Dvaari connects your phone to a Dvaari door device so you can see and speak to whoever is at your door, manage deliveries while you are away, and share access with family. This policy explains what the app collects, why each permission is requested, and who your information reaches.
What Dvaari does
Dvaari is the companion app for a Dvaari door device installed at your home. Once the device is paired to your account, the app lets you see and speak to visitors, keep track of upcoming deliveries, handle deliveries when you are not there, review what happened at your door, share access with family, and adjust your device's settings.
The app is of no use without a paired Dvaari device, and everything it collects exists to serve one of those functions.
Information we collect
Information you give us
Account information. Your name, phone number and email address. Optionally your date of birth, gender, home address, a profile photo and a cover photo. You provide these when you create an account or edit your profile, and you can remove either photo from Edit Profile at any time.
Sign-in information. We verify your identity with a one-time code sent by SMS, WhatsApp or email. If you choose Sign in with Google, Google gives us your name, email address and profile picture. We never receive your Google password. If you choose Sign in with Apple, Apple gives us your name and email address (or a private relay email if you choose Hide My Email). We never receive your Apple ID password. Signing in with Google does not give Dvaari access to your Gmail; that is a separate, optional choice described in Gmail access below.
Photos you choose. Images you select for your profile, cover photo or your device's wallpaper. The app opens your gallery or camera only when you tap to add a picture, and only the image you pick is uploaded.
People you add. Names, phone numbers, email addresses, addresses and schedules you enter for family members you invite, for people who receive a parcel or enter on your behalf, and for your emergency contacts. If you use Choose from Contact, only the one contact you pick is shared with the app; the app cannot see the rest of your contacts. Please only enter another person's details if they are happy for you to do so.
Delivery details. Courier, tracking or order references and any note you add to a delivery, when you record one yourself, or that we take from your delivery notifications on Android or your delivery emails in Gmail, if you turn those on.
Cash on delivery. If you pay by UPI, the UPI transaction reference (UTR) number you enter, so the delivery can be confirmed. We never receive your UPI PIN or bank details.
NFC cards. The card name and identifier you register, and a log of when each card is tapped at your door.
Support requests. The messages you send to our support team, together with your account details, so we can help you.
Information from your device
Pictures from your door device. When a visitor rings the bell or a delivery person uses your door device, it takes a still picture, which is stored and shown to you in the app. Dvaari does not record video or audio.
Door and delivery activity. Records of visitors and deliveries at your device: time, status, courier and parcel details where available, the outcome you chose (approved or rejected), any reason you gave, and the pictures taken with them.
Calls and live view. When you answer a call from your door device or open live view, audio and video travel between the device and your phone as a live stream. The stream passes directly between them where possible, and through a relay server if not. Calls and live view are not recorded or stored.
Location. Only when you ask for it, such as when you choose "use current location" or search for an address on the map. The app does not collect your location in the background.
Device and technical information. Your Dvaari device's identifier and settings, a push notification token identifying your phone's app installation, the app version, basic diagnostic logs recording errors and connection failures, and crash reports (device model, OS version, app version and the error). While the app is open it keeps a live connection to our servers so door and delivery events appear at once.
Delivery sources you turn on (optional)
Delivery notifications on Android. If you switch on Android's Notification access for Dvaari, we read courier and shopping notifications on your phone to detect your deliveries. See Delivery notification access below for exactly what is read and sent to us.
Delivery emails in your Gmail. If you choose to connect your Gmail account, we read the shipping and delivery emails that retailers and couriers send you, so we can show you your upcoming deliveries. Dvaari does not sign in to Amazon, Flipkart or any other retailer account. See Gmail access below for exactly what we read, keep and share.
What we do not collect
We do not read your SMS inbox, your call history or your contacts list. We do not collect an advertising ID. We do not use your information, including anything we take from your Gmail or your notifications, for advertising, and we do not sell it.
Delivery notification access (Android)
On Android, Dvaari can detect your deliveries automatically from the notifications on your phone. This needs Android's Notification access setting. It is optional and off by default: it starts only if you switch it on yourself, and the app explains it and asks for your agreement first. Everything else in Dvaari works without it, and you can always add deliveries by hand. This feature does not exist on iPhone, where Dvaari cannot read other apps' notifications.
