MyAlly Privacy Policy

MyAlly (myally.in) is a product of Cosmoneural (cosmoneural.com), an Indian software company. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025, Cosmoneural is the "data fiduciary" for MyAlly — the entity responsible for deciding how and why your personal data is processed.

MyAlly is in early access. This policy describes how the app works today. If something changes, we will update this page before it does.

One thing to be clear about up front: MyAlly is a technology facilitator and your disclosed agent. We are not a law firm. We do not give legal advice, we do not guarantee outcomes, and we never file anything without your confirmation. Every filing is made in your own name, on official government channels such as CPGRAMS, RTI Online, and municipal and sector portals.

Questions about this policy: support@cosmoneural.com. The name and contact details of our grievance officer will be published on this page, as the DPDP Act requires.

We collect data for specific purposes, with your consent for each purpose. You can withdraw that consent at any time, as easily as you gave it. Here is the full list.

• Your account: your phone number (for OTP login) or your Google email. Used only to sign you in and keep your account secure. That is all signup takes — no Aadhaar, no KYC, no documents.
• Your filings: your name, address, problem description, photos, and location. We ask for these per filing, only when the government form you are filing actually requires them. They are used only to prepare your application and file it with the responsible authority. They go on the government application — not into a marketing profile.
• Tracking your cases: registration and acknowledgment numbers, application status, and deadlines. Used to keep your case ledger, remind you when a response is due (for example, the CPGRAMS 21-day norm or the RTI 30-day reply period), and help you with appeals and escalation.
• Karma and leaderboards: the photo re-check used to verify a fix, and — only if you opt in — a display name for ward and city leaderboards. Karma points are earned when a report is accepted and the fix is verified, never for filing volume.
• Optional analytics: content-free usage events, such as "a filing was completed" or "a screen was opened". These help us fix what is broken in the app. They never include the content of your grievance.

Drafts are saved on your device first and synced when you are online, so the app works even with patchy connectivity.

Some things are off the table by design, not just by policy.

• Aadhaar numbers. We never ask for them. If an Aadhaar number appears in a document you upload, we redact it.
• Government portal passwords. We never store them. In the assisted filing flow, you complete the official portal's own OTP or captcha yourself — your credentials stay between you and the government.
• Ad profiles. The content of your grievances is never sent to advertising or analytics services. We do not build profiles of you for marketing.

All your data is stored and processed in India, in the Google Cloud Mumbai region (asia-south1).

We use Google Cloud and Firebase as data processors. They store and process data on our instructions, inside India, and have no independent right to use it. We do not move your data outside India.

When you snap a photo or describe a problem by voice or text, AI identifies the issue, works out the responsible authority (municipal, state, or central), and prepares the complaint, grievance, or RTI application.

This processing happens on India-region AI model endpoints only. Your grievance content never leaves those India-region endpoints, and it is not used to train third-party AI models.

AI prepares a draft — you make the decisions. You review the draft, and nothing is filed until you confirm it.

The short version: the government authority you choose to file with, and no one else for their own purposes.

• Government authorities: when you confirm a filing, your application — with the details the form requires — goes to the relevant authority through its official channel, in your name. That is the whole point of the app.
• Processors: Google Cloud and Firebase, as described above, acting only on our instructions.
• Legal requirements: we may disclose data if Indian law requires it, and only to the extent it requires.

We do not sell your data. We do not share it with advertisers or data brokers. Ever.

You can delete your account and data from within the app. When you do, we remove your personal data from our systems.

One honest caveat: applications you have already filed live with the government, in its records, under its own rules. Deleting your MyAlly account removes our copy — it cannot recall an RTI application or grievance you have already submitted to an authority.

Specific retention periods for each category of data will be set out here once finalised.

As a data principal under the DPDP Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Correct or update your data.
• Erase your data, subject to any legal retention requirements.
• Withdraw consent for any purpose, at any time, as easily as you gave it. The app will keep working with whatever you have consented to.
• Nominate another person to exercise your rights if you are unable to.
• Raise a grievance with our grievance officer, whose contact details will be published on this page.
• Complain to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these rights, write to support@cosmoneural.com or use the controls in the app.

MyAlly is for adults. You must be 18 or older to use the app at launch. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, write to support@cosmoneural.com and we will delete it.

When we change this policy, we will post the new version here with its effective date, and tell you in the app before material changes take effect.

Two changes we can already see coming, so you are not surprised later: MyAlly is free during early access, and paid expert-assistance tiers may come later; and optional DigiLocker verification may be offered later as an opt-in upgrade. If either changes how we handle your data, we will update this policy first and ask for your consent where the law requires it.