1.Who we are
myconsentapp operates a consent management platform. For the consent records we keep on your behalf, we act as a proposed Consent Manager under the DPDP Act (not yet registered with the Data Protection Board). For your account and our own operations, we are a Data Fiduciary.
2.What we collect
We collect the minimum needed to run the service:
- Your mobile number, to sign you in with a one-time code. It is encrypted and looked up through a keyed hash.
- Your consent decisions: which company asked, for which purposes and data items, what you chose, and when.
- Requests you make: access, correction, erasure, grievances and nominations, and their outcomes.
- Security and device data: sign-in events, passkey public keys and, for the mobile app, a push token if you allow notifications.
- Basic technical logs needed to keep the service secure and working.
3.What we do not collect
We record consent decisions, not the underlying data companies hold about you. We do not track your browsing across sites, do not use advertising, our web and mobile apps carry no analytics SDKs, and we never sell personal data.
On this marketing website only, and only if you turn on Analytics in the privacy choices, we use Google Analytics to count page visits. Google sets _ga cookies and may process this data outside India; ad features and Google signals are switched off. You can turn it off again at any time from the cookie button.
4.Why we use it
We use personal data only to:
- Show you your consents and let you give, change or withdraw them.
- Notify companies of your decisions, including withdrawals, by signed webhook.
- Issue signed receipts that you or anyone you share them with can verify.
- Handle your rights requests and grievances.
- Keep the service secure and meet our legal obligations.
5.Where it is stored
Personal data is stored and processed only in India, in our Mumbai data region. Our content delivery network and web firewall do not store personal data. Push notifications pass through Google and Apple services, so we keep their text generic.
6.Who we share it with
Companies see only the consent decisions you make for them. We use a small number of service providers, such as cloud hosting and SMS delivery, under contracts that limit them to our instructions. We disclose data to authorities only where the law requires it.
7.How long we keep it
Consent records are kept for as long as the law requires a Consent Manager to keep them (currently at least seven years), so that they can be relied on as evidence. Account data is erased when you close your account, unless a law requires us to keep it. Security logs are kept for at least one year.
8.Your rights as a Data Principal
You can access a summary of your data, export it, correct it, ask for erasure, withdraw consent, nominate someone to act for you, and raise a grievance. Most of this can be done from your dashboard. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
9.Children
myconsentapp is for people aged 18 and over. Consent for a child must be given by a parent or lawful guardian through the family features, with every action recorded.
10.Changes and contact
We will tell you in the app before material changes to this policy take effect. For privacy questions, write to myconsentapp@skorydov.com. For grievances, see our grievance redressal page.