What is read
- Notifications from your phone's messaging app, and only when the sender is a recognised courier or shopping sender (such as Flipkart, Amazon, Meesho, Delhivery, Blue Dart, Xpressbees, Shadowfax, DTDC or Ekart)
- Notifications from the apps of those couriers and shops
What is not read
Every other notification is ignored on your phone straight away. It is not stored and is not sent to us.
What is sent to us, and why
The text of a matching notification, such as the tracking number, the parcel details and any delivery code (OTP) it contains. We use it only to show and update your deliveries, and to help the right person hand over a parcel, and for nothing else. It is not sold, not used for advertising, and not shared for advertising.
How long we keep it
We keep a delivery code for 24 hours and then delete it. You are asked to agree to this when you sign up. Other details stay with that delivery until you delete it or close your account.
Turning it off
Switch off Notification access for Dvaari in your phone's settings. We stop reading notifications at once.
Gmail access
Dvaari can show you parcels that are on their way by reading the shipping and delivery emails that retailers and couriers send to your Gmail. This is optional and off by default. It starts only if you choose to connect a Gmail account in the app and approve access on Google's consent screen, and you can switch it off at any time. Everything else in Dvaari works without it.
What we access
We ask Google for read-only access to your Gmail. We use it only to find shipping and delivery emails from retailers and couriers. We do not keep, extract anything from, or otherwise use any other email, and we never send, delete or change anything in your mailbox.
What we take from those emails
- The courier tracking number (AWB)
- The order ID
- The product name and product image
- The seller
- The expected delivery date
- The tracking link
Why we use it
Only to show you your upcoming deliveries in the Dvaari app. We do not use Gmail data for any other purpose.
How emails are processed
Matching emails are read automatically on servers we control, using an AI model that we run ourselves. Your email content is not sent to any third-party AI provider. We do not use Gmail data to develop, improve or train generalised AI or machine learning models.
Who can see it
Dvaari staff do not read your Gmail content. The only exceptions are: where you have asked us to and agreed to it for specific emails (for example, to look into a problem you report); where it is necessary for security, such as investigating abuse; where the law requires it; or where the data has been aggregated and anonymised for our internal operations.
Who we share it with
We share Gmail-derived data only as needed to run this feature. The delivery details are stored with our cloud database and hosting providers, and product images are stored with our image hosting provider. We do not sell Gmail data, use it for advertising, or use it to decide creditworthiness or for lending. We do not transfer it to anyone else, except where the law requires it or, if our business is transferred, with your express consent first.
How long we keep it
We keep the delivery details and product images taken from your Gmail, and any email content we hold to extract them, for 90 days after the parcel is delivered (or after its expected delivery date, if it is not delivered), and then delete them.
Security
The Google refresh token that lets Dvaari read your delivery emails is encrypted at rest on our servers. Gmail data is encrypted in transit between Google, our servers and the app.
Turning it off
You can disconnect Gmail at any time in the Dvaari app, or remove Dvaari's access from your Google Account at myaccount.google.com/permissions. When you disconnect Gmail in the app, we revoke our access token with Google and delete the delivery details and product images we took from your Gmail.
Dvaari's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Permissions we request, and why
Every permission below is one the app actually declares. You are asked for each one at the moment it is first needed, and you can refuse or withdraw any of them in your phone's settings (Android Settings, or iPhone Settings → Dvaari).
On iPhone
| Permission | Why Dvaari needs it | Required? |
|---|---|---|
| Camera | Scanning the QR code that pairs your Dvaari device, and taking a profile photo | Optional |
| Microphone | Speaking to a visitor during a door call, and voice search | Optional |
| Speech Recognition | Turning what you say into text when you search by voice. Speech is processed by Apple's speech recognition service | Optional |
| Notifications | Alerts for visitors, deliveries and door calls, including incoming call alerts | Optional — without it you will miss alerts |
You can change any of these at any time in iPhone Settings → Dvaari.
