Privacy Policy
Last updated: 13 July 2026
This Privacy Policy explains what personal data BombayBros ("we", "us") processes when you use the BombayBros app ("the App") or bombaybros.com, why, on what legal basis, who we share it with, and your rights. It should be read together with our Terms & Conditions.
1. Who is responsible (data controller)
BombayBros, operated by Anand Vyas (India). Contact for any privacy question or to exercise your rights: anand@bombaybros.com.
2. Our privacy model in one line
BombayBros has no user accounts and stores no plan, log or document data on our servers. Your plans, logs and notes live on your device. Data leaves your device only when you choose a paid action (processing a document, or running an AI analysis), and only the content needed for that action is sent — to our backend and to our AI provider — to return your result.
3. What data we process, why, and our legal basis
| Data | When | Why | Legal basis (GDPR) |
|---|---|---|---|
| Your plan document (the file, or text extracted from it) | When you process a document into a plan | To read it with AI and return a structured plan | Performance of your requested service — Art 6(1)(b); and, as it contains health-related data, your explicit consent — Art 9(2)(a) |
| Your logged data (completions, skips, notes, water, chosen options) for the period you select, plus your plan context | When you run an AI analysis | To produce a descriptive analysis of your logged data | Art 6(1)(b) + your explicit consent for health data — Art 9(2)(a) |
| Purchase / transaction identifiers | On each paid action | To verify the purchase and prevent a single purchase being used more than once | Legitimate interests (fraud/abuse prevention) — Art 6(1)(f) |
| On-device data (plans, logs, notes, reminders) | While you use the App | To run the App's core features on your device | Art 6(1)(b) — stays on your device; not transmitted to us |
We do not use analytics/tracking SDKs, advertising identifiers, or profiling, and we do not sell your data.
4. Explicit consent for health data
Your plan and logs are health-related (special-category) data. We process them only after you give explicit, specific consent — which you do when you confirm a paid action after being told the content will be sent for AI processing. You can withdraw consent at any time by not using the paid features; withdrawal does not affect processing already carried out. (Because we do not retain your content, there is generally nothing further to delete on our side — see Retention.)
5. Who we share it with (processors and recipients)
We share the minimum necessary with providers who act as our data processors under data-processing agreements:
- Google (Firebase / Google Cloud) — hosts our backend, which transiently receives and forwards your content. Our backend stores only transaction identifiers plus, for up to 24 hours after a paid action completes, the generated result — held solely so your app can retrieve it if your connection dropped before delivery (so one purchase always yields your result, never a second charge). It is deleted automatically after that.
- Anthropic — provides the AI (Claude models) that processes your content and returns the result. Anthropic processes the content to generate the output and, under its commercial API terms, does not use it to train its AI models. It may retain the content for a limited period (currently up to ~30 days) for safety and abuse-prevention purposes under its own terms, after which it is deleted.
Separately, Apple and Google Play process your payment as independent controllers under their own privacy policies; we do not receive your payment-card details.
6. International data transfers
Our providers may process your data outside your country, including in the United States. Where data is transferred out of the EEA/UK, it is protected by appropriate safeguards (such as the European Commission's Standard Contractual Clauses and the providers' data-processing agreements). You can request details of these safeguards using the contact above.
7. How long we keep it
- We do not store your plan, log or document content on our servers; it is processed transiently to return your result and not retained by us — except that the generated result of a paid action is kept for up to 24 hours so that a lost connection cannot cost you your purchase (your app can re-request the result without a second charge), after which it is deleted automatically. We keep transaction identifiers for as long as needed to prevent duplicate charges/abuse.
- Anthropic does not use your content to train its models and retains submitted content only for a limited period (currently up to ~30 days) and then deletes it, per its terms.
- On your device, your plans and logs remain until you delete them or uninstall the App. Deleting a plan removes that plan and all of its logged data; uninstalling the App removes all App data from your device — nothing is retained by us and no cloud backup is kept. (When you migrate to a new phone, your data may move directly device-to-device as part of the platform's encrypted transfer — it still never sits in a cloud backup.)
8. Your rights
Subject to applicable law (including the GDPR/UK GDPR for users in the EEA/UK), you have the right to: access your data; rectify it; erase it; restrict or object to processing; data portability; and to withdraw consent. Because most of your data lives on your device, you can exercise access, rectification, portability (via export) and erasure (delete a plan and its logs in the App, or uninstall the App to remove everything) directly at any time. For anything we or our processors hold, contact anand@bombaybros.com; we will respond within the time required by law. You also have the right to lodge a complaint with your local data-protection supervisory authority.
9. Children
The App is not intended for anyone under 18. We do not knowingly process data from children.
10. Security
Data in transit to our backend and providers is encrypted (HTTPS/TLS). Our backend holds no plan or log content and no account credentials. On-device data is protected by your device's operating-system security.
11. Changes
We may update this Policy. Material changes will be reflected here with a new "Last updated" date and, where required, surfaced in the App.