Privacy Policy

Who we are

SHFTPLAY Technologies operates the SHFTPLAY app and this website. For any question about this policy, write to hello@shftplay.com.

What we collect

Account

Your phone number, which is how you sign in, and optionally a display name. If you tell us during onboarding, we also store an age band, an experience level and the subjects you are interested in, so the app can order content sensibly.

Learning activity

Which cards you have read, which you have bookmarked, your quiz answers and whether they were right, and your streak. This is what makes progress, resume-where-you-left-off and review scheduling work.

Purchases

The plan you bought, the amount, any promo code, and a transaction reference. Payments are processed by our payment provider — we never see or store your card, UPI or bank details. If you give us an email address at checkout, we use it to send your receipt and tax invoice.

Feedback

Anything you submit through the in-app feedback form, along with your account ID.

Technical

Standard server logs, and crash and error reports. These may include a device model, an operating system version and an IP address.

What we do not collect

• Your contacts, calendar, location or microphone.
• Photos, unless you are an administrator and deliberately pick an image to attach to a card.
• Card, UPI or bank details. Those go straight to the payment provider.

Why we are allowed to hold it

Account and purchase data is processed to perform the contract between us — you cannot have an account or lifetime access without it. Learning activity is processed on the same basis, because progress tracking is the product. Crash reports are processed on the basis of our legitimate interest in the app not being broken.

Who else sees it

We do not sell your data and we do not share it for advertising. We use a small number of processors that see data only to do their job for us: a database and authentication host, an SMS gateway to deliver your one-time login codes, a payment gateway, an error-reporting service, and a product-analytics service. Each is bound by contract to use the data only on our instructions.

We will disclose data if we are legally required to, and we will tell you when we are permitted to tell you.

Where it is stored

Our database is hosted in the Asia-Pacific region. Some processors may handle data outside India under standard contractual protections.

How long we keep it

• Account and learning data: while your account exists.
• Purchase records: eight years after the transaction, because Indian tax law requires it. This survives account deletion.
• Crash and server logs: up to 90 days.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account. Email hello@shftplay.com from the account you want to act on, or use Settings in the app. We respond within 30 days. Deleting your account removes your profile, progress, bookmarks, quiz history and feedback; it does not remove the purchase records we are required to retain.

Children

SHFTPLAY is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.

Security

Data is encrypted in transit. Access to the database is governed by row-level security, which means one learner cannot read another's data even if the app asked it to. No system is perfect; if we ever have a breach affecting you, we will tell you.

Changes

If we change this policy materially we will update the date at the top and notify you in the app before the change takes effect.