Chitra is operated by Provis Technologies Private Limited, located at 503, Signature Tower, Jaipur, Rajasthan, 302015. This Privacy Policy explains what information the Chitra mobile application and related services (together, the “Service”) collect, why we collect it, who we share it with, and the choices and rights you have.
By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
Chitra is a business tool that helps small businesses and brands generate social media posts — captions, hashtags, and images — using artificial intelligence.
1. Information We Collect
We collect only what the Service needs to function. We do not sell your personal information, and we do not use it for advertising or cross-app tracking.
1.1 Information you provide
| Category | What it includes | Why we collect it |
|---|---|---|
| Account identifiers | Mobile phone number (used as your unique account identifier and for one-time-password sign-in) | To create and secure your account, verify it's you, and sign you in |
| Profile details | Display name, username, optional email address, optional date of birth, optional gender, preferred language, optional profile photo (avatar) | To personalise your account and address you correctly in the app |
| Brand kit information | Business name, tagline, industry, brand colours, tone of voice, font preference, brand logo image | To generate posts that match your brand's identity |
| Content you create or upload | Text prompts you type or dictate, photographs and images you upload or crop, edits you make, and the posts (captions, hashtags, images) generated for you, together with your conversation history | To produce the posts you asked for and let you return to earlier work |
| Support communications | Anything you send us by email when you contact support | To respond to your request |
1.2 Information collected automatically
| Category | What it includes | Why we collect it |
|---|---|---|
| Usage and technical data | Device type and operating system version, app version, approximate request timestamps, IP address as seen by our servers, and error or diagnostic events | To keep the Service working, prevent abuse, and diagnose faults |
| Authentication data | Access and refresh tokens issued when you sign in | To keep you signed in securely between sessions |
1.3 Voice input
If you use the microphone to dictate a prompt instead of typing it, your speech is converted to text by the speech recognition service built into your device's operating system (Apple's speech recognition on iOS, Google's on Android). Depending on your device settings, that operating-system service may transmit the audio to Apple or Google for processing under their own privacy policies.
1.4 Information we do NOT collect
To be explicit, the Service does not collect or process:
- Precise or background location data
- Contacts, calendar, call logs, or SMS messages
- Health, fitness, or biometric data
- Financial account, payment card, or bank details
- Advertising identifiers (IDFA / GAID)
We do not use third-party advertising networks, and we do not carry out any tracking across other companies' apps or websites.
2. Device Permissions
The Service requests the following permissions. Each is optional, requested only at the moment the related feature is used, and can be revoked at any time in your device settings. Declining a permission disables only that feature.
| Permission | Used for |
|---|---|
| Camera | Taking a photo to use in a post or as your brand logo |
| Photo library (read) | Choosing an existing image for a post, brand logo, or profile photo |
| Photo library (add/write) | Saving a generated post to your device gallery |
| Microphone & speech recognition | Dictating a prompt by voice instead of typing it |
| Network access | Communicating with our servers to generate and sync your posts |
3. How We Use Your Information
We use the information described above to:
- Create, verify, secure, and administer your account;
- Generate captions, hashtags, and images in response to your prompts;
- Apply your brand kit so generated posts match your brand;
- Save your posts and conversation history so you can revisit and reuse them;
- Maintain, troubleshoot, secure, and improve the Service;
- Detect, prevent, and address fraud, abuse, and violations of our terms;
- Communicate with you about your account, including sending one-time passwords and service notices;
- Comply with applicable law and enforce our legal rights.
We do not use your content to train our own AI models, and we do not sell, rent, or trade your personal information to anyone.
4. Artificial Intelligence Processing
Generating a post requires sending your prompt, and where relevant your brand kit details, uploaded image, and conversation text, to OpenAI and other third-party AI model providers through our AI service. When an OpenAI model is used, we send the prompt text, any uploaded image, and the relevant brand-kit fields (such as business name, logo, colour palette, and tone preferences) to OpenAI's API so the model can generate the requested caption, hashtag set, or image and return it to us.
The AI providers we currently use are: OpenRouter (which routes our requests to the underlying model providers, including OpenAI).
These providers process the data solely to return a generated result to us. We select providers that contractually commit not to use data submitted through their business APIs to train their models. We do not send them your phone number, profile details, or account identifiers beyond what is needed to fulfil the request, and we do not use your content for advertising or general model training.
5. Payments and Subscriptions
5.1 Plans and Pricing
Chitra offers three ways to generate posts:
- Free plan — every account gets a limited number of posts per week at no cost.
- Pay-as-you-go credit bundles — a one-time purchase of a fixed number of image credits, drawn on only once your free weekly allowance (or active subscription allowance) is used up for that period.
- Auto-renewing subscription — an optional recurring plan that replaces the free weekly allowance with a higher monthly posting limit for as long as it stays active.
Plan and bundle details — including title, price, and what each includes — are displayed in the app and on the app store listing before purchase.
5.2 Payment Processing
Who processes your payment depends on your platform:
- Android: card, UPI, net-banking, and wallet payments are processed directly by Razorpay, our third-party payment gateway, under Razorpay's own privacy and security policies.
- iOS: payments are processed by Apple (App Store) under Apple's own privacy policy, as required by Apple's guidelines.
Chitra does not collect, store, or have access to your credit card number, UPI ID, bank account details, or other full payment credentials — these are handled entirely by Razorpay's or Apple's payment systems.
