1. What We Collect and Where It Lives
1.1 Data stored only on your device
The following data is stored exclusively in your device's local storage (encrypted Hive database) and is never transmitted to any server:
| Data | Where stored | Who can access |
|---|---|---|
| Your name (if provided) | Your device only | Only you |
| Saved properties and addresses | Your device only | Only you |
| Uploaded documents | Your device only | Only you |
| Reminders and notification settings | Your device only | Only you |
| App preferences | Your device only | Only you |
| Search history | Your device only | Only you |
| Tax estimates and calculations | Your device only | Only you |
| Community data cache | Your device only | Only you |
We have no access to any of this data. We cannot retrieve it, view it, or share it.
1.2 Google Drive Backup (optional)
When you choose to back up your data to Google Drive, 2scale encrypts all data using AES-256 encryption on your device before uploading. The encrypted file is stored in your personal Google Drive app folder — only accessible to you. 2scale cannot read, access, or share your backup. Your Google account credentials are never stored by 2scale.
1.3 Data that leaves your device
The following data leaves your device only in specific circumstances you initiate:
| What | When | Where sent |
|---|---|---|
| Your AI question text | When you tap Ask in 2scale AI | Google Gemini API |
| Extracted document text | When you use AI document analysis | Google Gemini API |
| Area name searched | When fetching area ads | 2scale Firebase (area name only) |
| Anonymous area rating + comment | When you submit community data | 2scale Firebase |
| Anonymised device identifiers | Free version only | Google AdMob |
2. Data We Do Not Collect
2scale does not collect, store, or transmit:
- Your name or identity
- Your phone number or email address
- Your location or GPS data
- Your property documents or their contents (beyond AI analysis you initiate)
- Your property details or financial information
- Crash analytics or error logs
- Usage analytics or behavioural data
- Device identifiers (except anonymised AdMob identifiers in free version)
- Any biometric data
3. Google Services We Use
Google Drive API
Used solely when you initiate a backup. 2scale requests access to the drive.appdata scope — a private, app-specific folder in your Google Drive that only 2scale can access. We upload your AES-256 encrypted backup file. We cannot access any other files in your Drive.
Google Gemini API
Used when you use 2scale AI or AI document analysis. Only your question text or extracted document text is sent. No personal data, property details, or original files are transmitted.
Firebase Firestore and Storage
Used for anonymous community area submissions and distributing aggregated community data. No personal data is stored.
Google AdMob
Used in the free version to serve advertisements. To avoid AdMob: upgrade to 2scale AI subscription (removes all ads).
4. Data Security
All sensitive data — properties, documents, and reminders — is encrypted at rest using AES-256 via the Hive encrypted database. The encryption key is stored in your device's secure hardware keystore (Android Keystore / iOS Secure Enclave), never in plain text.
When you back up to Google Drive, data is encrypted on your device before upload. The decryption key never leaves your device.
5. Data Retention and Deletion
All personal data is stored only on your device. It is deleted when you:
- Delete specific items within the app
- Use Settings → Delete all data (permanently wipes everything)
- Uninstall 2scale
We cannot recover deleted data. Back up important documents independently.
Community submissions are stored on Firebase and retained indefinitely as part of the aggregated knowledge base. Individual submissions cannot be deleted once aggregated.
6. Your Rights
Under India's Digital Personal Data Protection Act 2023, you have the right to:
- Access: Since we hold no personal data on our servers, there is nothing to disclose.
- Correction: Update your data directly within the app.
- Deletion: Settings → Delete all data, or uninstall the app.
- Withdraw consent: Disable AI features, stop contributing community data, or delete the app at any time.
7. Children's Privacy
2scale is not intended for users under 18. We do not knowingly collect data from minors.
8. Changes to This Policy
When this policy is updated, the version number and effective date will change and you will be notified in the app. We will not make changes that reduce your privacy protections without clear notification.
9. Contact
📧 contact@vastuapp.in
We aim to respond to all privacy enquiries within 7 business days.