On Android
| Permission | Why Dvaari needs it | Required? |
|---|---|---|
| Camera | Video calls and live view with your door device, scanning the QR code that pairs it, and taking a profile photo | Optional — needed for video calls and pairing |
| Microphone | Speaking to a visitor during a call or live view. Voice search uses Android's own speech service, which handles the audio and gives the app only the text | Optional — needed to talk during calls |
| Notifications | Alerting you to a visitor, a delivery or an incoming call | Optional — without it you will miss alerts |
| Notification access | Detecting your deliveries from courier and shopping notifications, as described in Delivery notification access | Optional — off until you switch it on in Settings |
| Location (approximate and precise) | Finding your current location when you choose "use current location" or search for an address on the map. Never collected in the background | Optional — asked only when you use it |
| Nearby devices (Bluetooth) | Routing call audio to a Bluetooth headset or speaker on Android 12 and later | Optional — asked only when you take a call |
| Full-screen calls | Showing an incoming door call over your lock screen, the way a phone call appears | Optional — on Android 14 and later you grant it in Settings; without it calls arrive as a notification |
| Foreground service, wake lock, vibrate, modify audio settings | Keeping a call connected, waking the screen for a call, ringing and routing call audio | Granted at install |
| Internet, network state | Communicating with your device and our servers | Granted at install |
| Storage (Android 9 and older) | Reading a photo you pick from your gallery | Granted at install on older versions only |
We do not collect an advertising ID. The app carries no advertising or analytics tracking, and on Android the advertising identifiers that Google's libraries would otherwise add have been removed from it. We use Firebase Crashlytics to receive crash reports (device model, OS version, app version and the error) so we can fix faults. These reports are not used for advertising.
Permissions we deliberately do not request. On Android or iPhone, Dvaari requests no access to your SMS inbox, call history or contacts list. An earlier Android version read your SMS inbox to find delivery updates; that was removed to comply with Google Play's Permissions and APIs that Access Sensitive Information policy.
Reading other apps' notifications
On iPhone, Dvaari does not read the notifications posted on your phone by other apps. On Android it reads them only if you switch on Notification access, and then only courier and shopping notifications, as described in Delivery notification access. Otherwise, delivery details are entered by you, come from your door device, or, if you choose, from your connected Gmail.
How we use your information
We use what we collect only to:
- Create your account and sign you in, including sending one-time verification codes
- Connect your phone to your Dvaari device and carry calls and live view between them
- Notify you about visitors, deliveries and calls
- Record what happened at your door, including the pictures taken by your device, so you can review it later
- Deliver a one-time code to a person you have nominated to collect a parcel for you
- Let family members you invite use the device within the access you give them, and hand over parcels on your behalf while you are away
- Confirm cash-on-delivery payments you make by UPI
- Detect and show your deliveries, from what you enter, from delivery notifications on Android if you turn on Notification access, and from your connected Gmail
- Recognise the NFC cards you register, and show you when each was used
- Show places on a map and help you choose an address
- Turn what you say into text when you search by voice on iPhone
- Answer your support requests
- Keep your settings, such as language, theme and device name
- Diagnose faults, keep the service reliable, and prevent abuse of the sign-in system
We do not use your information to build advertising profiles, and we do not make automated decisions with legal effects about you.
Who we share it with
We do not sell your personal information, including anything we take from your Gmail, and we do not share it for advertising. We use the following service providers, each of which receives only what it needs to do its job:
| Type of provider | What it receives | Purpose |
|---|---|---|
| Push notification provider (Google Firebase Cloud Messaging) | A push token and basic device information | Delivering notifications and calls to your phone |
| Google Sign-In | Your Google account identity | Signing in, if you choose that option |
| Gmail (Google) | Your permission to read your Gmail, and our requests to find delivery emails | Finding your delivery emails, if you connect Gmail |
| Google Maps and place search | The address you search for, and your location when you ask the app to use it | Showing places on a map and helping you choose an address |
| Sign in with Apple | Your Apple account identity | Signing in, if you choose that option |
| Messaging providers (SMS, WhatsApp, email) | The phone number or email address the code goes to, and the code | Sending one-time verification codes, and codes for people you nominate |
| Image and file hosting provider | Photos you upload, and product images from your delivery emails if you connect Gmail | Storing and serving profile, cover and wallpaper images, and product images for your deliveries |
| Real-time communication and relay services | Call and live view audio and video, which are not recorded or stored | Carrying live calls and live view between your device and phone, directly where possible and through a relay server if not |
| Crash reporting provider | Crash reports: device model, OS version, app version and the error | Finding and fixing app crashes |
| Cloud database and hosting providers | Your account and activity data, including delivery details from your delivery notifications or Gmail if you turn those on | Running our servers and storing your data |
We will name any of these providers on request — contact us at the address below.
