Privacy Policy

BhaktiHub · Devosh Apps Private Limited · Last updated: 16 September 2026

In short: To use Bhakti Hub you sign in with your mobile number (a one-time password by SMS — no password to remember). We store your number, the name you enter, and your favourites, chosen deities, rashi and streak — so they follow you to a new phone. We never collect your location, photos or contacts, and we never sell your data. You can delete your account from inside the App at any time — see section 10.

This Privacy Policy explains how Devosh Apps Private Limited ("we", "us", "our") handles information in connection with the Bhakti Hub Android application (package name com.bhaktihubapp) (the "App"). By using the App you agree to this policy.

1. Information we do not collect

Signing in with your mobile number is required to use the App (section 3). Apart from what you give us when you sign in, we do not collect, request or store:

Your email address or postal address
Your location (the App does not use GPS or any location permission)
Photos, videos, files or contacts from your device
Your SMS messages — the App has no SMS permission (see "Reading the OTP" in section 3)
Card, UPI or bank details — any payment for BhaktiHub Plus is processed by the payment provider; we never receive or store these

2. Information stored on your device

To make the App work the way you like, the following is saved in your phone's own private app storage and is deleted when you uninstall the App. The items marked with * are also saved to your account so that they follow you to a new phone (section 3); the rest never leaves your device and we cannot see it:

Your chosen language and text size, and light/night mode
Your chosen deities (aaradhya) and rashi *
Your favourites (wallpapers, status, bhajans, ringtones) *
Your alarms — time, name, days and the selected tone
Jaap (chant) count and daily streak *
A copy of recently downloaded content so the App opens quickly and works offline
Your sign-in token (see section 11) and your name and number as shown in "My account"

3. Information sent to our server

Your account

When you sign in with your mobile number, we store on our server, linked to that number:

Your mobile number — this is your account. It is used to send you a one-time password (OTP) and to recognise you when you sign in again.
Your name, if you choose to enter one — shown inside the App and used to greet you. You may leave it blank or change it at any time.
Your chosen language, so that notifications reach you in that language.
Your favourites, chosen deities, rashi, jaap count and daily streak — so that they are restored when you sign in on another phone.
Your subscription status (whether BhaktiHub Plus is active, and until when).
Your phone's push token (section 5), so that account-related notifications can reach the right phone.
The date you joined, the date you last used the App while signed in, and the IP address from which an OTP was requested (kept briefly, only to prevent abuse).

How the OTP reaches you. The OTP is sent by SMS through our SMS provider, MSG91 (Walkover Web Solutions Pvt. Ltd., India), which receives your mobile number and the OTP for the sole purpose of delivering that message. We never store the OTP itself — only a one-way hash of it, which is discarded after 5 minutes.

Reading the OTP. To fill in the OTP for you, the App uses Google Play services' Phone Number Hint and SMS Retriever / SMS User Consent features. These let the App receive only the single OTP message meant for it, either because that message carries the App's own code or because you tap "Allow" on a Google prompt. The App has no SMS permission and cannot read any other message.

How long we keep it. For as long as your account exists. When you delete your account (section 10), all of the above is permanently erased within 30 days.

Anonymous content statistics

When a wallpaper, status or bhajan is opened, downloaded or applied, the App sends the content's ID and the type of action (for example: wallpaper #42, download) to our server. This tells us which content devotees like most, so we can add more of it. This message contains no device identifier and nothing that can identify you, and it is not linked to your account.

Standard server logs

Like every website and app server, our hosting provider automatically records technical request logs, which may include your IP address, the time of the request and the type of device. These logs are used only for security and for keeping the service running, and are retained for a short period before being deleted. We do not use them to build any profile of you.

4. Permissions the App asks for, and why

Permission	Why it is needed
Internet	To download wallpapers, bhajans, ringtones and temple content from our server.
Set wallpaper	To apply a wallpaper to your home or lock screen when you tap "Set wallpaper".
Modify system settings	To set a devotional tone as your phone's ringtone, notification tone or alarm tone.
Contacts (read and write)	Used only when you choose "Set ringtone for a contact". You pick the contact yourself from your phone's own picker, and the App writes the chosen tone to that contact. Your contacts are never read in bulk, never uploaded and never sent anywhere. If you never use this feature, no contact is ever accessed.
Notifications	To show the alarm when it rings, and (in future) devotional reminders — see section 5.
Alarms & reminders, full-screen notification, wake lock, vibrate, run at startup	So a devotional alarm you set actually rings at the correct time — waking the screen, playing the tone and reappearing after your phone restarts.

Saving a wallpaper or status to your gallery is done through Android's own media system and does not require access to your existing photos.

5. Push notifications

We send occasional devotional notifications — for example a festival reminder, or news that a new aarti has been added. These are delivered by Firebase Cloud Messaging, a Google service.

For a notification to reach your phone, Google gives your device an anonymous push token. It is a random string tied to the App on your phone. It is not your name, number or email. We link this token to your account so that notifications about your account (for example, your subscription) reach your phone; it is removed when you sign out or delete your account.

We do not ask for notification permission when you first open the App. We ask only after you have set your first wallpaper, so that you can decide once you have actually seen what the App does. If you say no, we do not ask again. You can turn notifications off at any time in your phone's settings, and the App will keep working exactly the same.

