Mobile App Legal Policies
Important for app publishers: This is a utility-app legal policy template issued under YASH SURGICAL. Before providing this URL to Google Play Console, name each app in this policy and ensure every statement matches its actual Android permissions, SDKs, functionality, and Data safety disclosures. Hosting this page alone does not establish compliance or guarantee Google Play approval.
Effective date: 30 October 2026. This document describes privacy, user terms and security principles for utility mobile applications that identify YASH SURGICAL as their developer or publisher. It should be adapted to the actual published app before release.
1. Privacy Policy — mobile applications
Information and device data
Depending on implemented functionality, a utility app may process information you voluntarily provide (such as contact or support details), technical data (device type, Android version, crash logs, IP address, app diagnostics) and content explicitly selected by the user. Whether a particular item is accessed, collected or transmitted depends on the specific app build. The app publisher must state actual data practices; this template does not assert that all listed categories are collected.
Utility-app permissions
- Camera: QR or barcode scanning, document capture, or photography, only when implemented and enabled by the user.
- Photos and files: Reading or saving documents, pictures or selected files, preferably using Android's system file picker when appropriate.
- Microphone: Audio recording or voice-driven tools only where users initiate the feature.
- Location: Location-dependent features only when necessary for the app's stated core functionality and permission has been granted.
- Contacts and messaging: Access only when essential to a clearly explained user-facing feature; restricted data must not be used for unrelated advertising or unauthorized collection.
- Notifications: Local reminders, useful feature alerts and app updates where available and permitted.
The app should provide prominent in-app disclosure and obtain affirmative consent where required by Google Play. Denying optional permissions should not unnecessarily block unrelated functionality.
Data use, sharing and advertising
Actual processing may involve operating user-requested functions, providing support, troubleshooting, analytics, fraud prevention, or showing ads if advertising SDKs are included. Where configured, providers could include Google AdMob, Google Analytics/Firebase or other disclosed services. Each enabled third-party SDK and its data flows must match the app's Google Play Data safety form and relevant user consent requirements. Sensitive information and permissions must not be used for unauthorized ad targeting.
Data retention and deletion
Personal data must be retained only for stated purposes and legitimate legal requirements. If the published app supports account creation, users must be offered a readily discoverable in-app deletion path and a working external deletion request method. Valid account deletion should remove the account and associated personal information except where a specific lawful retention requirement applies.
External deletion instructions: Account & Data Deletion. This is a static informational request page: the business must supply a monitored channel and carry out requests in practice.
Children and international users
If an app is directed at children or used by children, the developer must follow the applicable Families and age-related requirements, and must not introduce prohibited data handling or advertising. Applicable data protection rules vary by country and must be reviewed for each release.
2. Terms & Conditions — mobile apps
Users receive a limited, non-transferable right to use an app for its stated purpose subject to applicable laws and third-party terms. Users must not attempt unauthorized access, disrupt service, distribute malware, infringe intellectual property rights, or reverse engineer software where prohibited by applicable law. The developer may update or discontinue features with reasonable notice where required.
Third-party advertisements and links, if any, are controlled by their providers and subject to applicable disclosures. Nothing in these terms excludes statutory consumer protections that cannot be waived.
3. Security Policy — mobile apps
Appropriate mobile-app protections should include least-privilege permissions, secure network transport for sensitive traffic, secure storage, supported libraries, dependency maintenance, and incident response procedures. The specific technical controls (including encryption at rest and TLS configuration) must be tested before being claimed in the published app's policy. No internet service can promise absolute security.
4. Contact & developer identity
Company identification and contact
Business name: YASH SURGICAL
GSTIN (supplied): 23BOZPJ3652P1Z4
Address: Shop No.01, H. No.09, Medicine Street, Bal Vihar Road, Bhopal, Madhya Pradesh - 462001
Phone: Not supplied
Email: Not supplied — business must provide a valid support email before publishing an app
For Google Play submission: the app name, package identifier, data collection matrix, active SDK list, retention periods, functioning deletion workflow and support contact must be added or verified by the actual app developer. A different publisher identity in the store listing must also be reflected appropriately.