Privacy Policy

1. Who we are

Jay Tech Labs (“we”, “us”) builds and operates AI-powered software and SaaS products. We are based in India. Under India’s Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the data described here; under the GDPR and comparable laws we are the controller. The exception is software we build and operate on behalf of a business client — there, that client is the controller (Data Fiduciary) and we act as their processor under a separate agreement.

Privacy contact: privacy@jaytechlabs.com.

2. What we collect

We do not buy personal data from brokers, and we do not collect special-category or sensitive data unless you enter it yourself in a field intended for it (for example, an injury note).

3. Why we use it

Under the DPDP Act we rely on your consent, and on “certain legitimate uses” such as responding to a request you made to us. Where the GDPR or a similar law applies, our legal bases are: performance of a contract, legitimate interests (security and product improvement), consent (marketing and optional analytics), and legal obligation.

4. AI features and your content

Some features use machine-learning models to summarise, forecast or flag patterns in the data you enter. We do not use your customer content to train third-party foundation models, and we do not sell it. Where a feature sends content to a third-party model provider to generate a response, that provider processes it only to return the output, under contractual terms that forbid training on it.

Model output can be wrong. Athelista’s flags are decision support for a qualified coach — they are not medical, safety or professional advice.

Panchang Calendar displays a fixed almanac compiled from a traditional printed panchang; observance dates vary legitimately between regional traditions, so it is a reference for planning and not a substitute for your own tradition or a qualified priest. It performs no calculations and uses no machine-learning models.

5. Athletes, and children under 18

Athelista is bought by coaches, trainers and clubs, who enter data about athletes — some of whom are minors. India’s DPDP Act treats anyone under 18 as a child and requires verifiable consent from a parent or lawful guardian; where the GDPR applies the threshold is lower (13–16 depending on the country), and we apply whichever rule is stricter for the person concerned.

If you record data about a minor, you confirm you hold the legal authority or parental consent to do so, and you remain responsible for what you enter. Records identified as belonging to a minor are handled with stricter defaults: reduced retention, no marketing use, no behavioural tracking or advertising, and no inclusion in de-identified research sets.

We do not knowingly collect data directly from children. If you believe a child’s data reached us without authority, write to privacy@jaytechlabs.com and we will delete it.

6. Panchang Calendar

Panchang Calendar is a standalone almanac app. It is the one product on this page from which we collect nothing at all.

7. Who we share it with

We share personal data only with service providers who help us run the product, under contract and only for that purpose: cloud hosting and storage, error and analytics tooling, email delivery, payment processing, and customer-support tooling. We also share data when required by law or valid legal process, and if our business is transferred we will notify you before your data becomes subject to a different policy.

We do not sell personal information and do not share it for cross-context behavioural advertising.

8. Security

Data is encrypted in transit (TLS) and at rest. Access is limited to staff who need it, on least-privilege principles, with logging. We keep backups, test restores, and run a documented incident-response process — if a breach affects you we notify you and the relevant regulator within the timeframes the law requires, including the notification duties under the DPDP Act.

No system is perfectly secure; choose a strong, unique password and enable two-factor authentication where offered.

9. How long we keep it

Account and content data are kept while your account is active. After you close it we delete or de-identify your content within 30 days, except where we must keep records longer for tax, accounting or legal-defence reasons. Backups roll off within 90 days. Enquiries and support emails are kept for 24 months. Aggregated statistics that can no longer identify anyone may be kept indefinitely.

10. Your rights

Depending on where you live you may have the right to access, correct, complete, update, erase or port your data, to restrict or object to certain processing, to nominate someone to exercise your rights if you die or become incapacitated (a DPDP Act right), and to withdraw consent at any time.

You can export your data from the product at any time, or ask us. Write to privacy@jaytechlabs.com — we respond within 30 days and never charge for a first request. If we operate the product for a business client, send your request to them and we will assist.

If you are not satisfied with our answer, raise it with our Grievance Officer at grievance@jaytechlabs.com (see §14). If it is still unresolved you can complain to the Data Protection Board of India, or to your local data-protection authority.

11. Cookies and similar technologies

This website (jaytechlabs.com) sets no cookies and runs no third-party analytics, advertising or tracking scripts. Fonts and page assets are served from our own server, so loading a page here does not tell anyone else that you visited.

Our products are different: signing in to Athelista sets strictly necessary cookies for your session and for security, and optional analytics cookies run only if you consent in-product. Athelista’s mobile app uses device identifiers for crash reporting. Panchang Calendar does not: it has no account, no analytics and no crash reporting, and stores your preferences only on your device.

12. Where your data is stored

Our website and primary application data are hosted in India. Some service providers — for example error reporting, email delivery and model providers — process data in other countries. Where that happens we rely on approved transfer mechanisms such as Standard Contractual Clauses or an adequacy decision, contractually restrict what the provider may do, and apply additional safeguards where needed. Transfers are made only to countries not restricted by the Government of India under the DPDP Act.

13. Changes to this policy

We update this policy as our products change. If a change materially affects how we use your data we will notify you by email or in-product at least 14 days before it takes effect, and the “last updated” date above always reflects the current version.

14. Contact us

Privacy questions and data requests — access, correction, erasure, export or withdrawing consent — go to privacy@jaytechlabs.com. We acknowledge every request and respond within 30 days.

General enquiries: hello@jaytechlabs.com · contact form