MINDSTRIKE · AXPOCREATION

Privacy Policy

How Mindstrike handles your account and gameplay data.

Effective and last updated: 20 September 2026

Mindstrike is a maths practice and duelling app provided by AxpoCreation in Bengaluru, India. This policy covers the Mindstrike iPhone app and these Mindstrike information pages, not our other apps.

1. Information we use

• Sign-in information: Apple or Google account identifiers, authentication tokens, and the name and email address the provider shares with us. Apple may supply a private relay email address. Provider profile metadata, such as a Google profile-picture URL, may also be held by our authentication service. We do not receive your Apple or Google password.
• Player profile: your display name, player identifiers, join date, selected avatar, training goal and preferences.
• Gameplay: ratings, league, earned coins, duel results, opponents, questions and answer attempts, scores, timing, practice history, personal bests and unfinished sessions. Practice and ranked progression are stored separately.
• Technical information: our hosting and authentication providers process IP addresses, request times, authentication events and errors to deliver and secure the service. Google Sign-In’s SDK discloses collection of name, email address, phone number, coarse location, user and device identifiers, other usage data and other data. Its declared purposes include sign-in functionality and analytics. These SDK disclosures do not mean Mindstrike requests access to your contacts, GPS location or phone number in its own interface.
• Deletion requests: your account ID, account email, confirmation email, display name, player ID, linked sign-in providers, app version, request time, processing status and seven-day completion deadline. We use these details to process deletion and confirm completion.
• Support: your email address and the information you choose to send when you contact us. Please do not send passwords or sign-in codes.

2. Why we use it

We use this information to authenticate accounts, restore and synchronise saves, match players, display results, personalise settings, prevent abuse, diagnose service problems and answer support or privacy requests. We do not use gameplay as a school grade, medical assessment or validated measure of intelligence.

Where a legal basis is required, we process information to provide the service you request, for legitimate interests in service security and support, to comply with legal obligations, or with consent where required. You can withdraw consent where processing relies on it.

3. Storage and sharing

Progress is cached on your iPhone and saved to Supabase. Sign-in tokens are kept in the iOS Keychain. Some device preferences, including audio settings, stay on your iPhone. Cloud saves are associated with your account and protected by access controls.

During a live duel, your opponent receives your display name, Power Rating, score and match status. Use a nickname if you do not want to share your real name. We do not offer public chat, contact uploads or a public profile directory.

Supabase provides account authentication, database storage and service infrastructure. Apple and Google provide sign-in; Vercel hosts these pages. These providers may process information outside your country. We use providers with security and data-protection commitments and require service providers processing data for us to protect it consistently with this policy and applicable law. Apple and Google also act under their own policies when you use their accounts.

Read Supabase’s privacy policy, Apple’s privacy policy, Google’s privacy policy and Vercel’s privacy policy. We may disclose information when legally required or necessary to protect users and the service; we do not share it with advertising networks.

4. Retention and deletion

We keep account and gameplay records while your account is active so that you can resume play. Request permanent deletion from Account → Privacy & support → Delete account. We securely record your request and complete deletion within 7 days, then send confirmation to the email you provide. You do not need to call or email support to submit a request.

A request is not immediate deletion. Your account and progress remain available while it is pending; playing or signing in does not cancel it. When deletion is completed, we remove the account, its cloud save, recovery snapshots, associated matchmaking records and deletion-request record. Your identity is anonymised in opponents’ cloud match records while their earned results are preserved.

Signing out or uninstalling alone does not delete your cloud account. Local caches on your devices and copies in backups you control may remain after cloud deletion; removing the app removes its local progress from that device. An opponent’s offline cache may retain what they previously saw until it synchronises.

Infrastructure backups and security logs may remain for the hosting provider’s configured retention period and are not used to restore a deleted account for normal use. We may retain limited information where required by law or needed to resolve a dispute. Support correspondence is kept only as long as needed to address the request and applicable obligations. Contact us for the retention details relevant to a request.

See account deletion and privacy choices for the steps and help if you cannot access the app.

5. Your choices and rights

Edit your display name, avatar and training goal in Account. Depending on where you live, you may have rights to access, correct, export or delete your personal data, restrict or object to certain processing, withdraw consent, and complain to your local data protection authority. Email ashishume@gmail.com with the subject “Mindstrike privacy request”. We may need to verify account ownership before acting.

You can manage Mindstrike’s access in your Apple or Google account settings. Disconnecting a provider does not by itself delete Mindstrike’s cloud records.

6. Children

Mindstrike is a general-audience service and is not directed to children under 13, or a higher minimum age required for independent use where they live. Do not create an account if you do not meet that age requirement. If you believe a child has provided personal information without the necessary authorisation, contact us so we can investigate and delete it where appropriate.

7. These web pages

The pages under /mindstrike do not load advertising, analytics scripts, external fonts or optional cookies. Our host still processes ordinary web requests, including IP addresses and browser information, to serve and protect the site. Links outside these pages may have different privacy practices.

8. Changes and contact

We will update the date on this page when this policy changes and provide further notice when required for a material change. For privacy questions, contact AxpoCreation, Bengaluru, Karnataka, India at ashishume@gmail.com.