Privacy Policy

This Privacy Policy describes how S. N. Technologies (“we”, “us”, “our”), a partnership firm constituted under the Indian Partnership Act, 1932 and registered in Delhi, India, collects, uses, shares and protects the personal data of users (“you”) of our websites, mobile applications and related services (collectively, the “Services”).

This policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

1. Information we collect

Depending on which of our Services you use, we may collect:

• Account information — name, email address, profile photo URL and authentication identifiers provided through Google Sign-In or another sign-in method.
• Device information — a randomly generated device identifier, device model, operating system version, language and locale, used for security, session management and abuse prevention.
• Network information — IP address and approximate location derived from it (city / region level), captured in our server logs for security and fraud detection.
• Usage data — in-app activity such as levels played, quiz answers, gems and coins earned, streaks, referrals, ad-watch events and feature usage, all necessary to operate the Services.
• Transaction information — where the Services involve payouts or redemptions, the identifiers required to process them (such as a UPI Virtual Payment Address or recipient email for a gift card), along with the amount, status and reference numbers issued by our payment partners.
• Communications — any messages you send to our support address, including their content and metadata.
• Advertising identifiers — the platform-provided advertising identifier (Android Advertising ID) shared with Google AdMob to serve and measure rewarded video advertisements within the app. You can reset or limit this identifier from your device’s system settings.

2. How we use your information

• To create and authenticate your account.
• To operate, maintain and improve the Services.
• To process payments, payouts and redemptions through our payment partners.
• To detect and prevent fraud, abuse and policy violations.
• To serve and measure advertisements where applicable.
• To respond to your support requests and grievances.
• To comply with applicable laws, including tax and anti-money-laundering obligations.

3. Sharing of data

We do not sell your personal data. We share limited data only with the third-party service providers listed in Section 4, strictly for the purposes stated, and with government or regulatory authorities only when required by valid legal process.

4. Third-party service providers

We rely on the following providers to deliver our Services. Each provider receives only the minimum data needed for its purpose and is bound by its own privacy policy linked below.

• Google Sign-In & Firebase Authentication (Google LLC) — used to verify your identity when you sign in. Receives your Google email address and basic profile. Google Privacy Policy.
• Google Play Services (Google LLC) — required for app delivery, crash reporting and basic platform integrity checks on Android.
• Google AdMob (Google LLC) — serves rewarded video advertisements. Receives the Android Advertising ID, coarse device info and approximate location for ad personalisation and frequency capping. Google Privacy Policy.
• Razorpay (Razorpay Software Pvt. Ltd., India) — processes UPI payouts to your bank account. Receives your UPI Virtual Payment Address, payout amount and a reference identifier. We never receive your bank PIN, OTP or full bank credentials. Razorpay Privacy Policy.
• Reloadly (Reloadly Ltd.) — fulfils gift-card redemptions (such as Amazon India gift cards). Receives the gift-card amount, brand selection and the recipient email address you provide. Reloadly is based outside India; see Section 5 on international transfers. Reloadly Privacy Policy.
• MongoDB Atlas (MongoDB, Inc.) — managed database service that stores your account, balance, streak and transaction records. The database is hosted on infrastructure located in the Asia — Mumbai region. MongoDB Privacy Policy.
• Railway (Railway Corp.) — managed application hosting provider on which our backend runs. Receives only the data required to execute API requests. Railway Privacy Policy.
• DigitalOcean (DigitalOcean, LLC.) — hosts our marketing website at sntechnologie.com. Standard web-server logs (IP, user agent) are retained by DigitalOcean. DigitalOcean Privacy Policy.
• Cloudflare (Cloudflare, Inc.) — provides CDN and DDoS protection in front of sntechnologie.com. May process IP addresses and request metadata for security purposes. Cloudflare Privacy Policy.

5. International data transfers

Some of the providers listed above (notably Reloadly, MongoDB, Railway, DigitalOcean and Cloudflare) operate outside India and may process personal data on servers located in the United States, the European Union or other jurisdictions. We rely on these providers’ standard contractual safeguards and security certifications, and limit the data we send them to what is strictly necessary to deliver the Services. Where Indian law restricts the transfer of certain categories of data, we comply with those restrictions.

6. Data retention

We retain account and usage data for as long as your account is active. Transaction records are retained for at least eight years as required under Indian tax and accounting laws. Upon account deletion (see Section 8), we will delete or anonymise data that we are not legally obliged to retain.

7. Security

We use industry-standard security practices, including encrypted transport (HTTPS/TLS), hashed credentials, session-token based authentication, server-side validation of sensitive operations and restricted access to production data. No system is perfectly secure; we encourage you to use a strong, unique password and to keep your device updated.

8. Your rights and account deletion

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your account and associated data, subject to legal retention requirements (transaction records, see Section 6).
• Withdraw consent for processing, where consent is the legal basis.
• Nominate another individual to exercise your rights in case of incapacity.
• Lodge a grievance with our Grievance Officer (Section 11) or escalate to the Data Protection Board of India.

To request account deletion, see our dedicated Account Deletion page for step-by-step instructions, or write to us from your registered email address at [email protected]. We will respond within 30 days.

You can also delete your account directly from within the Quizzy app: open Profile → Security → Delete Account.

9. Children

Our Services are intended for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us and we will close it and delete the data.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified within the Services or by email. The “Last updated” date at the top reflects the most recent revision. Continued use after a change constitutes acceptance.

11. Grievance officer

12. Contact

For any privacy-related questions or requests, write to [email protected].