Privacy

Root Jaap counts mantra repetitions. It has no accounts, no database and no backend — your counting is written to this device and goes nowhere else.

What we hold about you

Nothing. Not your name, not your email, not your practice. We could not tell you whether you have ever opened this app.

There is no server

The page makes no network request at all and loads nothing from any other domain — no fonts, no scripts, no images, no analytics, no advertising, no tracking pixel. Once it has loaded you can turn off your connection and it works exactly the same.

What your device holds

Your mantra and any note, mala size, daily target, repetitions by date, time zone, any sankalp, your closing words, and the date you began. Your appearance choice is kept separately, since it belongs to this device rather than to your practice.

All of it stays in your browser. You can export it, bring it back, or erase every trace of it from Settings.

What the app asks your browser for

To keep the screen awake while you count, and to hold on to your storage rather than clearing it to make space. Nothing else — no location, no camera, no microphone, no contacts, no notifications.

Your mantra

The mantra you choose can reveal your religious belief, which the law treats as sensitive. It never leaves this device. If you would rather record nothing of the kind at all, choose Just count when you begin and your practice is stored as an untitled tally.

Cookies

None, of any kind, for any purpose. There is no consent banner because there is nothing to consent to. Local storage is not a cookie and is not shared with anyone — it is this app writing to your own device, the way a notes app does.

The one thing that leaves

The site is served by Vercel, and like every web host they keep ordinary server logs when a page is fetched — typically the requesting IP address, the time, and the page asked for. In some countries an IP address counts as personal data, so we say so rather than claim a perfection we do not have. We do not read those logs for analytics and nothing in them is tied to your practice, because your practice never reaches the network at all.

The chai link

“Buy me a chai” opens Buy Me A Chai, which is a different company. If you go there, payment happens on their page by UPI and we never see your card, your bank details or your UPI ID. They do show us the name and message you choose to leave, and their page counts its own visits. What happens there is governed by their privacy policy, not this one. Tapping the link is the only way to reach them; nothing on this page contacts them unless you do.

Children

Nothing is collected from anyone, at any age. There is no sign-up, so there is no moment at which a child could disclose anything to us. India’s DPDP Act treats anyone under 18 as a child and requires verifiable parental consent before their data is processed; we process none, so that requirement never arises.

Your rights

The law gives you the right to see, correct, delete and take away your personal data. Those rights are exercised against whoever holds it — which here is you. It is already on your device: read it, export it or erase it without asking anyone, and without waiting thirty days for a reply. There is no copy with us to request. If you think we hold something anyway, write and ask; we will look and tell you honestly what we find.

If this changes

Accounts and syncing may be added later so your counting can follow you to another device. That would mean storing something, and it will be said here plainly before it happens rather than after.

Contact

Root Jaap is made and published by Rishabh Sharma, an individual in Chandigarh, India. Write to rishabh.577.rs@gmail.com with any question about this page.

Last updated 30 August 2026.