DPDP NavigatorAct 2023 · Rules 2025
All templates
Notices & ConsentSection 5

Mobile App Consent Notice

An in-app consent flow notice covering permissions, data categories, and purpose limitation for mobile applications.

Template
IN-APP CONSENT NOTICE — [App Name]

Publisher: [Organization Name]
App: [App Name] (Android/iOS)
Effective Date: [Effective Date]

1. PURPOSE OF THIS NOTICE
Before [App Name] collects or processes your personal data, this notice explains, in itemised form as required under Section 5 of the DPDP Act, 2023, what data we collect, why, and how you can control it. Your consent under Section 6 must be given freely, and you may withdraw it at any time as easily as you gave it.

2. DEVICE PERMISSIONS AND CORRESPONDING DATA
   - Camera: [purpose, e.g., scanning documents / profile photo capture]
   - Location: [purpose, e.g., delivery address auto-fill, nearby store discovery]
   - Contacts: [purpose, e.g., invite-a-friend feature]
   - Microphone: [purpose, e.g., voice search]
   - Storage: [purpose, e.g., uploading attachments]
Each permission is requested at the point of first use ("just-in-time" consent), not at install, and you may deny any permission without being blocked from the app's core functionality, except [list any features genuinely dependent on the permission].

3. ACCOUNT AND USAGE DATA
Name, mobile number, email, date of birth, [other fields], along with app usage analytics, crash logs, and device identifiers, are collected for account creation, service delivery, fraud prevention, and product improvement.

4. CONSENT ARTEFACT
When you tap "I Agree" on the consent screen, we record: the version of this notice shown, timestamp, the specific permissions/purposes agreed to, and your account ID. This record is retained to demonstrate that consent was informed and specific, in line with our obligations under Section 8.

5. GRANULAR CONTROLS
Go to Settings > Privacy within the app to:
   - View each data category we hold about you
   - Revoke consent for optional processing (e.g., personalised recommendations, marketing)
   - Request a copy of your data (Right to Access, Section 11)
   - Request correction or erasure (Section 12)

6. CHILDREN'S DATA
If our age-gate indicates you are below 18 years, verifiable parental consent will be sought before processing continues, and we will not undertake behavioural tracking or targeted advertising directed at you, in accordance with Section 9.

7. DATA SHARING
We share data with: [list processors/SDK providers, e.g., payment gateway, push-notification service, crash analytics], each bound by a data processing agreement consistent with Section 8(2).

8. CROSS-BORDER PROCESSING
Some of our processors may store or process data outside India. Where applicable, we comply with restrictions notified by the Central Government under Section 16.

9. GRIEVANCE REDRESSAL
If you have concerns about how your data is handled, contact our Grievance Officer before approaching the Data Protection Board of India, as required under Section 13.

Grievance Officer: [Name]
Email: [Email Address] | In-app: Settings > Help > Contact Us

By tapping "I Agree", you confirm you have read and understood this notice and voluntarily consent to the processing described above.

This template is a starting point, not legal advice. Have it reviewed by qualified counsel before use, and adapt bracketed placeholders to your organization's facts.