1. Who we are

This Privacy Policy explains how The Advocate Diary ("we", "us", or "our") collects, uses, shares, and protects personal data when you:

• visit or interact with our website or services; and
• use The Advocate Diary application and related case management platform (the "Service").

Developer & Publisher Details:

By using the Application or the Service, you agree to the practices described here. If you do not agree, please do not use the Application or the Service.

2. The personal data we collect

a. Information you give us directly

• Account Information: When you register for The Advocate Diary, we collect the details needed to create and manage your account — such as your name, mobile number, email address, bar council registration details (optional), and login credentials.
• Communications: When you contact us by WhatsApp, email, or phone for support or enquiries, we keep a record of that correspondence.
• Billing details: Billing name, subscription details, and transaction history processed through our secure payment providers.

b. Information we collect automatically

When you use the Application or Service, we may collect technical and usage information such as your device type, operating system version, unique device identifiers, crash logs, and application usage statistics to ensure optimal performance.

List of tools used:

• Google Analytics for Firebase / Firebase Crashlytics

c. Business & Case data you put into the Service

When you use The Advocate Diary, you and your authorized team enter and store sensitive professional data — for example, client profiles, case histories, court descriptions, hearing schedules, legal notes, evidence tags, and documents. This includes personal data about your own clients, witnesses, and legal contacts. For that data, you (the advocate or law firm) are the Data Fiduciary and The Advocate Diary acts strictly as a Data Processor, processing it securely on your behalf and solely under your instructions (see Section 9).

3. How we use personal data

We use personal data to:

• provide, operate, maintain, and improve the features of the Application;
• set up and administer your account, and deliver regular technical support and training;
• send automated case alerts, hearing reminders, and push notifications relative to your diary updates;
• communicate with you about your account, service updates, and related matters;
• process subscription payments and manage account renewals;
• keep the Application and Service secure, encrypted, and protected against misuse or fraud; and
• comply with applicable legal frameworks and respond to lawful requests.

4. The basis on which we process personal data

We process personal data based on your explicit consent, and/or for the legitimate/permitted uses allowed under the Digital Personal Data Protection (DPDP) Act, 2023 (for example, where you have voluntarily provided your data for a specified purpose like managing your law practice). Where we rely on consent, you may withdraw it at any time; withdrawal will not affect processing already carried out legally prior to the withdrawal.

5. How we share personal data

We do not sell, rent, or monetize your personal or professional data. We share it only under the following limited conditions:

• Service providers / Sub-processors: Trusted cloud hosting infrastructure, secure authentication mechanisms, and messaging/SMS delivery services that enable the app to function.
• Legal and safety reasons: Only where strictly required by law, regulation, legal process, or an order from a competent judicial authority.
• Business transfers: In connection with a corporate restructuring, subject to complete maintenance of this privacy standard.

6. How long we keep personal data

We retain personal data only as long as necessary for the operational purposes outlined in this policy, or as mandated by law. When data is no longer needed, it is permanently deleted or anonymized.

Data retention period:

• Active Accounts: Life of Account + 6 Months
• Closed/Expired Accounts: 6 Months

7. Cookies and App Storage

Our application uses secure local caching, shared preferences, and encrypted tokens to keep you logged in, remember your workflow layout, and ensure rapid access to your calendar and diary offline. You can control application permissions directly through your device OS settings.

8. How we protect personal data

We apply rigid technical and organizational security measures — including end-to-end transport layer encryption, secure cloud architectures, multi-factor access controls, and need-to-know administrative restrictions — to protect your case diaries against unauthorized access, alteration, disclosure, or loss.

9. The Advocate Diary platform: our role as a processor

For the client and case data you store within the app (Section 2c), you decide what data is collected and recorded. You are fully responsible for ensuring compliance with your professional standards, confidentiality duties, and having a lawful basis for compiling your clients' personal data. We process that client data strictly to execute the service for you, in line with your application commands, and never for any external intentions.

10. Your rights

Subject to the DPDP Act and other applicable laws, you have the right to:

• access the personal information we hold directly regarding your user account;
• request immediate correction or updating of inaccurate or outdated profile records;
• request full erasure of your account and related data;
• withdraw consent where processing is based on consent;
• nominate another authorized legal professional to manage your account and case access in the event of death or incapacity; and
• raise a formal grievance concerning data handling.

To exercise any of these rights, please contact us directly at our support contact details.

11. Children

The Application is designed exclusively for practicing advocates, legal firms, and professional individuals. We do not knowingly collect personal data from individuals under the age of 18 years.

12. Where we store and process data

We store and process data within secure, high-tier server environments hosted in India to maintain data localization and compliance requirements.

Infrastructure Summary:

• Primary Servers: Secure cloud hosting facilities located in Mumbai, India.
• Push Notifications & Core APIs: Google Firebase infrastructure for secure routing.
• Distribution Networks: Google Play Store and Apple App Store for application deployment.

13. Third party links and services

The Service connects to necessary digital services for legal professionals. We are not responsible for external services or standard judicial web portals you browse outside the app. The integral integrated sub-services include:

• Google Firebase for secure real-time sync and push notifications
• Apple App Store and Google Play Store to download/update the application
• Secure cloud-based SMS gateway solutions for automated case alerts

14. Changes to this policy

We may update this Privacy Policy from time to time to adapt to new framework rules under the DPDP Act or application features. We will publish the updated version directly within the application and revise the "Last updated" date visible at the top.

15. Grievance Officer and contact details

In accordance with the Digital Personal Data Protection (DPDP) Act, 2023, and the Information Technology Act, 2000, our designated Grievance Officer is:

For any direct questions, account erasure requests, or procedural clarifications regarding this privacy framework, you may contact the Founder directly using the information listed above.