If your app collects personal data from people in India, this Act is likely to matter to you. It calls the organization deciding the purpose and means of processing a Data Fiduciary, and the person the data is about a Data Principal. It applies to digital personal data, meaning data about an identifiable individual in digital form.
Among the duties, the Act requires a Data Fiduciary to take reasonable security safeguards to prevent a personal data breach, and to notify the Data Protection Board and each affected person if one happens. Its Schedule lists penalties, and for failing to take reasonable security safeguards the maximum is stated as two hundred and fifty crore rupees. Other parts cover consent, children's data, and rights such as access and correction.
For AI-built apps, the practical link is basic security hygiene: exposed databases, leaked keys, missing access checks, and over-collection of data are exactly what safeguards should prevent. Collect only what you need, know where personal data is stored and who can reach it, and keep records of consent. This is not legal advice: details and rules under the Act change, so consult a qualified lawyer about your obligations.