Privacy Policy

Last updated 19 August 2026

This policy explains what we collect, why, and what you can ask us to do about it.

What we collect

• Account details - your name and email address, and a securely hashed password. We never store your password in readable form.
• Purchase records - what you bought, when, the amount, and the payment reference returned by our payment processor.
• Usage data - which prompts are viewed and copied, kept as daily totals so we can show what is popular.
• Technical data - IP address and request details in server logs, used for security and debugging.

What we do not collect

We never receive or store your full card number, CVV, or bank credentials. Card details are entered directly with Razorpay, our payment processor.

Why we use it

To give you access to what you paid for, to keep your account secure, to provide support, to detect fraud and abuse, and to meet our legal and accounting obligations.

Who we share it with

We share only what is necessary with the service providers that run the Service - our payment processor (Razorpay), our hosting provider, and our email provider. We do not sell your personal data, and we do not share it for advertising.

How long we keep it

Account and purchase records are kept while your account is open and afterwards for as long as tax and accounting rules require. Server logs are kept for a short period. Usage totals are aggregated and not tied to your identity after aggregation.

Your rights

You can delete your account yourself from your profile page on the website or from the Account screen in our Android app. That removes your name, email, phone, favourites and sign-in history. We keep records of payments where the law requires it. You can also ask us to show you the data we hold about you or correct it, using our contact page.

Cookies and tracking

We use a session cookie to keep you logged in and a CSRF cookie to protect forms. Your theme preference is stored in your browser's local storage.

We also use Google Analytics to measure how the site is used - which pages are visited and how visitors arrive. It sets cookies and reports this to Google. It does not receive your name, email address or payment details.

You can opt out with your browser's tracking settings, an ad blocker, or Google's opt-out add-on.

Security

Traffic is encrypted in transit. Passwords are hashed. Access to production data is limited to those who need it. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

The Service is not intended for children under 13, and we do not knowingly collect their data.

Changes

We will update the "last updated" date above when this policy changes.