, invoices, bill numbers, purchase dates, amounts, weights, purity, ownership, beneficiaries, possession holder, comments, tags, and installment details.
• Uploaded files and metadata, such as bills, receipts, jewellery photos, file names, MIME types, file sizes, storage paths, and SHA-256 hashes used for duplicate detection.
• Operational information, such as workspace activity events, in-app notifications, selected workspace cookie value, and limited server logs.

• To create and manage your account, login sessions, password reset emails, and member invitations.
• To show the correct family record workspace and keep each workspace's records separated from other workspaces.
• To store, search, display, preview, export, and update jewellery records, purchases, documents, and photos.
• To create AI-assisted draft records from uploaded bills when AI extraction is configured.
• To troubleshoot errors, prevent duplicate uploads, and maintain activity history for selected workspace events.

• Supabase is used for authentication, session handling, database backed user and workspace data, private file storage, signed document links, and authentication emails. If custom SMTP is configured, email delivery also involves the configured email provider.
• Vercel is used to host and run the web application.
• OpenAI is used for bill extraction when the feature is configured and a bill is uploaded for extraction.
• Goodreturns is requested by the app's gold price endpoint for indicative India gold price display.
• No separate third-party analytics tracking SDK was found in the current implementation. The in-app analytics screens calculate summaries from records inside the workspace.

When bill extraction is enabled, Ghar Ka Sona sends the uploaded bill file content, file name, and MIME type to OpenAI from server-side code. The response is stored as extraction metadata and used to create draft purchase and jewellery records.

AI output can be incomplete or wrong. Users must review and confirm seller details, dates, amounts, weights, purity, owners, beneficiaries, possession, storage, and warnings before relying on the records.

• Supabase uses authentication cookies or equivalent session storage to keep users signed in.
• Ghar Ka Sona sets a secure, HTTP-only cookie in production to remember the active family record workspace.
• The onboarding screen stores a small local browser entry with onboarding progress and the entered family record name. It is removed when the dashboard notice clears it.

• Records are kept while the account or workspace remains active unless they are deleted or archived through available app actions.
• Purchase deletion hides the purchase and related assets, documents, and comments from normal screens. Some records are marked deleted or archived rather than immediately erased.
• Document deletion removes the database record and attempts to remove the stored file. If the stored file cannot be removed, the app reports a warning.
• Family record deletion is available only in limited conditions and marks the workspace as deleted. It is not a guaranteed immediate purge from provider backups.
• Current exports include an insurance inventory PDF and an audit CSV for users with permission. A complete account export and self-service account deletion are not yet available.

Owners and admins of a family record can manage members and may access records inside that workspace according to their role. Service operators may need limited access to systems or logs to investigate security, abuse, support, or reliability issues.

Ghar Ka Sona uses cloud providers, so information may be processed in countries other than where you live. The exact locations depend on provider configuration and infrastructure.

For privacy questions, email support@gharkasona.com.