Legal

Privacy Policy

Effective Date: September 3, 2026  ·  Last Updated: September 3, 2026

This Privacy Policy explains how Krutyug AI Private Limited collects, uses, shares, and protects your personal data when you use the Zolu app and related services. It is written to meet the requirements of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000. By using Zolu, you agree to the practices described here.

1. Who We Are

Zolu is a product of Krutyug AI Private Limited, a company incorporated in India under the Companies Act, 2013. For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described in this policy.

Company Details

Krutyug AI Private Limited
36/5, Hustle Hub Tech Park, HSR Layout
Bangalore South, Karnataka – 560102, India
Email: tech@krutyug.ai

2. Information We Collect

2.1 Information you provide

• Phone number. Required to create your account. We verify it with a one-time password (OTP) sent by SMS or a messaging app.
• Profile details you choose to add, such as your name, preferred language, and city.
• Feature inputs. Zolu offers several tools, and each collects only what it needs. Depending on which Features you use, this may include personal details such as your date, time, and place of birth; photographs; education, occupation, and income; religion, caste, or community; details of family members, including their contact numbers, appointments, and health-related notes; details of your child; your goals, preferences, and progress; viewing history; and questions you ask.
• Chat messages you send to Zolu's AI chat assistant, and the text responses it gives you. Your chat history is stored so you can return to it, until you delete it or your account.
• Messages you send to our support team.
• Payment status. Whether a purchase succeeded, the transaction ID, and which plan you bought. Card, UPI, and bank details are handled by our payment partners and are never stored by us.

Sensitive information. Some of the above (for example birth details, religion or caste, health-related notes, and information about children) is sensitive. We collect it only when you enter it, use it only for the Feature you entered it for, and let you delete it at any time. We never require it to create an account.

2.2 Information collected automatically

• Device data: device model, operating system and version, language, time zone, app version, and identifiers such as a device ID and, where you permit it, the advertising ID (GAID on Android, IDFA on iOS)
• Usage data: screens viewed, Features opened, buttons tapped, content watched, offers and prices shown to you, and purchase events
• Install and campaign data: the app store you installed from and, if you installed after tapping an advertisement, which campaign, ad, and platform it came from
• Log data: IP address, approximate location derived from IP (city level; never precise GPS unless you separately grant it), crash reports, and performance data
• Notification tokens so we can send push notifications you have enabled

2.3 Information from third parties

• Advertising and attribution partners (such as Meta, Google, and a mobile measurement partner): whether an install or purchase followed one of our ads
• Payment partners: transaction success or failure, transaction ID, refund status, and the plan purchased
• OTP and messaging providers: delivery status of verification messages

3. How We Use Your Information

We use your personal data to:

• Create and secure your account and verify your phone number
• Provide the Features you use, including generating text responses, documents, and suggestions with AI
• Personalise Zolu, for example by showing content in your language or remembering your progress
• Process payments, manage subscriptions, and handle refunds
• Measure our advertising. We run ads on platforms such as Meta and Google. We use install and campaign data to understand which ads bring people who find Zolu useful, and to detect fake installs.
• Send transactional messages (OTPs, receipts, renewal reminders, service notices) and, if you opt in, updates about new Features. You can turn off marketing messages at any time.
• Respond to support requests and complaints
• Keep Zolu secure and prevent fraud, abuse, and trial misuse
• Comply with legal obligations under Indian law

We do not use your personal data to make decisions that have legal or similarly significant effects on you.

4. Legal Basis for Processing

Under the DPDP Act, we process your personal data on the basis of your consent, which you give when you sign up and when you choose to use a Feature and enter information into it. You may withdraw consent at any time (Section 10); withdrawing consent does not affect processing already carried out, and may mean some Features stop working.

In limited cases we rely on the "legitimate uses" permitted by Section 7 of the DPDP Act, such as complying with a legal obligation, responding to a court order, or responding to an emergency.

5. How We Share Your Information

We do not sell your personal data. We share it only with:

• Service providers who process data on our behalf under contract: cloud hosting, OTP and messaging delivery, customer support tools, and crash reporting
• Payment partners. Payments and refunds are processed by regulated Indian payment service providers. They receive the amount and the payment details you enter at checkout. We receive back only the transaction status and ID.
• AI providers. Third-party AI models generate some Zolu content. We send them the inputs needed to produce a result (for example, the details you entered or a question you asked), not your phone number or account identity. Their use of that data is limited to providing the service to us.
• Analytics, advertising, and attribution partners. We share device identifiers, install events, and purchase events (never your name, phone number, or Feature inputs) with partners such as Meta, Google, and a mobile measurement partner so they can attribute installs to ads, filter fraudulent installs, and help us find people likely to be interested in Zolu. Where your data is shared for ad measurement, we share it in hashed or aggregated form wherever the platform supports it.
• Legal authorities when required by law, court order, or a lawful government request in India
• A successor business in the event of a merger, acquisition, or sale of assets, with notice to you

We do not currently show third-party advertisements inside Zolu. If that changes, we will update this policy before doing so.

