Arul — legal
Privacy Policy
Last updated
How HSR Utility Apps Private Limited, trading as HSR Utility ("we", "us", "our"), handles your
information in Arul (package com.hsrutility.arul) — "the app"
below. It covers this app and nothing else. If you do not agree with it, please do not use the
app.
1. What We Collect
Account
You sign in with Google. We receive your name, email address and Google account ID — not your profile photo, and no phone number or password.
Content you submit
If you upload a wallpaper, we store the file and its details so our team can review it before it may appear. Ask us any time and we will remove it.
Referrals
The link between your account and anyone joining through your invite, so rewards can be credited. Your referrals screen shows their display name or a partly masked email; they see nothing about you.
Subscription
Your subscription status and its dates, so the app knows what to unlock. Payments run through PhonePe — we never see or store card, bank or UPI credentials.
Usage & device
Device type, OS version, language, app version, advertising ID and which features you open, read in aggregate. Subscription events also carry an app-installation ID, so a payment can be matched to the install that produced it.
Crashes & performance
Anonymised reports describing the device state when something failed. No personally identifiable information.
Install attribution
The Google Play Install Referrer, to see which campaign or referral led to an install.
Not collected
No location — the app never requests the permission. Its weekly and festival reminders are built and scheduled entirely on your device, reading only the local time zone: no push service, no server, nothing leaves the phone.
2. What We Use It For
- Running the app, syncing your account and premium status, and improving both.
- Authenticating you and keeping your account secure.
- Processing subscriptions and managing the Autopay mandate.
- Reviewing content you submit before it may appear.
- Diagnosing crashes and fixing bugs.
- Measuring our advertising and installs.
3. Permissions
Each is requested when you choose an action that needs it, not at launch:
Internet & network state
Loading wallpapers, ringtones and your account.
Set wallpaper
Applying a wallpaper when you choose to.
Modify system settings
Setting a ringtone when you choose to. Nothing else is touched.
Notifications
Showing reminders you switch on. Asked for then, never at launch.
Run at startup
Re-arming your scheduled reminders after a restart.
Photos & media (Android 9 and below)
Registering a ringtone you set, and picking a file when you submit a wallpaper. Unused on Android 10 and newer.
Advertising ID
Used by our analytics partners. Reset or limit it in Android settings any time.
Libraries we build on — video playback, secure storage, analytics — declare common Android permissions of their own, such as network state and wake lock. We use them for nothing beyond what this policy describes.
4. Third-Party Services
Each processes data under its own privacy policy, linked in full:
Google Sign-In & Play Services
Sign-in, distribution, core Android functionality.
Google Firebase — Analytics, Crashlytics, Performance
Aggregated usage analytics, crash reports, performance monitoring.
Meta App Events
Advertising and conversion measurement, where we run campaigns.
5. Sharing
We do not sell your personal information, and we give nobody your account contents for their own advertising. We share data only:
- With the service providers listed above, to operate the app on our behalf.
- Where the law requires it, or to protect our users and our service.
- In a merger or acquisition, where this policy continues to apply.
6. Storage & Security
Your data sits in a managed PostgreSQL database (Neon), with media delivered through Cloudflare. Connections use HTTPS/TLS and access is restricted to our own backend services. No method of storage or transmission is ever completely secure, but these are the reasonable steps available and we take them.
7. How Long We Keep It
Until deleted
Account & app data
Removed promptly on a valid deletion request.
14 months
Aggregated analytics
Cannot be linked back to you after deletion.
90 days
Crash logs
No personal identifiers once your account is gone.
Indefinite
One-off trial marker
A one-way hash of your Google account ID, so the one-trial-per-person limit survives deleting and re-registering. No name, no email, nothing reversible or contactable.
8. Your Rights
- Access the personal data we hold about you.
- Have inaccurate or incomplete data corrected.
- Have your account and its data permanently deleted.
- Receive a copy of your data in a portable format.
- Reset or limit your advertising ID in Android settings.
Deletion you can do yourself, immediately — the steps are here. For anything else, email support@hsrutility.com.
9. Children
The app is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us data, contact us and we will delete it promptly.
10. Cookies & Tracking
The app is not a browser and sets no cookies. The services above use device and advertising identifiers instead, which you can reset or limit in Android settings. Our website is a separate matter and carries its own cookie policy, published there.
11. Changes
We may update this policy. The "Last updated" date at the top moves when we do, and a significant change is announced inside the app. Continuing to use the app after that means you accept it.
12. Contact Us
Questions about this policy, or about your data:
Consent
Using Arul means you consent to this policy. If you would rather not, stop using the app and, if you wish, delete your account — it takes under a minute from inside it.