Privacy

Last updated 29 Oct 2026. Plain-language summary; the details below are what we actually do.

The short version

• We collect only what the game needs to work and to save your progress.
• No ad trackers, no selling or renting your data, no marketing email unless you ask for it.
• Mission JRF is for people aged 18 and over.

What we collect, and why

• A guest account (a random id) so your levels, stars and revision queue are saved. No name or phone needed.
• Your email, only if you add it under Me, to send sign-in links and keep your progress on another phone.
• If you choose Google sign-in: Google tells us your email address, your name and your profile picture link. We keep the email to sign you in; we do not use the name or picture, and we never see your Google password.
• An email for a coming-soon subject, when you tap Show interest. We use it only for news about that subject, such as when it opens. Tap Remove next to the subject to delete it, or delete your account.
• A display name and handle (we make one up for you; you can hide from leaderboards).
• What you do in the game: answers, scores, stars, XP, test results, Key Hunt verdicts and flags. We use these to run the game, show your progress, rank tests, and fix questions.
• Payments, if you buy a pass: the plan, amount, status and the payment provider's reference. Card and UPI details go to the payment provider, never to us.
• Study reminders, only if you turn them on under Me: the hour you chose, whether you want the streak saver, and your browser's push address and keys so we can send the reminder. Turn reminders off and the push address is deleted.
• Feedback you send from Me → Send feedback: the message and which part of the app it is about. It is deleted with your account.
• On your phone only: your theme and small settings (browser storage). They never leave the device.

Who processes data for us

• Supabase: database and sign-in (servers in Mumbai, India).
• Vercel: hosting the app.
• Razorpay: payments, when passes go on sale.
• Resend: sign-in and reminder emails.
• Google: sign-in, only if you choose "Sign in with Google".

Each processes data only to provide its service to us.

How long we keep it

While your account is active. If you ask us to delete your account, we delete your personal data, except payment records we must keep under tax law, and anonymous totals (for example, how many people chose an option in Key Hunt).

Your rights

Under the DPDP Act you can ask to see, correct or erase your personal data, withdraw consent, nominate someone to act for you, and raise a grievance. Write to the contact below. To delete your account yourself, go to Me → Delete my account: it happens at once.

Contact and grievances

Write to psynithinlalachan@gmail.com for any question, correction, deletion request or complaint about your data or a payment.