6. App analytics and crash reports (Google Firebase)

To understand which parts of Bhakti Hub devotees actually use — and to find out when the App breaks — we use Google Firebase. Three parts of it:

Firebase Analytics — records simple actions inside the App, such as "a wallpaper was set", "a bhajan was played" or "the panchang was opened", together with which deity the content belonged to. It also records your chosen app language and whether the install came from one of our advertisements.
Firebase Crashlytics — if the App crashes or freezes, it sends us the technical details of what went wrong (the error, the phone model, the Android version) so we can fix it.
Firebase Remote Config — lets us change settings inside the App without releasing an update. It sends us nothing about you; it only fetches settings.

Firebase gives your device a random installation ID so these records can be grouped per device. It is not your name or number, and we do not send Firebase your mobile number or name. Firebase records only whether the device is signed in (yes/no) and whether BhaktiHub Plus is active — nothing more.

We never send Firebase your contacts, your photos, your favourites, your alarms, your jaap count, or anything you have typed. Nor do we send the text of any content you read.

Firebase works for us as a service provider — this data is not sold and is not shared with anyone for their own purposes. Google's policy: firebase.google.com/support/privacy

How long we keep it. Firebase Analytics records are retained for 14 months and are then deleted automatically. Crash reports are retained for 90 days. The technical server logs described in section 3 are deleted within 30 days.

7. Advertising measurement (Meta)

We advertise Bhakti Hub on Facebook and Instagram. So that we can tell which advertisements actually bring devotees to the App — and so we do not waste money showing ads to people who would not want them — the App includes the Meta (Facebook) SDK.

When the App is opened, this SDK sends to Meta:

Your device's advertising ID (a resettable number Android gives to every phone for advertising; it is not your name)
Basic technical details of the device (model, Android version, country, language)
The fact that the App was installed or opened, and simple in-app actions such as "a wallpaper was set" or "a bhajan was played" — never which wallpaper or bhajan, and never anything you typed

This data is used only to measure and improve our advertising. It is not used to identify you personally, and we never send Meta your contacts, photos, favourites, alarms or any content from inside the App.

You can stop this at any time. On your phone, open Settings → Privacy → Ads (on some phones: Google → Ads) and turn on Delete advertising ID or Opt out of Ads Personalisation. Bhakti Hub will keep working exactly the same.

Meta's data policy: facebook.com/privacy/policy

8. Third parties

Hosting provider — stores our content and serves it to the App.
Google Play — distributes the App and provides anonymous, aggregated install and crash statistics to us. See Google's Privacy Policy.
Google Firebase — for notifications, app analytics and crash reports, as described in sections 5 and 6.
MSG91 (Walkover Web Solutions Pvt. Ltd., India) — delivers the sign-in OTP by SMS, as described in section 3. Receives your mobile number and the OTP only for that delivery. MSG91 privacy policy.
Google Play services — provides the phone-number picker and OTP auto-fill on your phone (section 3).
Payment provider — if you buy BhaktiHub Plus, the payment is processed by the provider shown at checkout; we receive only a confirmation that the payment succeeded.
Meta (Facebook) — for advertising measurement, as described in section 7.

We do not sell, rent or trade your information to anyone, for any purpose.

Where this data is processed. Google Firebase and Meta process the information described in sections 5, 6 and 7 on servers located outside India. By using the App you consent to this transfer. These companies are bound by their own published privacy commitments, linked above.

9. Children

Bhakti Hub is a general-audience devotional app and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child under 13 has signed in to the App, write to us (section 13) and we will delete the account.

10. Your choices and deleting your data

Delete your account from inside the App: open the More tab → tap your name → Delete account. You are signed out on every phone immediately, and your number, name, favourites and everything listed in section 3 are permanently erased within 30 days. (If you sign in again with the same number within those 30 days, the account is restored.) As the App requires sign-in, you will be asked to sign in again if you continue using it.
Sign out from the same screen if you only want to remove your account from one phone — your data stays in your account.
Uninstalling the App removes everything stored on your phone (section 2), but not your account — use "Delete account" for that.
If you cannot open the App, email us from any address with your mobile number and we will delete the account — see How to delete your account.
You can revoke any permission at any time from Android Settings → Apps → Bhakti Hub → Permissions.
For anything else, write to us and we will respond within 30 days.

11. Security

All communication between the App and our server uses encrypted HTTPS. Our server is hosted in India. There are no passwords: sign-in uses a one-time OTP, and both the OTP and your sign-in token are stored only as one-way hashes, so they cannot be read even by us. OTP requests are limited per number and per network address to prevent abuse. If you have deleted your account, we hold no personal information about you apart from the short-lived technical logs described in section 3.

12. Changes to this policy

If we change this policy, the updated version will be published on this page with a new "Last updated" date. If a change is significant, we will announce it inside the App.

13. Contact us

Devosh Apps Private Limited
CIN: U62090RJ2026PTC117650 | GSTIN: 08AANCD0458R1ZX
Plot No. A-266, Ground Floor, Triveni Nagar, Gopalpura, Durgapura, Jaipur, Rajasthan 302018, India
Email: contact@devoshapps.com
Phone: 8739970778
Website: devoshapps.com
App: BhaktiHub (com.bhaktihubapp)

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are given below. You may write to the Grievance Officer about this policy, about any data we hold, or to ask that information be corrected or deleted.

Grievance Officer: Shankar Ram
Email: contact@devoshapps.com
We acknowledge every complaint within 48 hours and resolve it within 30 days of receipt.