Privacy Policy

Last updated: June 22, 2026

This policy explains what data the Zip mobile app and this website collect, why, and what we do with it. If you only read one paragraph, read this one: we don't sell your data, we don't share it with ad brokers beyond what's strictly required to show you ads, and you can delete your account (and everything we know about you) from inside the app.

1. Who runs Zip

Zip is published by Bhavna Infotech ("we", "us"). If you need to reach us about anything in this policy — questions, corrections, data deletion — email zipper.game@desichallenge.com.

2. What we collect

Account data (only if you sign in)

• Email address — if you sign in with email, Google, or Apple. Used to identify your account and send puzzle results across devices.
• Display name — shown on the leaderboard if you opt in. You control it.
• Auth provider ID — the unique ID Google/Apple gives us when you sign in with them. Not your password.

If you never sign in, we don't store any of the above.

Device data

• Device ID — a random UUID the app generates on first launch, stored locally and sent to our server so we can keep track of your streak without requiring sign-in.
• Push notification token — only if you allow push notifications, so we can remind you about tomorrow's puzzle.
• Platform & app version — to know if you're on Android/iOS and which version, for debugging.

Gameplay data

• Which puzzles you've solved and how long you took.
• Your current streak and best streak.
• Hints you used (counts only, not content).

Used to power your stats, the daily leaderboard, and to improve puzzle difficulty tuning. Not shared with third parties.

Purchase data

If you buy Premium, your app store (Google Play or Apple) sends us a signed receipt. We verify it to unlock your purchase and store a record that you're a Premium user. We do not receive your credit card number, billing address, or any payment detail — that stays with the store.

3. What we do not collect

• Contacts, calendar, photos, SMS, call logs.
• Location (GPS, Wi-Fi SSIDs, IP-based).
• Microphone or camera.
• Browsing history outside the app.
• Anything behavioral advertising needs ("cohort tracking", etc.).

4. Ads

The free version of the app shows ads served by Google AdMob. Google may collect a limited set of data (advertising ID, coarse region, app crash info) to serve and measure ads, subject to Google's ad policy.

On Android, you can reset or opt out of ad personalization in Settings → Privacy → Ads. On iOS (when available), grant or deny tracking at the system prompt.

Buying Premium removes all ads and stops the AdMob SDK from making any ad requests.

5. How we use your data

• Run the game (sync puzzles, track streaks, verify purchases).
• Show leaderboards (if you opt in).
• Send push reminders (if you allow them).
• Debug crashes and fix bugs.
• Comply with legal requirements.

We do not use it to build ad profiles, sell it, or pass it to data brokers.

6. How long we keep it

• Account data: kept until you delete your account.
• Gameplay data: kept until you delete your account.
• Purchase records: kept for 7 years (India tax law) in aggregated form. Tied to your account ID until you delete it.
• Server logs: rotated every 14 days.

7. Deleting your account

Three ways to delete your account — pick whichever is easiest:

1. From the app: Profile → Settings → Delete account. We send you a one-time code by email, you confirm, and your data is purged.
2. From the web (no app install needed): visit https://zipper.desichallenge.com/account/delete, enter the email on your account, verify the 6-digit code we email you, confirm.
3. By email: write to zipper.game@desichallenge.com from the address on your account. We'll process the deletion manually within 30 days.

All three flows delete exactly the same data: your profile, every puzzle session, streaks, leaderboard entries, device links, and access tokens. Purchase records are retained in aggregated form for tax law (section 6), detached from your account ID.

8. Children

Zip is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe a child has created an account, email us and we'll delete it.

9. Where your data lives

Our servers are hosted in Germany (Hetzner). If you're in a jurisdiction outside the EU, your data is transferred there when you use the app.

10. Your rights

Depending on where you live (GDPR, CCPA, DPDP Act), you have rights to access, correct, port, or delete your data. Email us and we'll handle it. No lawyers required.

11. Changes to this policy

If we make material changes, we'll update the "last updated" date above and, if you have an account, send a note to the email on file. Continuing to use the app after changes means you accept them.

12. Contact

Bhavna Infotech · zipper.game@desichallenge.com