NepCal Privacy Policy

1. Information stored on your device

The app stores the following information locally to remember your choices and support offline use:

• App and game language, time-zone preference, and the last selected calendar month.
• Your selected zodiac sign. NepCal does not ask for your birth date, birth time, or birth location to display rashifal.
• News bookmarks and liked radio stations and audiobooks.
• Local game records, including best results in Memory Match and Brain Switch.
• Downloaded calendar and other content caches, content versions, and refresh timestamps.
• Calendar information and display preferences shared with NepCal's home-screen widget through your device's app/widget storage.

These saved preferences, bookmark lists, like lists, and local game records are not uploaded to a NepCal account or cloud profile. Reading, playback, and game-session reporting are separate and are described below. Device or operating-system backup services may include app data according to your backup settings.

Dates entered for conversion are processed on your device. Rashifal is downloaded for all signs; your saved sign selection is applied locally.

2. Information received by our services

Requests and technical information

When the app connects to our servers, we receive your IP address, request time, requested resource and query parameters, and technical request headers such as a user-agent string when present. Depending on the feature, requests include interface language, news categories, pagination, or other content selections. Hosting infrastructure may record request metadata, response status, and operational errors in access or error logs. This also applies when you visit this page.

News activity

Opening news content can send an article or story-group identifier and the news language to our server. We record read events and their timestamps to calculate readership and help rank news. The current app does not send a NepCal user-account ID or a persistent device ID with these read events.

Audio playback

Radio playback can report a randomly generated playback-attempt identifier, station identifier, interface language, start/ready/failure events, event times, and a failure category. Audiobook playback can report the same types of information together with book and chapter identifiers and a completion event. These records help measure content use and playback reliability. They do not contain microphone recordings.

Game sessions

Bagh Chal and Memory Match report a randomly generated session identifier, language, start and end times, session duration, moves, and whether a game was completed or abandoned. Bagh Chal additionally reports difficulty, chosen side, winner/result, goat and tiger counts, and the reason the session ended. Memory Match additionally reports board size, matched pairs, and the reason the session ended. Brain Switch's best-time record is stored locally and is not reported through these game-session APIs.

Request-derived identifiers

News, audio, and game activity records can contain keyed hashes derived from the request's IP address and user-agent string for rate limiting and abuse prevention. The activity tables store these hashes rather than the original values, although hosting logs may retain original request metadata. A hash is a pseudonymous identifier: it can associate requests and should not be treated as fully anonymous. Playback and game identifiers identify an attempt or session rather than a user account.

Information you choose to send

If you email us, we receive your email address and the message, attachments, and other details you provide. Please send only the information needed to explain your question or request.

3. How we use information

• Deliver content, remember settings locally, refresh caches, and provide calendar and widget functionality.
• Calculate news readership and content popularity, and understand use of games and audio features.
• Diagnose playback failures and service errors and improve reliability.
• Validate app requests, limit duplicate or excessive events, and protect the service against fraud and abuse.
• Respond to support and privacy requests and meet applicable legal obligations.

We do not sell or rent personal information, use it for targeted advertising, or combine app activity with other companies' data for advertising. NepCal does not integrate Firebase Analytics, Firebase Crashlytics, or an advertising SDK. Our own server-side activity reporting described in this policy still occurs.

4. App and device security checks

NepCal uses Firebase App Check to help verify that protected API requests come from a legitimate app. Android uses Google Play Integrity. iOS uses Apple App Attest, with DeviceCheck as a fallback.

These services process app/device attestation information and associated technical information to assess app or device integrity. Google or Apple validates the relevant attestation material. Firebase issues an App Check token, which the app sends with requests to our API for validation. These checks are for security and do not create a NepCal user account.

Firebase states that App Check does not retain attestation material; the attestation providers apply their own terms. Token lifetimes and any provider retention depend on the service and configuration. Learn more in Firebase's privacy and security information, the Google Privacy Policy, and the Apple Privacy Policy.

5. External content and services

News sites, images, radio, and audiobooks

The app can load images from external hosts, open original news pages in an in-app web view, and stream audio directly from third-party providers. These providers receive connection information such as your IP address, requested content, request time, and technical headers. Radio providers vary by station and can include broadcaster-operated servers, Zeno, and SoftNEP. Audiobook hosts include Internet Archive and other hosts associated with the selected recording.

Original news pages may run JavaScript and use cookies, local storage, analytics, advertisements, or other third-party resources under the publisher's own policy. This can occur inside the app's web view even though NepCal itself has no advertising SDK. Review the relevant publisher or stream host's privacy policy before using its content. Internet Archive's policy is available at Internet Archive: terms and privacy policy.

Sharing and store reviews

If you choose to share NepCal, a news link, or a game achievement, the app passes the selected text, link, or locally generated image to your device's share sheet. The app or recipient you choose then receives that content under its own privacy terms. We do not access your contact list to select recipients. If you open a store review page, Apple or Google handles the review and any store-account information.

