Privacy Policy

1. About this policy

The data fiduciary and operator of Decode App is Kartikay Agarwal, trading as Freedom, a GST-registered sole proprietor based in Bengaluru, Karnataka, India. Decode App is a product by Freedom. In this Policy, “Decode”, “Freedom”, “we”, “us”, and “our” refer to Kartikay Agarwal, trading as Freedom.

2. Current product status

Decode is currently an in-development mobile prototype. The current application uses deterministic local fixtures for candidate information and static test credentials. It does not currently connect to Dhan, submit orders, take payments, or persist market data. Production authentication must replace test-only access before release.

3. Information Decode may process

As production services become available and depending on the features you use, Decode may process:

• Account and authentication information: your mobile number, OTP challenge and verification status, session identifiers, and security events.
• Device and app information: device type, operating system, app version, language, diagnostics, and identifiers where permitted.
• Product activity: strategy filters, candidate views, review activity, and settings.
• Market and candidate context: market-snapshot identifiers, timestamps, strategy families, legs, quote evidence, modeled costs, margin evidence, payoff facts, gate results, and explanations delivered to the app.
• Support information: messages and files you choose to send to support.

Decode does not ask you to send passwords, OTPs, broker PINs, access tokens, payment credentials, or recovery codes to support.

4. OTP messages and login verification

Decode may send a one-time password by SMS to verify login. The OTP is used to complete the requested sign-in and protect the account. Message-delivery and security records may be processed by Freedom and its SMS infrastructure provider. Never share an OTP with anyone. The planned transactional format is:

{#var#} is your OTP for Decode App. Message ID: [DECODE_PRODUCTION_HASH]

5. How information is used

• authenticate accounts and maintain revocable sessions;
• display and explain strategy candidates and review screens;
• maintain service security, reliability, and fraud prevention;
• respond to support and grievance requests;
• comply with applicable law and enforce product terms.

6. Sharing and service providers

Information may be shared with processors only as required to operate a production feature, including hosting, database, authentication or SMS delivery providers identified when those services are implemented. Because the current prototype uses local fixtures and static test authentication, this Policy does not claim a production provider that is not yet present. We may also disclose information where required by law or needed to protect users and the service. We do not sell personal information.

7. Retention and security

Account and product information will be retained only for as long as reasonably needed to provide Decode, meet legal obligations, resolve disputes, and protect the service. Diagnostic and security logs may be retained for limited operational periods. We use safeguards designed to protect information, but no storage or transmission system is completely secure.

8. Your choices and rights

Depending on applicable law, you may request access to, correction of, or deletion of your personal information; withdraw consent where processing relies on consent; or raise a grievance. Email support@freedomapp.in. We may need to verify your identity before completing a request.

9. Children, international processing, and updates

Decode is not directed to children under 18. Production service providers may process information outside your state or country under applicable safeguards. We may update this Policy as Decode’s production architecture or legal requirements change; the updated date will be shown above.

10. Contact