Privacy Policy

Last Updated: October 22, 2026 | Effective Date: October 22, 2026

Welcome to Kirtania ("we," "our," or "us"). We operate the website https://bapikirtania13.github.io/ and publish mobile applications for Android on the Google Play Store, including PDF Sign Verify - Green Tick, Trade Test - Pro Paper Trading, Crypto Test - Pro Paper Trading, Pito Notes – Smart Notes & AI, and related software tools.

Your privacy is our utmost priority. This Privacy Policy details our practices concerning the collection, use, maintenance, disclosure, and protection of information when you browse our website or use any of our mobile applications.

1. Fundamental Privacy Philosophy: On-Device Architecture

We believe that software should be built with privacy by design. Wherever technically feasible, our applications process your files, documents, and inputs strictly locally on your device. We do not operate remote servers that harvest your confidential files or read your personal writings.

2. Application-Specific Data Privacy Framework

A. PDF Sign Verify - Green Tick

• Zero Document Uploads: When you open an e-Aadhaar, PAN card, invoice, tax return, or certificate for signature validation, the entire verification algorithm (CMS/PKCS#7 signature extraction, SHA-256 byte-range digest hashing, and X.509 certificate chain validation) is executed entirely on your Android device's processor.
• No Remote Storage or Telemetry: PDF contents, document names, personal identifiers, and verification certificates are never uploaded to any remote server or third party.
• No Account Required: You can verify documents without registering, providing an email, or logging into an account.

B. Trade Test - Pro Paper Trading

• Virtual Paper Trading Only: All orders, cash balances, and portfolios are 100% simulated with virtual currency.
• No Financial Credentials: The application never requests, collects, or stores bank account numbers, UPI IDs, Demat credentials, or broker API tokens.
• Network Use: Internet access is utilized solely to retrieve live public market quote feeds.

C. Crypto Test - Pro Paper Trading

• Virtual Cryptocurrency Simulation: Market orders, limit orders, and portfolios operate with demo virtual USDT.
• No Private Keys or Wallets: The app never asks for blockchain wallet seed phrases, private keys, or exchange login credentials.
• Network Use: Internet connectivity is used strictly to stream real-time cryptocurrency price information from public market indices.

D. Pito Notes – Smart Notes & AI

• Local SQLite Storage: All notes, checklists, tags, and drafts are saved directly in your phone's sandboxed local SQLite/Room database.
• Zero Unauthorized Cloud Sync: Your personal writings are never sent to external cloud servers unless you explicitly choose to export or share a note using your phone's system share menu.

3. Cookies and Advertising Compliance (Google AdSense)

We use Google AdSense to display advertisements when you visit our website. To comply fully with Google AdSense and publisher advertising policies, we disclose the following:

• Third-Party Vendors & Cookies: Third-party vendors, including Google, use cookies to serve advertisements based on your prior visits to our website or other websites across the internet.
• Personalized Advertising: Google's use of advertising cookies enables it and its certified ad partners to serve personalized ads to you based on your visits to our site and/or other sites on the World Wide Web.
• Opting Out of Personalized Advertising:
  • You may opt out of personalized advertising by visiting Google's official Google Ads Settings.
  • Alternatively, you can opt out of a third-party vendor's use of cookies for personalized advertising by visiting the Digital Advertising Alliance at www.aboutads.info or the Network Advertising Initiative at www.networkadvertising.org.
  • European Union and UK users may also manage their ad preferences via the European Interactive Digital Advertising Alliance at www.youronlinechoices.eu.
• Consent Management: For visitors from jurisdictions requiring explicit cookie consent (such as the EEA and UK), cookies and advertising identifiers will be handled in accordance with the Interactive Advertising Bureau (IAB) Transparency and Consent Framework.

4. Information Automatically Collected (Log Files & Web Analytics)

Like most modern websites, our hosting servers automatically record standard log entries when you navigate our site. These log entries may include:

• Internet Protocol (IP) addresses (anonymized where applicable)
• Browser type and version
• Referring and exit web pages
• Operating system and device platform
• Date and time stamps
• Clickstream data to diagnose technical errors and ensure server availability

These log entries are not linked to any personally identifiable information and are used solely for website maintenance, security auditing, and performance optimization.

5. Mobile Application Permissions Explained

Our Android applications request only the minimum Android runtime permissions essential for their advertised functions:

• Storage / Media Access (READ_EXTERNAL_STORAGE / Document Picker): Used in PDF Sign Verify strictly to access the specific PDF document you designate, or in Pito Notes to export backup files to your storage upon your command.
• Internet Access (android.permission.INTERNET): Used in Trade Test and Crypto Test to download real-time market quote data, and on our website to deliver web pages, style sheets, and Google AdSense advertisements.
• Zero Sensitive Permissions: None of our applications request access to your contacts, call logs, SMS, camera, microphone, or precise GPS location.

6. Third-Party Developer Frameworks

To deliver stable mobile software, our applications may utilize trusted industry-standard SDKs:

• Google Play Services: Manages application distribution, security verification, and automatic updates.
• Google Play Console / Firebase Crashlytics: Collects anonymized crash stack traces, device hardware models, and OS versions to assist us in troubleshooting software bugs.
• Google AdMob: Serves compliant in-app advertising where applicable in accordance with Google's Play Families and Advertising Policies.

7. General Data Protection Regulation (GDPR) Notice (EEA & UK Users)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you are entitled to specific data subject rights under the GDPR:

• Right to Access: You may request copies of any personal data we hold about you.
• Right to Rectification: You may request that we correct inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data under certain legal conditions.
• Right to Restrict Processing: You have the right to request restriction of data processing.
• Right to Data Portability: You may request that we transfer collected data to another entity or directly to you.
• Right to Object: You may object to the processing of your personal data for legitimate interests or direct marketing.
• Legal Basis for Processing: We process data under the legal bases of: (a) your consent, (b) fulfillment of contractual terms, and (c) our legitimate interest in providing reliable and secure software.

To exercise any of these rights, contact our Data Protection representative at business.kirtania@gmail.com. We respond to all verified requests within thirty (30) days.

8. California Consumer Privacy Act (CCPA / CPRA) Notice

If you are a resident of California, the California Consumer Privacy Act provides you with distinct privacy rights:

• Notice at Collection: We do not sell personal information to third parties, nor do we share personal information for cross-context behavioral advertising except through standard Google AdSense cookie mechanisms as described in Section 3.
• Right to Know & Delete: You have the right to request disclosure of personal information collected in the preceding 12 months and request deletion.
• Non-Discrimination: We will never discriminate against you for exercising your CCPA rights; you will enjoy the identical service quality and application functionality.

9. Children's Privacy (COPPA Compliance)

Protecting the privacy of young children is paramount. Our website and applications are not structured to attract children under the age of 13 (or under 16 in the European Union). We do not knowingly solicit or collect personal identifiable information from children. If a parent or guardian discovers that a child has provided us with personal information, please notify us immediately at business.kirtania@gmail.com so we can promptly delete such data from our records.

10. Data Security Measures

We implement industry-standard technical and operational safeguards to protect against unauthorized access, loss, or alteration of data. Communications with our website are encrypted using Transport Layer Security (TLS/HTTPS). On mobile devices, application data is isolated within Android's sandboxed environment.

11. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect enhancements in our applications or evolving legal regulations. Any modifications will be posted directly to this page with an updated "Last Updated" timestamp. We encourage users to review this page periodically.

12. Contact Information

If you have questions, feedback, or requests regarding this Privacy Policy, our data practices, or our Android applications, please contact us: