Privacy Policy

Last Updated: 2 November 2026

Hyperboost AI Solutions Private Limited ("Company", "NyayAssist", "we", "us" or "our") operates Case Tracking by NyayAssist ("Case Tracking" or "Services"), the court-case tracking service of NyayAssist, on the web and through our "Case Tracking" mobile apps for iOS and Android. This Privacy Policy explains how we handle personal information in connection with the Services, their purchase, account administration and support. "You" means a User or another individual whose information is processed in connection with the Services, as the context requires.

Case Tracking uses the NyayAssist sign-in. A Case Tracking account is a NyayAssist account: the same login works in NyayAssist, and deleting one deletes the other (Section 10.5).

This Policy applies to the Services and supplements the NyayAssist Privacy Policy at nyayassist.ai/privacy-policy. For Case Tracking, this Policy prevails where the two differ. The NyayAssist Privacy Policy governs other NyayAssist features, including any NyayAssist project to which you choose to add a tracked case. This Policy is a notice of our practices. Reading or accepting it does not, by itself, give consent to every processing activity. We seek a separate, specific choice where consent is required.

1. Scope of the Services and Our Role

1.1 Case Tracking enables Users to identify supported court and tribunal proceedings, follow available case information and receive related updates or reminders. The information handled may relate to Users, advocates, litigants and other persons identified in relevant case records, clients whose details a User chooses to add, and individuals communicating with us.

1.2 We determine the purposes and manner of processing needed to manage accounts, administer payments, secure the Services and respond to our legal obligations. We also make independent decisions about the sources and information included in any court-information dataset we maintain. Where we process a purchasing organisation's private watchlists or configured reminders solely on its documented instructions, we act on its behalf for that processing. The organisation remains responsible for its instructions and permissions. This allocation does not remove our own legal obligations or make every activity processing on a customer's behalf.

1.3 Case Tracking is offered in India only. You must be at least 18 years old to use it (Section 12).

2. Information We Collect and Its Sources

2.1 Account and contact information: name, professional or organisation details, email address, mobile number, account identifiers, authentication information and account preferences. You sign in through the hosted sign-in page of our authentication provider, Auth0, with an email address and password, with Google or with Sign in with Apple. When you use Google or Apple, we receive the name and email address that provider shares and an identifier for your account with it; we never receive your Google or Apple password. To finish setting up an account, you verify your mobile number with a one-time code that we send to it on WhatsApp; the same number receives the WhatsApp reminders you choose. We receive this information from you, the purchasing organisation or the sign-in provider you use.

2.2 Purchase and billing information: the plan selected, billing contact and address, tax details where required for invoicing, transaction references, payment status, renewal instructions and refund records. Payment providers process the payment information necessary for their services. You should not send card security codes, payment passwords or one-time passwords to our support team.

2.3 Case information and selections: the court and case identifiers you enter, scan or import (for example, a CNR, a case number, an advocate's bar registration or AOR code, or the My Cases export file from the eCourts Services app that you choose to import), your searches, including the court searches you save, selected cases, watchlists and reminder settings; and information available from supported court or authorised information sources, such as party and advocate names, case status, hearing dates, cause-list entries, display-board positions, procedural history, and orders and links or references to orders. Our servers, not your device, fetch and refresh this information from the public websites of courts and tribunals, such as the eCourts services and High Court and tribunal websites. These are public court records. Case Tracking is not affiliated with any court or government. The actual fields depend on the source and purchased functionality. A person may appear in a court record without holding a Case Tracking account.

2.4 Service and technical records: IP address, device and browser information, access and authentication events, relevant usage and error records, security events, and alert-dispatch or delivery-status records where available. Cookies or similar technologies may store session and preference information as described in Section 7.

2.5 Support communications: your request, contact details, diagnostic information and any material you choose to provide. Please avoid unnecessary client details or confidential documents. We may request a redacted example or limited diagnostic information instead of a complete case file.

