Privacy Policy
Last updated: August 23, 2026
1. Who We Are and What This Covers
This policy explains what personal data PSC Mastery collects, why, who else handles it, where it goes, how long we keep it, and what you can do about it. It covers the PSC Mastery mobile app and this website.
- Operated by: PSC Mastery, operated by an individual carrying on business in India as a sole proprietor.
- Email: pscmasterysupport@gmail.com
- App: PSC Mastery (Android package
com.pscflashcards.app), distributed through Google Play. - Postal address: available on request from pscmasterysupport@gmail.com, and shown on our Google Play store listing.
For questions about how we handle your personal data, contact PSC Mastery at pscmasterysupport@gmail.com.
2. What We Collect and Why
| What | Why |
|---|---|
| Email address; or phone number if you sign in with a one-time code | To create and secure your account and to sign you in |
| Your name, and the display name you choose | To identify you in the app. Your first name is shown publicly — see section 4 |
| Profile photo (optional), taken with your camera or chosen from your photo library | To show your picture on your profile. We open the camera or library only at the moment you choose a photo. It is shown publicly — see section 4 |
| Study activity: cards reviewed, answers, quiz and mock-test results, time spent, streak, XP, level | To schedule your revisions using spaced repetition, show your progress, and run streaks and levels |
| Posts, comments, likes, reports and blocks you make | To run the community feed and to act on reports |
| Battle and tournament results, and your opponent pairing | To run multiplayer matches and leaderboards |
| Device identifier, device model, app version, and your active-session records | To sync your progress across your devices, and to let you see and sign out of devices you are logged in on |
| Notification token | To send the reminders and alerts you have turned on |
| Purchase records — plan, dates, store order reference | To give you the access you paid for and to keep required accounting records. We never see or store your card or UPI details |
| Crash reports and performance data — error details, screen names, device state | To find and fix faults |
| Session recordings — a replay of your screen, taps and typing, with text inputs masked | Only if you turn on diagnostics. To reproduce bugs and see where people get stuck. Off unless you consent — see section 3 |
We do not collect your contacts, your precise location, your microphone input, your calendar or any health data.
Signing in with Google or Apple. If you choose to sign in that way, we receive your name and email address from them. We do not receive your password. We do not offer sign-in through any other third party.
3. Session Recording and Diagnostics
We use one diagnostic tool, Sentry, which can record a replay of your screen while you use the app — what you tapped, what screens you saw, and how the app responded. Text and images are masked by default, and the fields where you type your email address, password, phone number or verification code are masked on top of that, so what you type in them is never recorded.
Session recording does not capture the contents of what the app sends to or receives from our servers. Sentry records only the address, the method, the response code, how long the request took and how large it was — never the body of the request or the reply.
This is off unless you turn it on. We ask you separately, and you can change your answer at any time in Settings. If you say no, no session recording takes place at all. Switching it off takes effect the next time you open the app, because a recording already in progress cannot be stopped part-way through.
A recording of a community screen may incidentally capture posts and names of other users that were displayed to you at that moment. We use recordings only to diagnose faults, never to review an individual user's behaviour.
Crash reports are separate from session recording and are always on, because without them we cannot fix crashes.
4. What Other People Can See
Visible to other users of PSC Mastery:
- your first name;
- your profile photo, if you set one;
- your level, XP, and streak, on leaderboards;
- anything you post or comment in the community feed; and
- your first name and photo to your opponent during a battle.
Never shown to other users: your email address, your phone number, your purchase records, your study history, or your quiz and mock-test scores.
You can change your display name and remove your profile photo at any time from your profile screen.
5. Who Else Handles Your Data
We do not sell your personal data to anyone.
5.1 Service providers acting on our instructions. These companies process your data only to provide a service to us:
| Provider | What it handles | Where |
|---|---|---|
| Supabase | Account, login, database, profile photo storage, one-time SMS codes | India (Mumbai) |
| Colyseus Cloud | Live battle and tournament state, display name | India (Bengaluru) |
| Cloudflare R2 | Audio files you download | Outside India |
| Sentry | Crash reports, performance data, session replay (with your consent) | United States |
| Expo, and Google Firebase Cloud Messaging | Delivering push notifications; your notification token | Outside India |
| Vercel | Hosting this website; server request logs including IP address | Outside India |
5.2 Independent parties with their own terms. These are not our processors — they handle your data for their own purposes under their own privacy policies, which we do not control: Google (sign-in, and Google Play billing when you subscribe on Android) and Apple (sign-in, and App Store billing on iOS when available). Please read their policies.
