Vaagmi
Privacy policy
Vaagmi is a digital Rama Koti. You trace శ్రీ రామ on your phone; each completed word adds to your count, to your groups’ counts and to a global total shown on temple displays. This page explains what the Vaagmi app and this website collect, why, and the choices you have. The app and this website are operated by Vaagmi.
What we collect and why
- An anonymous account
- Created on first launch, with no sign-up: a random account id and a session token (the server stores only a hash of the token). We also record the platform (iOS, Android or web), the app version and the IP address the account was created from, to prevent abuse and apply rate limits.
- Your writing
- For each completed word: its id, the time, and the touch path (finger positions and timings on the stencil). The server replays the path to check that the word was really traced, to prevent cheating. Raw touch paths are deleted after 30 days; the word record and the counts stay.
- Counts
- Your total and today’s count, group totals and the global total.
- Groups (optional)
- The groups you create or join, when you joined or left, and the display name you choose. Your display name and your count are shown to the other members of your groups.
- Sign-in (optional)
- Your mobile number (Indian, +91) if you sign in by phone. If you sign in with Google: your Google account id, and your email address only if Google says it is verified. This is used only to recognise you on another phone or after a reinstall.
- One-time codes
- Sign-in codes are sent by SMS through Message Central (VerifyNow), or by WhatsApp (Meta WhatsApp Cloud API) when that is enabled. The provider receives your number to deliver the code. We store only a hash of the code or the provider’s reference, for 5 minutes.
- Technical logs and metrics
- Errors, request timings and rate-limit counters, used to run the service, kept in AWS CloudWatch and AWS X-Ray.
On your device
The app stores your language choice and your counts on your device.
What we don’t do
- No ads.
- No selling or sharing of your data for marketing.
- No tracking across other apps or websites.
- No access to your location, contacts, camera or microphone.
Where your data is processed
Our servers run on Amazon Web Services (AWS) in Mumbai, India (ap-south-1), behind Cloudflare, which handles all traffic to api.vaagmi.org and to this website. Google processes Google sign-in. Message Central and Meta deliver one-time codes.
What is public
The global total is public and contains no personal data. Inside a group, members see each other’s display names and counts.
Your choices
- You can use the app without signing in.
- You can leave a group at any time.
- You can sign out. Your account stays and comes back when you sign in again.
- To delete your account or your data, email contact@vaagmi.org. An in-app delete option is planned.
When we delete an account, we delete the account, its sign-in identities, sessions, group memberships and words. Counts already added to group totals and the global total stay, as anonymous numbers.
Children
The app is for everyone, including families. We don’t knowingly collect more than what is described above from anyone. Parents can ask for deletion at contact@vaagmi.org.
Changes to this policy
When this policy changes, we update this page and its effective date.
Contact
Questions or requests: contact@vaagmi.org