2.6 Client information: where you use the Clients feature, the names, telephone numbers (including WhatsApp numbers), email addresses, notes and case links of the clients you choose to add, whether a client has opted out of WhatsApp or email messages, and the messages you send to them through the Services: the case status, listing or order you choose to send, any note you add, the channel (WhatsApp or email) and whether it was delivered. Your clients are third parties: we receive this information from you, not from your clients, and we use it only to keep your client list and send the messages you ask us to send.

2.7 Calendar events and reminders: the events you create in the Case Tracking calendar (such as title, date and time, description, meeting link and linked case) and the reminders you set (such as date and time, note, the channels to use and the clients to notify). These are stored with your account on our servers.

2.8 Mobile app information. When you use the Case Tracking apps for iOS and Android:

• (a) Notification tokens: if you allow notifications, the push token that Google Firebase Cloud Messaging issues for the app on your device (on iPhone, linked to Apple's push notification service), with the platform, app version and a device identifier for the app (on iPhone, the identifier Apple provides to an app's developer; on Android, a random identifier the app creates). We use them only to send the notifications described in Section 3 and delete them when you sign out or delete your account.
• (b) Live hearings: on a day one of your cases is listed, the apps can show the court's progress towards your item on the Lock Screen (iPhone) or in a notification (Android). On iPhone we receive the tokens Apple issues to update that card; on Android the card is built on your phone from a notification we send. You can turn Live hearings off in Profile.
• (c) Crash reports: if the app crashes, Google Firebase Crashlytics collects a crash report (the technical details of the crash, the device model, operating system and app version, and a Crashlytics installation identifier). We do not add your name, email address, phone number or case details to crash reports.
• (d) Diagnostic and app-use events: the apps send us a small number of events, such as when the app is opened and how long it took to start, when a notification or link opens a screen in the app, a failed request with its path and status code, a screen that could not load or a failed sign-in, with the app version, operating-system version and device model. While you are signed in, these events are linked to your user ID. They never include passwords, tokens, one-time codes, email addresses, phone numbers, party names or document text.
• (e) Camera: the apps use the camera only when you choose to scan, to read a QR code or CNR on your case papers. The image is processed on your device and is not stored or sent to us; only the code or CNR it reads is used to find the case. On Android the scanner is provided by Google Play services, and the app itself does not have camera permission.
• (f) App lock: if you turn on the optional app lock, the app asks your device to check your Face ID, Touch ID, fingerprint or device passcode. We never receive biometric information; the app learns only whether the check succeeded.
• (g) Information kept on your device: so that the apps open quickly and work offline, they keep a copy of what you last viewed, such as your cases, calendar and clients, on your device, and the widgets and live hearing card keep the coming week's hearings and your own events. If the app lock is on, party names are hidden from widgets and the live hearing card. Signing out or deleting your account removes this information from the device.
• (h) Files: if you import cases, the export file you choose is sent to us to read the case list. Court orders and documents you open are downloaded to your device so you can read or share them.
• (i) What the apps do not use: the apps do not access your contacts, photos, location or your device's calendar. They contain no advertising, use no advertising or analytics tools, and do not track you across other companies' apps or websites.
• (j) Purchases: the Case Tracking apps do not offer in-app purchases.

3. Why We Use Information

3.1 We use relevant information to: (a) create and authenticate accounts, verify mobile numbers and manage purchased access; (b) retrieve and display supported case information and maintain selected case lists; (c) configure and send requested updates and reminders by WhatsApp, email or app notification (such as a case that has finished loading, a new listing, a reminder you set, or the court's progress towards your item on a hearing day), and send case listings to your clients at your request; (d) process purchases, invoices, renewals, cancellations and refunds; (e) provide support, and investigate reported errors, crashes and failed requests; (f) detect misuse, secure systems and maintain service reliability; (g) send you news and offers about NyayAssist products by email, as described in Section 3.3; and (h) meet legal requirements, respond to lawful requests and establish, exercise or defend legal claims where necessary.

