What the desk stores
Account data (phone or email), KYC data (hashed identifier only), transaction history, and team history. The desk does not store a copy of your KYC document.
What the desk shares
Nothing for marketing. The desk shares aggregated, non-identifying data with research partners (e.g. the form laboratory) and with payment partners (UPI, banks) for transaction processing.
Retention
Account data: while the account is active. KYC data: 30 days after deletion. Tax records: 7 years per the Income Tax Act. Aggregate, non-identifying data: indefinite.
Your rights
You can request a copy of your data, request a correction, and request deletion. The requests are processed within 30 days. Write to [email protected].
What the desk stores in detail
Account data (phone or email), KYC data (hashed identifier only), transaction history, and team history. The desk does not store a copy of your KYC document. The desk's storage is the minimum data needed to operate the app. The desk's storage policy is the desk's accountability.
Retention in detail
Account data: while the account is active. KYC data: 30 days after deletion. Tax records: 7 years per the Income Tax Act. Aggregate, non-identifying data: indefinite. The retention is the minimum data needed to operate the app and to comply with the law. The retention policy is the desk's accountability.
Your rights in detail
You can request a copy of your data, request a correction, and request deletion. The requests are processed within 30 days. Write to [email protected]. The desk's response window is 30 days, but most requests are processed within 7 days. The desk's response window is the desk's accountability.
Privacy FAQs in detail
How do I request a copy of my data? Write to [email protected]. The desk responds within 30 days. How do I request a correction? Write to [email protected]. How do I request deletion? Open the app → Profile → Settings → Account → Delete.
Extended reading
The privacy page is the desk's storage surface. The terms page is the desk's rules surface. The delete-account page is the desk's privacy surface. The three are designed to be read together — a privacy page without a terms page is a storage surface without a rule; a terms page without a privacy page is a rule without a storage. The desk's editorial system is the three, not any one alone.
The desk on international transfers
The desk does not transfer data outside India. The desk's editorial line is the same — match context, player form, captain reads. The desk's storage policy is the desk's accountability.
The desk on encryption
The desk encrypts data in transit (HTTPS) and at rest (AES-256). The desk's editorial line is the same — match context, player form, captain reads. The desk's security policy is the desk's accountability.
The desk on breach notification
The desk notifies affected users within 72 hours of a confirmed data breach. The desk publishes a public notice on the homepage. The desk's editorial line is the same — match context, player form, captain reads. The desk's notification policy is the desk's accountability.
The desk on international transfers in detail
The desk does not transfer data outside India. The desk's editorial line is the same — match context, player form, captain reads. The desk's storage policy is the desk's accountability.
The desk on encryption in detail
The desk encrypts data in transit (HTTPS) and at rest (AES-256). The desk's editorial line is the same — match context, player form, captain reads. The desk's security policy is the desk's accountability.
The desk on breach notification in detail
The desk notifies affected users within 72 hours of a confirmed data breach. The desk publishes a public notice on the homepage. The desk's editorial line is the same — match context, player form, captain reads. The desk's notification policy is the desk's accountability.
Read more
The privacy page is the desk's storage surface. The terms page is the desk's rules surface. The delete-account page is the desk's privacy surface. The three are designed to be read together — a privacy page without a terms page is a storage surface without a rule; a terms page without a privacy page is a rule without a storage. The desk's editorial system is the three, not any one alone.
The desk on data subjects
The desk's data subjects are the desk's readers, the desk's app users, and the desk's editorial team. The desk's storage policy applies to all three. The desk's editorial line is the same — match context, player form, captain reads.
The desk on data processors
The desk's data processors are the desk's hosting provider, the desk's payment partners, and the desk's analytics provider. The desk's editorial line is the same — match context, player form, captain reads.
The desk on cookies
The desk uses cookies for analytics and session management. The cookies are first-party. The desk does not use third-party advertising cookies. The desk's editorial line is the same — match context, player form, captain reads.
The desk on changes
Where the privacy policy changes, the desk publishes a summary on the homepage. The full policy is below. The current version is dated 30 Jul 2026. The previous version is in the archive.