Privacy policy.

1. Who we are

DemoCrez is operated by Nayaha India Techno Private Limited (CIN: U92490MP2021PTC055317), registered at 3, Clerk Colony, Opp. Readymade Complex, Nanda Nagar, Indore, Madhya Pradesh – 452011, India. For the purposes of Indian data protection law we are the data fiduciary in respect of the information described below.

This policy covers the Democrez mobile application, this website, and sessions run with institutions.

2. What we collect

The list is short, and its shortness is the point.

• A phone number, for verification. Collected once, to confirm that a person is distinct and can answer a card only once. It is not attached to any answer.
• Your responses. Which option you chose and the share you predicted. These are appended to an anonymous record with no identifier linking them to you.
• Operational data needed to run the service. The minimum required for the application and website to function and to remain secure.

3. What we do not collect

Every item here is absent by construction rather than by policy. None is a setting that could be switched on for a particular user or institution.

• Your name, email address, date of birth, gender, or any demographic detail
• Any link between you and the answers you gave
• Your contacts or address book
• Your location
• Advertising identifiers, or any identifier used for cross-service tracking
• Behavioural detail such as typing patterns, time spent on an option, hesitation, or changed answers
• Free-form text of any kind — participants choose between written options and do not submit text

4. Why we collect it

Verification exists so that a single person cannot answer a card repeatedly and shift an aggregate. Without it, every figure the platform reports would measure persistence rather than judgment.

Responses exist because they are the product: an anonymous record of what people would do, which each person is compared against. They are not used for profiling, for advertising, or for any purpose other than producing aggregates.

5. Consent

Verification is requested with an explanation of why it is needed, before it is collected. Answering a situation is always optional; you may skip any card, and skipping is not recorded as anything.

In institution sessions, participation is explained beforehand and a participant may decline. Declining is not recorded, and no list of who took part or who declined is produced or supplied to the institution.

6. How long we keep it

Account data is retained while the account is active. After a verified deletion request, user-facing account data is deleted within 30 days; residual backups are removed within 90 days. Security, transaction and processing logs may be retained for at least 1 year or longer where required by law.

Responses are appended permanently to an anonymous record and cannot be attributed to you at any point, whether one day or ten years after they were given.

7. Who we share it with

We do not sell personal information, and we do not share it for advertising. Specifically:

• Institutions receive an aggregate report about a group. They do not receive names, phone numbers, per-participant output, or a list of who took part.
• Service providers that we rely on to operate the platform may process data on our behalf, under obligations no weaker than those in this policy.
• Legal requests would be answered with what exists. Since no record links a person to an answer, a demand for that mapping cannot be satisfied by us or by anybody else.

8. Your rights

Under Indian data protection law you may:

• Ask what we hold about you. In practice this is the verification and operational data, because nothing else is associated with you.
• Ask us to correct it. Applies to the verification detail; there is nothing else attributable to correct.
• Ask us to erase it. Your account and its verification can be removed. Responses already absorbed into anonymous aggregates cannot be withdrawn, because nothing identifies them as yours — see delete your data.
• Raise a grievance. Through the Grievance Officer named below.
• Nominate somebody to exercise these rights in the event of death or incapacity.

9. Grievance Officer

Indian law requires a named individual rather than a shared inbox.

• Name: Gourav Sharma, Director, Nayaha India Techno Private Limited
• Email: hello@democrez.com (subject “GRIEVANCE”)
• Postal address: 3, Clerk Colony, Opp. Readymade Complex, Nanda Nagar, Indore, Madhya Pradesh – 452011, India
• Process and timelines: grievance redressal

10. Children

Direct consumer accounts are for users aged 18 or above. Users under 18 may participate only through an approved institution/school programme where the institution and/or parent or guardian provides the permissions and verifiable consent required by applicable law.

11. Security

The strongest protection here is structural rather than technical: the most sensitive thing — who answered what — is not recorded, so there is no such record to secure, export or disclose. Beyond that we apply ordinary practice: encryption in transit, access limited to those who need it, and operational care.

We do not claim the platform is unbreachable, because nobody honestly can. What could be exposed in a breach is the verification layer and operational data, not a mapping between people and answers. Trust and safety

12. Changes to this policy

Material changes will be published on this page with the date on which they took effect. Because the record of readings is append-only and never edited, a quiet change in how the platform behaves is difficult to conceal even where a policy document is updated.

13. Contact

General questions about this policy: hello@democrez.com (subject “PRIVACY”). All contact routes are listed on the contact page.

Governing law: India. Effective date: 11 September 2026.