3.2 We may use proportionate technical and usage information to diagnose performance and improve the reliability and usability of Case Tracking. This does not authorise using identifiable watchlists, case selections or case content for unrelated product development, advertising profiles or commercial benchmarking. Information described as anonymised will be treated as such only where individuals cannot reasonably be identified from it, taking account of other information reasonably available.

3.3 Product promotions are separate from operational messages. We may use your name and email address to send you news and offers about NyayAssist products, on the basis of your choice or another permission recognised by the law that applies. We use only your name and email address for this, not your phone number, your cases or your clients. Every such email has an unsubscribe link, and you can also opt out at any time by writing to support@nyayassist.ai. Opting out of promotions does not stop account-security, billing or requested case-alert messages. You may separately change or stop case alerts.

4. Permissions and Choices

4.1 We process information only for a purpose and on a permission or legal ground available under the law applicable to the relevant activity. Where consent is required, we obtain it for the specified purpose and provide a means to withdraw it. We do not treat a User's subscription as consent on behalf of every person named in a court record.

4.2 You may choose not to provide optional information. If information necessary to provide a requested function is withheld, we may be unable to provide that function and will explain the consequence. Withdrawal of consent applies to the processing that relied on it; it does not invalidate earlier lawful processing or require deletion of records we must lawfully retain. If withdrawal prevents us from continuing a paid function, the Refund and Cancellation Policy and mandatory law govern the financial consequences.

4.3 An organisation that supplies information or configures recipients must ensure that it has the authority, notices and permissions required for those activities. We remain responsible for permissions or obligations attaching to processing we determine independently. Public accessibility of information is not treated as unrestricted permission for any further use.

4.4 If you add a client's details or ask us to send a listing to a client, you are responsible for having that client's permission to share their contact details with us and to receive those messages, and for your professional duties of confidentiality towards them. A client who receives a message may stop further messages by using the opt-out offered in the message or by writing to support@nyayassist.ai, and we will honour that request.

4.5 Choices in the apps: you can allow or refuse notifications and camera access when the app asks, and change either later in your device's settings; turn Live hearings and the app lock on or off in Profile; choose WhatsApp or email for each reminder; unsubscribe from our promotional emails; and sign out, which removes your information from the device. Refusing notifications or camera access only turns off the feature that needs it.

5. AI Processing and Use of Case Content

5.1 We do not use your watchlists, case selections, reminder content or support material to train or fine-tune AI models, evaluate models for unrelated purposes, or create commercial benchmarks. We do not sell or rent that information or use it for targeted advertising.

5.2 We do not send tracked-case data, watchlists, client details or reminder content to any generative-AI or other AI provider. If you choose to add a tracked case to a NyayAssist project, the content you use in that project is handled under the NyayAssist Privacy Policy, which explains how its AI features process information. Before introducing any AI function within Case Tracking itself, we will update this Policy, give a feature notice and obtain any permission required by law. A change to a general policy alone will not be treated as permission for a materially different use.

6. Sharing and Access

6.1 We provide the information necessary for a specified service to the following providers, to the extent each is used for Case Tracking:

Providers acting on our behalf must be subject to contractual confidentiality, purpose restrictions and appropriate data-protection and security obligations. A provider's status as a separate company does not remove our responsibility for its processing on our behalf.

6.2 Payment providers may also process information for their own payment-security, fraud-prevention and legal duties under their notices. Where a query is sent to a court portal or an authorised source, the query and technical connection information may be received by that source. Our servers send these queries; the court's website receives the query (such as a CNR, case number or advocate code), not your account details. We do not send your complete watchlist where a more limited query is sufficient. If you open a court's own website from the app (for example, its display board), that website's own terms and policies apply.

6.3 Information may be visible to the users and recipients you or your organisation authorise, only to the extent supported by the purchased function and configured permissions. Alert content may be exposed through shared inboxes, devices or notification previews. Use an appropriate recipient address and device settings. Support access is limited to what is needed for support, security, maintenance or another permitted purpose.

6.4 We may disclose information to comply with a binding legal requirement or valid process, or where necessary and permitted by law to investigate misuse or establish, exercise or defend legal rights. We assess the request and limit disclosure to the appropriate information. A business restructuring or transfer may involve access by professional advisers or a successor under confidentiality and purpose safeguards and subject to required notice or permission.

6.5 Use of Case Tracking does not make your watchlist or account information public. We do not share it with unrelated customers or another NyayAssist product for a new purpose merely because the products have a common brand or owner. Because Case Tracking and NyayAssist share one account, your tracked cases, clients, calendar and reminders also appear in NyayAssist when you sign in there with the same account.

7. Cookies, Integrations and Communications

7.1 Essential cookies and similar storage, where used, support authentication, security and requested settings. Optional analytics or marketing technologies, if introduced, will be identified through an appropriate notice and preference mechanism, with consent obtained where required. Rejecting an optional technology will not prevent use of an unrelated core paid function. Browser controls may affect essential session functions.

7.2 A connection to an external calendar or communication account, if expressly offered and selected, is limited to the permissions explained in that connection flow. You may revoke the connection through the available controls or the external provider. Disconnecting prevents future connected activity but does not automatically erase copies already created in the external account.

8. Storage Locations and Transfers

8.1 We store the information for the Services with Amazon Web Services in Mumbai, India (the ap-south-1 region). Auth0, Google Firebase, Apple and Meta may process the information they handle for us (Section 6) outside India. Any transfer of personal information must satisfy the legal conditions and contractual restrictions applicable to that information, with appropriate protections for providers processing on our behalf. We do not treat acceptance of this Policy as unrestricted consent to an overseas transfer.

9. Security

9.1 We maintain reasonable security practices and safeguards proportionate to the information and risks involved, with controls addressing access authorisation, secure transmission, credential protection, system monitoring and incident response. Personnel and providers may access information only for an authorised purpose. No electronic system is completely secure; this statement does not limit a responsibility or remedy that cannot lawfully be excluded.

9.2 We assess suspected incidents, take appropriate containment and remediation measures, and notify the competent authorities, affected individuals or customers when the law or an applicable contract requires. Different reporting requirements may apply to different incidents. A customer-notification arrangement does not postpone a statutory reporting deadline.

10. Retention, Account Closure and Deletion

10.1 We retain information for the period needed for the purpose for which it is processed, or for a specific legal or contractual retention requirement. The period depends on the record category and relevant trigger; one period does not apply to every record.

10.2 Account information, private case selections and reminder settings are retained while needed to provide the Services and for any disclosed account-closure or export period. Billing and refund records are retained for the applicable accounting, tax and dispute requirements. Security and technical records are retained for the periods required by applicable cybersecurity law and proportionate investigation needs. Support records are retained for the resolution and follow-up of the relevant request and any justified legal requirement. Notification and live hearing tokens are deleted when you sign out or delete your account. Firebase Crashlytics keeps crash reports for 90 days. Diagnostic events and server logs are kept for a limited period for security and troubleshooting.

10.3 After the applicable period, information is deleted or irreversibly anonymised. Backup copies may remain until the documented backup cycle expires; they are protected, unavailable for ordinary use and subject to the deletion process if restored. A legal hold applies only to information relevant to the identified requirement or claim, with access restricted and the need for retention reviewed.

10.4 Closing an account or removing a case from a private watchlist does not delete an official court record or automatically remove the same information from a separately maintained lawful source dataset. We assess a request concerning that dataset separately. Stopping alerts, cancelling future billing, closing an account and seeking erasure are distinct actions; we will explain any additional step required rather than treating one as consent to the others.

10.5 Deleting your account: you can delete your account in the app (Profile, then Delete account) or by writing to support@nyayassist.ai from your registered email address. The steps are on our support page under Delete your account. Because Case Tracking and NyayAssist share one account, deleting it also deletes your NyayAssist account. Your account is deleted at once. When it is deleted:

• (a) we delete your tracked cases and saved court searches, your clients and the record of messages sent to them, your notifications, and your notification and live hearing tokens; we ask Auth0 to delete your sign-in, revoke any Sign in with Apple access, and sign you out on every device;
• (b) we move the rest of your account's data, such as your profile (your name, email address, mobile number and address), your calendar events and reminders, and any NyayAssist projects, chats and documents, into an archive. Archived information is no longer shown in the Services or used to contact you, and it is permanently deleted 90 days after your account is deleted;
• (c) we keep your billing records (invoices, payment and subscription records, and the billing details on them) for the period that tax and accounting law requires;
• (d) security, support and usage records (such as sign-in session records, support tickets and usage statistics) keep your user ID; and
• (e) logs and backups that already contain your information are removed when their normal retention period ends.

We complete a request made by email within 30 days of confirming it. Uninstalling the app does not delete your account or cancel a subscription.

11. Requests, Corrections and Grievances

11.1 You may contact support@nyayassist.ai to request review or correction of information you provided, withdraw a relevant consent, stop optional communications, seek account closure or request deletion. We assess the request under the law applicable to the processing, and may ask for proportionate information to verify identity and authority. We do not require unrelated identity documents as a routine condition.

11.2 A person identified in a case record may report an incorrect attribution, unlawful disclosure, protected identity, redaction requirement or relevant court order without being a paying User. Please identify the record, explain the concern and provide supporting material through a secure channel where necessary. We may correct our reproduction, restrict affected access or refer you to the source authority for correction of the official record, as appropriate. We cannot amend a court's own record.

11.3 Where information is processed solely for a purchasing organisation, we may refer the request to that organisation or assist it, unless we must respond directly. Rights and remedies under a particular data-protection law apply when that law and the relevant provision are in force and cover the processing. We do not represent that a right under another jurisdiction automatically applies to every User.

11.4 Grievances may be addressed to Yash Rane, Grievance Officer, at grievance@nyayassist.ai, or at the Company address in Section 14. Grievances concerning information handled under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 will be acknowledged within 24 hours of receipt and resolved within 15 calendar days of acknowledgement. The same timeline applies to complaints under the consumer e-commerce grievance requirements. A shorter mandatory period, where applicable, prevails. These processes do not restrict access to a competent court, authority or other remedy available under law.

12. Children and Protected Case Information

12.1 User accounts are intended for adults. The Case Tracking apps are not directed at children, and you must be at least 18 years old to create an account. This does not mean that court information can never concern a person under 18. We treat reports involving children, protected identities, restricted proceedings or publication restraints as requiring specific assessment and appropriate restriction, redaction or removal from the Services.

12.2 Do not add unnecessary identifying information about a child or other protected person. If we learn that an account has been created by a person under 18, we will assess and restrict the account and handle the information in accordance with the legal requirements applicable to that processing. Information retained to meet a specific legal obligation will be restricted to that purpose.

13. Changes to This Policy

13.1 We will publish the current version with its last-updated date. Material changes will be notified through the registered email address or the Services before taking effect, ordinarily with at least 30 calendar days' notice. Earlier action may be necessary for a legal requirement or urgent protective measure. Notice of a change does not retrospectively authorise a new purpose. We obtain further consent or provide another legally required mechanism where necessary.

14. Contact Information

Hyperboost AI Solutions Private Limited

0-15, Kadri Mansion, Veer Savarkar Road, Prabhadevi, Mumbai, Maharashtra 400025, India.

Support and privacy requests: support@nyayassist.ai

Grievance Officer: Yash Rane

Grievance email: grievance@nyayassist.ai

Help and account deletion: Support · Delete your account · Terms of Use