Aanvay

Privacy at Aanvay

Aanvay helps people keep family traditions, use calendars, discover temples and practitioners, and manage service requests. This page describes the current service. Contact supportaanvay@aanvay.in for privacy questions or account assistance.

Information we use

We use your sign-in email and verified login identity to maintain your account. A password is optional. Signing in with Google shares your basic identity and verified email with Aanvay; it does not grant access to your Gmail messages, contacts or files. Our identity service handles credentials. Aanvay stores its own account, person and session records.

When you choose to add them, we store profile/contact details, family relationships, traditions, recordings, images and documents, calendar preferences and locations, contributions, bookings and their conversations. Your language and initial calendar choice can be kept on your device before you sign in. A calendar location is used for the calendar you request; it is not continuous location tracking.

Visibility and processing

Public temple and practitioner information is separate from private family content. Access to family records and attachments follows the relevant sharing, membership and consent rules. A management role does not automatically give access to private family content. Avoid publishing another person's private information without permission.

The service uses Azure-hosted application infrastructure, database and private object storage, Thecha IAM for authentication and authorization, and Microsoft Graph to deliver requested verification and recovery messages. Uploads are checked for malware and validated before access. Search uses a projection of permitted public records; the database remains authoritative. Google receives authentication requests when you choose Google sign-in.

Sessions and account changes

Personal sessions end after 30 days of inactivity or revocation. Password recovery ends existing Aanvay sessions. An email change requires verification of both addresses. The old email remains reserved for OTP login and reversal for the agreed 90-day protection period. This preserves access to the same personal account and does not merge accounts.

Your choices and retained data

You can browse permitted public content without an account, update available profile and sharing settings, and sign out or revoke sessions. Contact support to request access, correction or deletion of information not covered by the current screens. Some records may need to be retained for outstanding requests, security, consent or audit purposes; backup copies are removed through the applicable backup-retention process. We will explain any limitation that applies to your request.

Essential cookies and device storage support language choices and sign-in. The current service does not automatically translate your private family recordings or text. This policy will be updated when the service's handling of information changes.

Policy version: 1 October 2026. This version is in English.