Content generation and data sources

Our server retrieves published calendar-related content, news, and market information from external sources. It also uses OpenAI to generate daily rashifal from published source material and date/sign information. This generation does not send your saved zodiac selection, birth details, bookmarks, reading activity, playback activity, game sessions, or support messages to OpenAI.

This privacy-policy document uses no JavaScript, analytics, tracking pixels, external fonts, or embedded third-party media. Server access logging can still occur.

6. When information is shared

Information may be available to:

• Service providers: hosting, infrastructure, email, and security providers as needed to operate and protect NepCal or answer your requests. Providers processing personal information on our behalf must protect it through appropriate confidentiality and security obligations and use it only for the authorized service.
• Content providers and services you select: as described in section 5, when your device requests their content or you choose to share or review.
• Authorities or other legally entitled parties: where disclosure is required by law or necessary to address fraud, security incidents, or protect legal rights.

We do not publish individual reading, playback, or game-session records as public user profiles or leaderboards.

7. Device access and permissions

NepCal uses network access for online features, background audio capabilities for playback and media controls, and local storage for settings, caches, and temporary sharing images. Android wake-lock and media foreground-service capabilities support playback; boot-related functionality refreshes the Today widget after a restart.

The current app does not request access to your precise GPS location, contacts, camera, microphone, SMS, or call logs. Calendar views and date conversion do not read or write your device's personal calendar. The local time-zone option uses the device's clock/time-zone setting; it does not require GPS. Displaying currency and precious-metal rates does not involve access to your bank account or payment details.

8. Retention and deletion

On your device: Settings, likes, and game records generally remain until changed or until app data is removed. News bookmarks expire after 30 days and expired entries are removed when the bookmark store is next loaded. Cached content is refreshed or replaced as the app updates it. Temporary sharing files may remain until removed by the app, operating system, or deletion of app data.

On our servers: News-read, playback, and game-session records do not currently have an automatic time-based deletion schedule. They remain until removed through an operational cleanup or an applicable deletion request. Hosting logs and backups follow the hosting provider's configuration and retention practices. We assess retention based on service operation, reliability analysis, abuse prevention, and legal requirements. Support correspondence is kept as needed to handle the request and any related follow-up or legal obligation.

Deletion requests: Contact us at admin@nepcal.com to request deletion of personal information we hold. We will assess and act on the request under applicable law. Because no NepCal account identifies your activity records, we may need limited details such as the approximate date/time and feature used to locate records. We may be unable to identify a particular record reliably. We will explain any identification limitation or lawful reason for retaining information.

Removing the app does not delete activity already received by our servers or information held by external services. Deletion from active systems may not immediately remove copies in retained backups; those copies remain subject to the applicable backup cycle. Operating-system backups and external publishers' data require controls or requests directed to those services.

9. Your choices and privacy rights

You can change language, time zone, and zodiac selection in the app, remove news bookmarks, and unlike radio stations or audiobooks. Android's app-storage controls can clear local app data. On iOS, deleting the app removes its app data; offloading the app can retain data. Shared widget storage or restored device backups may require separate cleanup through device controls.

You can choose not to open external news pages, stream audio, share content, or send support messages. The bundled calendar supports offline use, although online updates and other network features need a connection. The current app has no separate switch to disable server-side news-read, audio-playback, or game-session reporting while continuing to use those features online.

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, or a portable copy of your personal information; object to certain processing; and complain to a competent data-protection authority. Where processing relies on consent, you may withdraw it without affecting prior lawful processing. Email the privacy contact below to exercise these rights. We may request only the information reasonably necessary to verify and handle your request.

Where a legal basis is required, we process information to provide services you request, for legitimate interests in maintaining and securing the service and understanding feature reliability and use, to meet legal obligations, or on the basis of consent where required. This policy does not itself replace a consent request where one is legally required.

10. Security

The released app uses HTTPS for requests to NepCal's API, App Check validation for protected requests, keyed hashes in activity records for selected request metadata, and access controls for backend administration. We use reasonable measures to protect information, but no storage or transmission method can guarantee complete security.

External radio or other media streams may use HTTP where the source supplies that format. Such connections do not provide the same transport encryption as HTTPS. The provider controls the stream's security; avoid using a stream if you are uncomfortable with its connection or privacy practices.

11. International processing

NepCal and its providers may process information in countries other than where you live. Google, Apple, hosting providers, and external content services operate internationally. Where applicable law requires safeguards for an international transfer, we use the required safeguards. Contact us for information about transfers relevant to your personal information.

12. Children's privacy

NepCal is a general-audience calendar and utility app, not a service specifically directed to children under 13. We do not knowingly collect personal information from children under 13, or below a higher age where applicable law requires parental authorization, without the required authorization. We do not collect dates of birth to determine users' ages. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action, including deletion where required.

13. Changes to this policy

We may update this policy when features, providers, data practices, or legal requirements change. The updated version will be published at nepcal.com/privacy-policy.html with a revised date. We will provide additional notice and obtain consent for material changes where required by applicable law.

14. Contact the developer

For privacy questions, data requests, or concerns about this policy, contact:

Please use the subject "NepCal privacy request" and describe your request without including unnecessary sensitive information.