5.3 Other disclosures. We may disclose personal data where a court order or a valid legal demand requires it, to investigate fraud or abuse of the Service, or if the business is transferred to another operator — in which case we will tell you in the app before it happens.
We are putting written data-processing agreements in place with each of the providers in section 5.1, and we choose providers that publish security commitments at least equal to our own.
6. Where Your Data Is Processed
Our servers are in India. Your account, your study data and your profile photo are stored and processed in India.
A small number of supporting services listed in section 5.1 — error reporting, content delivery and push notifications — operate from outside India.
7. Children
PSC Mastery is for people aged 18 and over. Under section 2(f) of the Digital Personal Data Protection Act, 2023, anyone below 18 is a child.
We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete the personal data associated with it.
If you are a parent or guardian and believe a child has given us personal data, write to pscmasterysupport@gmail.com and we will act on it.
8. Your Rights
Under the Digital Personal Data Protection Act, 2023 you have the following rights. To use any of them, write to pscmasterysupport@gmail.com from your registered email address, or use the option in the app where one exists.
- To know what we hold — a summary of the personal data we process about you, what we do with it, and who we have shared it with (section 11).
- To correct or complete it — if anything is wrong or out of date (section 12). You can edit most of it yourself in the app.
- To erase it — delete your account and the personal data with it (section 12). See section 9.
- To withdraw your consent — as easily as you gave it (section 6(4)). Diagnostics and notifications can be switched off in Settings at any time.
- To complain — to us first (section 13), and then to the Data Protection Board of India if you are not satisfied.
- To nominate someone — to exercise your rights on your behalf if you die or become incapacitated (section 14). Write to us to do this.
We list only the rights the law actually gives you. The Act does not create a right to data portability or a right to restrict processing, and we will not claim to offer rights we cannot deliver. If you want a copy of your study data, ask us and we will send it — as a courtesy, not because a statute compels it.
9. Deleting Your Account
In the app: Settings → Delete Account. Confirm, and deletion runs immediately.
On the web: go to https://pscmastery.com/delete-account, which works even if you no longer have the app installed.
What is deleted: your account, name, email, phone, profile photo, study history, streak, XP, level, posts, comments, saved questions and the purchase links to your account. This happens in a single operation and is permanent and irreversible.
What may remain briefly: crash reports are pseudonymous and age out of our diagnostics providers on their own retention schedule; billing records are held by Google or Apple under their own policies, and by us where tax law requires; and where content of yours was reported and removed, we retain it and the related complaint record for 180 days, as the Information Technology (Intermediary Guidelines) Rules, 2021 require, or longer if an authority directs.
10. How Long We Keep Things
- Account and study data — while your account is open; deleted immediately when you delete it.
- Posts and comments — until you delete them or your account.
- Removed or reported content and the complaint record — 180 days, as the law requires.
- Crash reports and session recordings — on our diagnostics providers' retention schedule, then deleted automatically.
- Billing and tax records — for as long as tax and accounting law requires.
11. How We Protect Your Data
We take these measures:
- all traffic between your device and our servers uses TLS encryption;
- data at rest is encrypted by our hosting providers;
- administrative access is restricted to named individuals and is logged;
- we take regular backups; and
- we are progressively tightening database access controls, and we run automated security checks against our database configuration.
No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affects your personal data, we will tell you what happened, what it means for you, what we have done, and what you can do — and we will notify the authorities as the law requires.
12. Changes to This Policy
If we change this policy we will post the new version here with a new version number and effective date, and tell you in the app. Where a change materially affects how we use your data, we will ask you to agree to it rather than assume your agreement from continued use.
13. Contact and Complaints
For anything about your personal data, or to make a complaint, contact our Grievance Officer. Full details, and the timelines we work to, are in our Community Guidelines. In short: PSC Mastery, pscmasterysupport@gmail.com — acknowledged within 24 hours, resolved within 7 days.
If we do not resolve your complaint to your satisfaction, you may complain to the Data Protection Board of India, or to the Consumer Disputes Redressal Commission where you live or work.