6. Advertising Choices

You can limit ad-related tracking in your device settings: on Android, reset or delete your advertising ID under Settings → Google → Ads; on iOS, decline the "Allow tracking" prompt or change it under Settings → Privacy & Security → Tracking. Zolu will continue to work.

We do not direct advertising at children and do not use information about a child that you enter into Zolu for advertising, profiling, or behavioural monitoring, as required by Section 9 of the DPDP Act.

7. Information About Other People

Several Features let you enter information about someone else, such as a parent, a child, or another family member. When you do this, you confirm that you have their permission or the legal authority to share it. We use that information only to provide the Feature to you. The person concerned can ask us to see, correct, or delete their information by contacting us at tech@krutyug.ai, and we may ask you to confirm the request.

8. Children

Zolu is for adults aged 18 and above. We do not knowingly create accounts for, or collect personal data directly from, anyone under 18. Where a parent or guardian enters a child's information into a Feature, we treat that as the parent's verifiable consent under the DPDP Act, we use it only for that Feature, and the parent can delete it at any time. If you believe a child has provided us with personal data directly, please contact us and we will delete it.

9. Data Storage and Transfers

Our servers are operated by cloud providers and may be located in India or in other countries permitted under the DPDP Act. If you use Zolu from outside India, your data will be transferred to and processed in India. Wherever your data is stored, it is protected by the safeguards in this policy and by contracts with our providers.

10. Your Rights

Under the DPDP Act and other applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how it has been used
• Correct or update inaccurate or incomplete data
• Erase your personal data, subject to our legal retention obligations
• Withdraw consent at any time, as easily as you gave it
• Nominate another person to exercise these rights on your behalf if you are unable to
• Raise a grievance with us, and if you are not satisfied with our response, with the Data Protection Board of India

To exercise any of these rights, email tech@krutyug.ai from the phone number or email linked to your account. We will respond within 30 days.

11. Data Deletion

You can delete your Zolu account and data at any time by writing to tech@krutyug.ai with the subject "Delete my Zolu account", from your registered phone number or from an email address you have linked to your account. We will confirm the request, usually by sending an OTP to your registered number, before deleting anything. In-app account deletion will be added in a future update.

When you delete your account, we delete your profile, Feature inputs (including any personal, family, and child information), messages, and generated content within 30 days, and remove your data from our backups within a further 60 days. We retain only what the law requires us to keep, such as payment and tax records (up to 8 years under the Companies Act and tax laws) and records of your consent and its withdrawal. Cancelling a subscription does not delete your account; deleting your account also cancels any active subscription, and any UPI AutoPay mandate should additionally be cancelled in your UPI app.

12. Data Retention

We keep your personal data for as long as your account is active and for the periods described in Section 11 after deletion. If you have not used Zolu for 24 months and have no active subscription, we will notify you and then delete your account. OTP delivery logs are kept for 90 days. Anonymised or aggregated data that cannot identify you may be retained for analytics.

13. Data Security

We protect your data with encryption in transit (TLS/HTTPS), encryption at rest for sensitive fields, access controls limited to staff who need it, and logging of access to production systems. No method of transmission or storage is completely secure. Keep your device locked, never share an OTP, and contact us immediately if you suspect unauthorised access. If a breach affects your personal data, we will notify you and the Data Protection Board of India as required by law.

14. Third-Party Links and Services

Zolu may link to third-party websites or services, including payment partners. We are not responsible for their privacy practices and encourage you to review their policies.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through an in-app notice or a message to your registered phone number, and where the change requires it, ask for your consent again. Continued use of Zolu after changes take effect constitutes acceptance of the updated policy.

16. Grievance Officer and Contact

For privacy questions, requests, or complaints, contact our Grievance Officer, appointed under the Information Technology Act, 2000 and the DPDP Act:

Grievance Officer: Santosh Kumar Singh
Krutyug AI Private Limited
36/5, Hustle Hub Tech Park, HSR Layout
Bangalore South, Karnataka – 560102, India
Email: tech@krutyug.ai

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.