KlaritiQKlaritiQ
Sign inGet my free audit readiness assessment
Product and engineering

DPDP/DPDPA privacy by design for product and engineering teams.

From idea to release, KlaritiQ shows the DPDP/DPDPA, security and disclosure rules that may apply at each step, how sure we are, and what proof to keep.

Get my free audit readiness assessment
No legal jargon · no commitment · every answer backed by evidence
Where the rules bite
A new data field or a new purpose
Under the DPDP/DPDPA Act, collecting new data or using data in a new way can change what your notice and consent must cover. KlaritiQ shows this at the spec step, not after launch.
"By continuing you agree."
The DPDP/DPDPA Act sets expectations for clear notice and consent. KlaritiQ shows what may apply at the exact screen where you ask.
Wiring in an SDK or AI API
Each one is a vendor that may receive personal data. You see it at the step where it is added, linked to your vendor process.
Users who may be children
If your app can be used by people under 18, the DPDP/DPDPA Act adds steps around parental consent. You see them at the age step.
The problem

What usually goes wrong.

The data question gets skipped

"Does this feature change what data we collect or who gets it?" is the question most teams mean to ask and rarely do.

One SDK can change everything

Adding an analytics SDK, an AI API or a new third-party library quietly adds a new vendor and a new data flow.

The first screen already collects data

SDKs start before login, and a single "Get OTP" tap is often your whole consent moment.

How it works

Your process, step by step.

  1. 1
    Propose and spec

    When an idea becomes a ticket, you see the questions to ask about data and consent before design starts.

  2. 2
    Design and add third parties

    When screens are designed and SDKs, APIs or AI models are wired in, you see the consent, notice and vendor rules that may follow.

  3. 3
    Build, review and check security

    When code is written, often with AI assistants, reviewed and tested, you see the security expectations that may apply.

  4. 4
    Sign-up, permissions and age

    When you ask for consent, a profile, an age and device permissions, you see the extra rules that may apply, including for children.

  5. 5
    Release, monitor and hand off

    When you approve, roll out, monitor and brief support, you see what to record and what to tell customers.

Deadlines

Standing duties your build may need to support

These are not deadlines after an event. They are things your systems have to be able to do before one happens. The DPDP Rules item applies once those provisions are in force.

180d
System logs, CERT-In directions
Keep logs of your ICT systems for a rolling 180 days, within India, and hand them over with an incident report when asked.
1 year
Logs and personal data, DPDP Rules
Retain the logs and personal data the security rules call for for one year, unless another law requires longer.

See every deadline KlaritiQ tracks

What you get

A map, a certainty label and the proof.

A step-by-step map of your release process

The rules that may apply at each step.

A certainty label on every item

So engineering knows what is required and what is good practice.

A proof list

The reviews, checks and disclosures that show you built it properly.

Who it is for

Built for your team.

Founders, CTOs, product managers, engineering leads and designers at Indian software companies and digital businesses that ship features weekly.

Common questions

Straight answers

Asking the data questions at the start of a feature, not after launch: what new data you collect, why, who receives it, and what the notice and consent must say. KlaritiQ shows those questions at the spec, design and release steps.

Build it right the first time.

See what applies to your release process with the founders at KlaritiQ.

KlaritiQ provides information about laws and regulations to help organisations understand how rules may apply to their processes. It is not legal advice and does not create a lawyer-client relationship. Rules change, and how they apply depends on your facts; consult a qualified professional before acting. Law names are given for reference only. © KlaritiQ.