Privacy you can see

This website

garamcha.com is a static site. It sets no cookies, runs no analytics and has no accounts. Our host keeps ordinary server logs, which we use only to count how often each box code is scanned, never to identify anyone.

When you scan a box, the QR code opens garamcha.com/scan with a product code such as masala-box. The code names a product, never a person or a box serial. The page remembers it in your browser's local storage so the site can greet you with the right blend; it is not sent anywhere.

The Chai Universe app

The app and the App Clip run entirely on your iPhone. There is no backend, no sign-in, no analytics or advertising SDK, and the app makes no network requests of its own. Apple's App Store privacy label for it is Data Not Collected.

• Your Chai DNA personality, quiz answers, spice stars, badges and the box codes you scanned are stored on the device only.
• The display name is optional, stored locally, and can be anything.
• The App Clip hands its result to the full app through a private, on-device container that the app reads once and deletes.
• The chAI Genie's lines come from Apple's on-device language model on iPhones that have it, and from a script on the rest. Either way the words are made on your phone and never sent anywhere.

Your Chai Passport

From the Chai Passport screen you can export everything as a plain, human-readable file, import a Passport you exported before, or delete all data. There is no copy anywhere else to delete.

What may come later

• Optional iCloud sync would use your own private iCloud database, encrypted by Apple. Garam Chai would have no access to it.
• The optional Chai Club newsletter would sign you up through an email provider's own form, with your explicit consent, and would stay separate from the app's data.

If either ships, this page will say so first.

Questions

Write to us on Instagram at @garamchaibyshipra.

Last updated 4 November 2026.