We receive limited purchase-related information from Razorpay/Apple to verify and activate your plan, such as:
- Transaction/order ID and payment status
- Product or plan ID of the purchase
- Purchase, renewal, and expiration timestamps
This information is used solely to activate your plan entitlements (posting limits or credits) and is linked to your Chitra account.
5.3 Auto-Renewal (Subscriptions)
The auto-renewing subscription renews automatically each billing period unless cancelled before the renewal date. On Android, renewal charges are collected by Razorpay through the recurring payment authorization you set up at purchase; you can cancel anytime from within the app, which stops future renewals without affecting the access you've already paid for in the current period. On iOS, renewals are handled by Apple through your Apple ID account, and you can manage or cancel your subscription anytime in your Apple ID account settings. Pay-as-you-go credit bundles are one-time purchases and do not auto-renew.
5.4 Pay-As-You-Go Credits
Credits from a pay-as-you-go bundle are added to your account and drawn on only after your free weekly allowance (or active subscription allowance) is used up. Unlike the free plan or subscription, bundle credits don't reset on a weekly or monthly cycle — instead, each purchase's credits remain usable for 6 months from the date of that purchase, after which any unused portion of that purchase expires. Expired credits are not refunded or reactivated.
5.5 Refunds
Refund requests for purchases made on iOS (App Store) are handled by Apple per their refund policy. Refund requests for purchases made on Android (via Razorpay) are handled by Chitra directly, in compliance with applicable consumer protection law — contact us at info@chitraai.in and we will assess your request. We do not guarantee refunds for a partially used subscription period or a partially used credit bundle.
6. How We Share Information
We share personal information only in these circumstances:
| Recipient | Purpose |
|---|---|
| AI model providers | To generate the captions, hashtags, and images you request (Section 4) |
| Cloud hosting and storage providers | To host our servers, database, and stored images |
| Communication providers | To deliver one-time passwords and account notifications |
| Professional advisers | Lawyers, accountants, and auditors, where reasonably necessary |
| Legal and safety recipients | Where required by applicable law, court order, or a valid request from a public authority; or where necessary to investigate fraud, protect our rights, or protect the safety of any person |
| A successor entity | In connection with a merger, acquisition, financing, or sale of assets — you will be notified of any such change and of any resulting change to this policy |
All service providers are bound by contract to process data only on our instructions and to protect it appropriately.
We do not sell your personal information, and we do not share it for advertising or cross-context behavioural advertising purposes.
7. Data Storage and Security
Your account and content are stored on servers operated by us or our hosting providers.
Security measures we apply include:
- All network traffic between the app and our servers is encrypted in transit using HTTPS/TLS;
- Authentication tokens are stored on your device in the operating system's secure store — the iOS Keychain or the Android Keystore — not in plain text;
- Access to production systems and administrative tools is restricted to authorised personnel;
- Stored access credentials are encrypted at rest.
No method of transmission or storage is completely secure. While we work to protect your information using commercially reasonable safeguards, we cannot guarantee absolute security.
8. Data Retention
We retain your personal information for as long as your account remains active, and afterwards only as long as necessary for the purposes described in this policy or as required by law.
- Posts and conversations are retained until you delete them or delete your account.
- Uploaded images and brand logos are retained until you remove them or delete your account.
- Account records are deleted or irreversibly anonymised following an account deletion request.
- Aggregated or de-identified data, which can no longer be linked to you, may be retained indefinitely for analytics and Service improvement.
- Where law requires us to retain certain records, we retain only what the law requires, for only as long as it requires.
9. Your Rights and Choices
You can exercise the following at any time:
| Right | How to exercise it |
|---|---|
| Access and correct your profile | Open Settings → Profile in the app to view and update your details |
| Update or remove brand information | Open Settings → Business/Brand profile in the app |
| Delete individual posts | Delete any post or conversation from within the app |
| Delete your entire account and data | Open Settings → Delete Account in the app, or email info@chitraai.in from your registered contact address |
| Withdraw a permission | Revoke camera, photo, or microphone access in your device's system settings |
| Obtain a copy of your data | Email info@chitraai.in and we will provide the personal information we hold about you |
| Complain to a regulator | You may lodge a grievance with us first (Section 13) and, if unresolved, with the competent data protection authority |
Under India's Digital Personal Data Protection Act, 2023, you additionally have the right to access, correct, complete, update, and erase your personal data, the right to grievance redressal, and the right to nominate another individual to exercise your rights in the event of death or incapacity.
10. Children's Privacy
Chitra is a business tool intended for use by business owners and marketers. The Service is not directed to children, and we do not knowingly collect personal information from children under the age of 13 (or the equivalent minimum age in your jurisdiction).
If you believe a child has provided us with personal information, please contact info@chitraai.in and we will delete the information and the associated account promptly.
11. International Data Transfers
The Service is offered in India. Some of our service providers, including AI model providers and cloud hosting providers, may process data on servers located outside India. Where personal data is transferred outside India, we take reasonable steps to ensure it receives a comparable level of protection through contractual safeguards with those providers, consistent with applicable law.
12. Contact and Grievance Redressal
For any question, request, or complaint about this Privacy Policy or your personal data, contact:
Provis Technologies Private Limited
Grievance Officer: Vivek Sharma
Email: info@chitraai.in
Address: 503, Signature Tower, Jaipur, Rajasthan, 302015
We will acknowledge grievances within 72 hours and aim to resolve them within 30 days.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above and publish the new version at this URL. If the changes are material, we will additionally notify you in the app or by a message to your registered contact before the changes take effect. Your continued use of the Service after the changes take effect constitutes acceptance of the revised policy.