We may also disclose information where the law requires it, to enforce our terms, or to protect the rights and safety of users — and, if our business is ever transferred, to the acquiring party, who would remain bound by this policy. Data from your Gmail is transferred in that case only with your express consent first.
Some of these providers operate outside India, so your information may be processed abroad under their own safeguards.
Storage, retention and security
Your information is stored on our servers and with the providers listed above. Traffic between the app and our servers is encrypted in transit using HTTPS.
We keep:
- Account details — for as long as your account exists
- Door and delivery records, and the pictures taken with them — until you delete them or close your account, as described in Deleting your account
- Delivery codes taken from notifications on Android — 24 hours, then deleted
- Delivery details and product images taken from your Gmail — 90 days after delivery, as described in Gmail access, or less if you disconnect Gmail sooner
- One-time sign-in codes — a few minutes
- Sign-in sessions — until you sign out or they expire
- Support requests — for as long as needed to deal with your request
- Diagnostic logs — only as long as they are useful for fixing faults
We restrict access to your information to the people who need it to operate and support the service, and our staff do not read your Gmail content except in the limited cases described in Gmail access. If you connect Gmail, the Google refresh token that grants that access is encrypted at rest. No system is perfectly secure, and we cannot guarantee absolute security, but we work to protect your information and will tell you and the relevant authority about a breach affecting you where the law requires it.
Your rights and deleting your data
You can:
- See and correct your information — open Settings → Edit Profile in the app
- Remove your profile or cover photo — Settings → Edit Profile
- Control permissions — grant or withdraw camera, microphone, notification and other access in your phone's settings (Android Settings, or iPhone Settings → Dvaari) at any time
- Turn off delivery notification access — on Android, switch off Notification access for Dvaari in your phone's settings
- Unlink your device — Settings → Linked Devices
- Disconnect Gmail — in the Dvaari app, or by removing Dvaari's access at myaccount.google.com/permissions
- Delete your account — see below
- Ask for a copy of your information, ask us to correct or erase it, or object to how we use it — email info@dvaari.com
Depending on where you live you may have further rights under laws such as India's Digital Personal Data Protection Act or the GDPR. To use any of your rights, email info@dvaari.com. We reply within 30 days.
Deleting your account
You can delete your Dvaari account from inside the app at Settings → Account Settings → Delete Account. When you confirm, we immediately:
- sign you out everywhere and unlink your devices,
- remove your profile photo and cover photo,
- stop sending notifications to your phone,
- revoke our access to your Gmail, if you connected it, and
- send you a confirmation email.
We keep your door and delivery records, and your original email address and phone number, in a restricted, inactive state for as long as needed for security, fraud prevention and legal reasons, and then permanently delete them. Delivery details taken from your Gmail are still deleted within the time limit in Gmail access. You can ask us to permanently delete your data sooner: email info@dvaari.com with the subject "Permanently delete my data".
If you cannot open the app, email info@dvaari.com from the address or phone number registered to your account, with the subject "Delete my account". We will confirm your identity, close your account in the same way and tell you when it is done. You can also follow the steps on our account deletion page.
Children
Dvaari is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app before it takes effect.
Contact us
GRAHNETRA AI LABS PRIVATE LIMITED
Privacy and data requests: info@dvaari.com
Support: support@grahnetra.com
Website: www.grahnetra.com
Phone: +91 85888 72228
Address: 1st Floor, ALTF, Orchid Business Park,
Sector 48, Gurugram, Haryana 122004, India
If you are not satisfied with our response, you may complain to your local data protection authority.
Dvaari — privacy policy, last updated 23 October 2026.