ViRey — Privacy Policy
Version 1.0 · Last updated: 28 October 2026 Applies to the ViRey™ mobile app and the website virey.in.
1. Who we are
ViRey is run by RED AND DAD VENTURES, a partnership firm, at 9th floor, FLAT 904 SR. NO 42/2, DWARKA SAI, COMMERCIAL WING, Kalewadi Rahatani Road, Godambe Chowk, Rahatani, Pimpri Chinchwad, Pune, Maharashtra 411017.
Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy.
Grievance Officer and privacy contact: Vijay Duseja, Partner · virey@redndad.com · the address above. Every email to us gets an automatic acknowledgement with a ticket number, and we resolve it within 7 business days.
2. Who may use ViRey
ViRey is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete its data.
3. What we collect, and why
3.1 What you give us
| What | Why |
|---|---|
| Your Google sign-in — email address and Google's account ID | To create and secure your account. Your account is tied to the Google account ID, so it follows if the email address on that Google account changes |
| Bills, invoices and warranty documents you add | To read the product, date, price and warranty from them, and to keep them for you to open later |
| Photographs of items | To identify an item when there is no bill, and to illustrate a listing if you choose to sell |
| Details you type — item names, dates, prices, condition, and your PIN code | To build your list of things and estimate their value. Your PIN code also decides the GST on your invoice when you buy a pack — we ask for it at your first purchase if we don't have it |
| Your messages to us | To answer them |
3.2 What we work out from it
Estimated values, warranty end dates, categories, and a record of which features you have used.
A fingerprint of each bill file. When you add a bill, we work out a short code from the file's contents. The same file always gives the same code, so if you send a bill you have already added, ViRey shows what it read before instead of reading it again. The code cannot be turned back into the bill and reveals nothing about what is on it.
3.3 What is collected automatically
Device type and operating-system version, app version, crash reports, and in-app events (for example which screens were used, whether a bill was read successfully, when the app was opened, when you signed out). We use these to fix faults and to understand which features work.
3.4 What we keep, and what we leave out
Your bills and photos are stored exactly as you give them, encrypted, so you can open the original later. We do not copy your name, address or phone number from a bill into your item records — only the product, date, price and warranty details.
We do not collect your precise location, contacts, call logs, SMS, or the contents of your mailbox.
3.5 Other people's details in your bills
A bill may include the seller's name, address and GSTIN, and sometimes a delivery recipient. We store and read these only as part of your document. Please do not add documents with other people's personal details that you have no reason to hold.
3.6 If you contact a seller, or leave your email, on a ViRey page
You do not need an account to use the forms on a virey.in item page.
- "Contact seller" collects your name, phone number and message and sends them only to that seller, in their ViRey app, so they can reply. We keep them for 90 days, then delete them, keeping only a count that an enquiry was made. Once the seller has your number they may save it on their phone, which is outside our control.
- "Ask if it's still available", "Tell me when one is listed nearby" and "Looking for a [item] near [area]?" collect your email address, with the type of item and area. We never give it to the seller. We use it to tell you if that item is listed again or sold, and to email you about similar items listed near you. Every email has an unsubscribe link. We keep your address for 90 days, then delete it.
4. What we use it for, and on what basis
We use your personal data with your consent, which you give at sign-up and, for reading bills, the first time you add one. You can withdraw it at any time (section 8). We keep payment and refund records because the law requires it.
We use your data to:
- run ViRey: store and read your documents, show your things and their value, remind you about warranties, help you sell;
- read your documents with an AI service — see section 5.1;
- fix faults and understand which features are used;
- improve our value estimates: when you tell us an item sold and for how much, we use that price, in aggregate only, to calibrate our estimates;
- send service messages, warranty reminders, and purchase and refund notices;
- send one feedback email if you have not opened ViRey for 30 days, with an unsubscribe link;
- after you delete your account, send updates and offers — only if you ticked that box on the deletion screen (section 9);
- offer to restore your paid items if you return within 30 days of deleting your account (section 9);
- meet our legal and tax obligations.
We do not sell your personal data. We do not use your documents or photographs to train AI models, and the AI service we use is not allowed by its terms to use them to improve its products (section 5.1).
5. Who else handles your data
5.1 The AI service that reads your bills
To read a bill or recognise an item, the document or photo is sent to Google's Gemini API, which returns the text to us. We use only the paid Gemini API. Under Google's terms for paid services, Google does not use the content to improve its products, and keeps it for a limited time only to detect misuse of its service. Google may process it in any country where it has facilities. We never use Google's free tier for your documents.
5.2 Our service providers
| Provider | What they hold or do | Where |
|---|---|---|
| Supabase | Your account and item records | Mumbai, India |
| Cloudflare R2 | Your bills and photos, encrypted | Cloudflare's network |
| Google Cloud Run | Runs the ViRey server | Mumbai, India |
| Amazon Web Services (Amazon SES) | Sends the emails described in this policy | Mumbai, India |
| Firebase Cloud Messaging | Delivers app notifications, using a device token | |
| Google Play | Handles payments for item packs. We never see your card or UPI details |
Each provider handles your data only to provide its service to us. We share personal data with authorities only where the law requires it.
6. Where your data is stored
We store your data in India wherever our providers offer it. Some processing — in particular the AI reading in 5.1 — may take place outside India. We will follow any restriction the Government of India notifies on transfers to particular countries.
7. How long we keep it
| Data | How long |
|---|---|
| Your account, items and documents | While your account is open |
| What we read from each bill, and its fingerprint | While the bill is in your account; deleted with the bill or with your account |
| Bills of products whose pack Google refunded | Locked for 30 days, then deleted unless the product is upgraded again (Terms 6.4) |
| Payment and refund records (pack, price, date, Google's reference, the state from your PIN code, and the GST invoice or credit note) | 72 months from the due date of the annual GST return; without your name or email once you delete your account |
| Crash reports and usage events | 12 months |
| Enquiries sent through a seller's page | 90 days |
| Emails left on item pages | 90 days |
| After you delete your account: a scrambled code made from your Google account, and the number of paid items that ended | 30 days, only to offer those items back if you return with the same Google account |
| After you delete your account: your email, only if you ticked "Send me ViRey updates and offers" | Until you unsubscribe. Kept on its own, not linked to anything from your old account |
| After you delete your account: a summary that identifies no one (account age, items added, whether a pack was bought, reason for leaving if given) | Kept, to improve ViRey |
| Everything else, after you delete your account | Deleted within 30 days |
Where the law requires us to keep records of processing for longer (for example, logs that show what was done with data), we keep those logs — not your documents — for the period required.
8. Your rights
Under the DPDP Act you can:
- access a summary of the personal data we hold about you and what we do with it;
- correct or complete your data;
- erase your data — see section 9;
- nominate someone to use these rights for you if you die or cannot act;
- withdraw consent at any time — parts of ViRey will stop working, and we will tell you which;
- complain to us, and if you are not satisfied, to the Data Protection Board of India.
Email virey@redndad.com. You get an automatic acknowledgement with a ticket number, and we respond within 7 business days.
If you withdraw consent for AI reading, we stop reading new documents and, if you ask, delete your stored documents. The item records already created stay unless you delete them too.
9. Deleting your account
You can delete your account in the app (Settings → Delete account) or at virey.in/delete, without installing anything.
Before you confirm, we tell you plainly:
- your bills and documents will be permanently deleted — download them first if you want them;
- how many unused items are in your balance, and how many you paid for;
- what happens to paid items (Terms of Use, section 6.5): packs bought in the last 30 days are refunded; other unused items end; and for 30 days we keep a scrambled code made from your Google account so that, if you sign in again with the same Google account, the app offers to restore your paid items. After 30 days the code is erased.
Telling us why you are leaving is optional, and the answer is kept without anything that identifies you. The last item on the deletion screen is an unticked box: "Send me ViRey updates and offers." If you tick it, we keep your email for that purpose only, until you unsubscribe.
10. Security
Documents are encrypted in transit and at rest, and access is limited to what is needed to run ViRey. If a breach affects your personal data, we will tell you without delay — what happened, what it means for you, what we have done and what you can do — and report it to the Data Protection Board of India, with a full report within 72 hours.
11. Value estimates
ViRey shows estimated values from public second-hand prices. They are estimates — not offers, not professional valuations, and not financial advice. We do not buy or sell your items.
12. Changes to this policy
This policy lives in one place, virey.in/privacy, and the app shows the same page. Each version is dated; earlier versions stay available at virey.in/privacy. If a change is significant, we tell you in the app before it takes effect.
13. Contact and grievances
Vijay Duseja, Grievance Officer · virey@redndad.com · RED AND DAD VENTURES, 9th floor, FLAT 904 SR. NO 42/2, DWARKA SAI, COMMERCIAL WING, Kalewadi Rahatani Road, Godambe Chowk, Rahatani, Pimpri Chinchwad, Pune, Maharashtra 411017.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
ViRey™ is a trade mark of RED AND DAD VENTURES (applications pending).