Privacy Policy

1. Introduction

Welcome to Mysticadii, a brand owned and operated by Tirumisa LLP. We are committed to protecting your privacy and the privacy of your family. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services at www.mysticadii.com.

By using Mysticadii, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when:

• Creating an Account:
  • Email address
  • Password (encrypted)
  • User ID
• Setting Up Family Profile:
  • Family member names (children, parents, grandparents)
  • Relationships (e.g., "son", "daughter", "parent")
  • Age-appropriate preferences
  • Story tone preferences (bedtime, adventure, celebration)
• Delivery Preferences:
  • Primary email address for story delivery
  • WhatsApp number (optional)
  • Time zone
  • Preferred delivery time
• Email Subscription:
  • Email address for daily stories newsletter

2.2 Payment Information

Payment processing is handled by Razorpay. We do NOT store your credit card, debit card, or banking information. We only store:

• Razorpay subscription ID
• Subscription status (active, pending, cancelled)
• Subscription start and end dates

Please review Razorpay's Privacy Policy for information about how they handle payment data.

2.3 Automatically Collected Information

We automatically collect:

• Usage Data: Pages visited, time spent, features used
• Device Information: Browser type, device type, operating system
• IP Address: For security and analytics
• Cookies: For authentication and preferences (see Section 7)

2.4 AI-Generated Content Data

We use AI services (Google Gemini, Groq LLM) to generate personalized stories and images. The following data is sent to AI providers:

• Family member names
• Family relationships
• Story preferences and tone
• Prompts and story themes

Important: We do NOT send sensitive personal information (email, phone numbers, payment info) to AI services.

3. How We Use Your Information

We use your information to:

• Provide Services:
  • Generate personalized family stories featuring your family members
  • Deliver daily stories via email and WhatsApp
  • Manage your subscription and account
  • Process payments through Razorpay
• Improve Services:
  • Analyze usage patterns to enhance user experience
  • Develop new features and content
  • Fix bugs and technical issues
• Communicate:
  • Send daily stories and newsletters
  • Send subscription reminders and updates
  • Respond to support requests
  • Send important service announcements
• Security & Legal:
  • Prevent fraud and abuse
  • Comply with legal obligations
  • Enforce our Terms of Service

4. Data Sharing & Third Parties

We share your information with:

4.1 Service Providers

• Supabase: Database and authentication (hosted in secure cloud)
• Razorpay: Payment processing and subscription management
• Resend: Email delivery service for stories and newsletters
• WhatsApp Business API: Optional WhatsApp story delivery
• Google Gemini: AI image generation for story illustrations
• Groq LLM: AI story text generation
• Vercel: Website hosting and deployment

4.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Investigate violations of our Terms of Service

4.3 No Sale of Data

We DO NOT sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Storage & Security

5.1 Where We Store Data

• Supabase: User accounts, family profiles, stories, subscriptions
• Vercel: Website hosting and generated images
• Razorpay: Payment and subscription data

5.2 Security Measures

We implement industry-standard security measures:

• Encryption: HTTPS/TLS for all data transmission
• Password Protection: Passwords are hashed and never stored in plain text
• Access Control: Limited access to personal data
• Regular Audits: Security reviews and updates

Note: No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5.3 Data Retention

• Active Accounts: Data retained while your account is active
• Cancelled Subscriptions: Account data retained for 90 days after cancellation
• Generated Stories: Accessible while subscribed; archived after cancellation
• Email Subscribers: Removed immediately upon unsubscribe request

6. Children's Privacy

Mysticadii is a family service designed for children aged 4-12 years, but accounts must be managed by adults (18+ years).

6.1 Parental Consent

• Parents/guardians provide children's names for story personalization
• We do not directly collect information from children
• Parents control all account settings and data

6.2 Child Data Protection

• We only collect children's first names and relationships
• No photos, birthdates, or sensitive child data is collected
• Children's names are used solely for story personalization
• Parents can delete children's names at any time

7. Cookies & Tracking

We use cookies and similar technologies for:

• Essential Cookies: Authentication, security, basic functionality
• Preference Cookies: Remember your settings (theme, language)
• Analytics: Understand how users interact with our service

You can control cookies through your browser settings. Disabling essential cookies may affect functionality.

8. Your Rights & Choices

You have the right to:

8.1 Access & Update

• View your account information at any time
• Update family member names and preferences
• Change email and WhatsApp delivery settings

8.2 Delete Your Data

• Delete your account and all associated data from Settings
• Email hello@mysticadii.com to request complete data deletion
• Data will be deleted within 30 days (except legally required records)

8.3 Unsubscribe from Emails

• Click "Unsubscribe" link in any email
• Visit /unsubscribe page and enter your email
• Contact us at hello@mysticadii.com

8.4 Cancel Subscription

• Cancel anytime from your Family Dashboard settings
• Access continues until the end of your paid period

8.5 Data Portability

You can request a copy of your data by emailing hello@mysticadii.com. We will provide your data in a structured, machine-readable format within 30 days.

9. International Data Transfers

Your data may be processed and stored in servers located in different countries. By using Mysticadii, you consent to the transfer of your information to countries outside your residence, which may have different data protection laws.

10. Mysticadii Android App

The Mysticadii Android app (package com.celerstudio.mysticadii.android) lets you listen to curated mythology, devotional and story podcasts. It does not require an account and does not show advertising.

Data stored on your device

Your subscriptions, downloaded episodes, playback position, favorites, listening history and settings are stored only on your device and are removed when you clear the app's data or uninstall it.

Data collected automatically

• Device and app information (device model, OS version, app version, language, approximate region from IP address)
• Anonymous identifiers (app instance ID, anonymous Firebase user ID, push notification token)
• Usage events such as app opens and completed episodes
• Crash reports and diagnostics

Third-party services used by the app

• Google Firebase (Analytics, Crashlytics, anonymous Authentication, Remote Config, Cloud Messaging) for usage analytics, crash reporting, delivering the list of curated shows and notifications — Firebase privacy
• OneSignal for push notifications about new episodes — OneSignal privacy
• Meta (Facebook) SDK for measuring app installs and listening events — Meta privacy

Podcast audio and artwork are loaded directly from the podcast hosts (for example Audioboom and Simplecast), which receive your IP address as part of any normal web request. You can turn off notifications at any time in Android Settings → Apps → Mysticadii → Notifications. To request deletion of data associated with your app installation, email hello@mysticadii.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for major changes)

Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Company: Tirumisa LLP (AAT-2227)
• Brand: Mysticadii
• Email: hello@mysticadii.com
• Website: www.mysticadii.com

We will respond to your inquiry within 30 days.

13. Summary