Privacy Policy
This Privacy Policy explains how Mahesh Kolate ("we", "us") handles personal data in the XaiMind app and website (the "Service"). We follow applicable Indian law, including the Digital Personal Data Protection Act, 2023, as it applies to us.
1. Data we collect
| Type | Examples | Source |
|---|---|---|
| Account data | Name, email address and profile picture from your Google account; a display name shown in the app | Google sign-in, you |
| App activity | Matches you open, teams you build, priorities and filters you choose, your plan, rankings and points | Your use of the app |
| Reward data | Your rank, points, reward amount, voucher status and voucher details if you receive one | Our system, voucher provider |
| Payment data | Payment status, amount, payment ID and plan. We do not receive or store your card, UPI or bank details. | Razorpay |
| Device and technical data | Device type, operating system, app version, IP address, error logs, and a push-notification token if you allow notifications | Your device |
| Messages to us | Emails or complaints you send, and the name, email, subject and message you type in the contact form on this website | You |
We do not collect your bank account, UPI ID, or government ID in the app.
1A. How the AI uses data
- The match predictions are produced from cricket match data (such as past match records, squads, the toss and the playing XI). They are not built from your personal data.
- Your account and app activity are used to run the features you use, for example to save your teams and show your own results.
- The AI does not make decisions that have legal effect on you. Predictions are estimates for information only.
2. Why we use it
- To provide the Service: sign you in, build and save your teams, show predictions and results.
- To take payments, activate plans and handle refunds.
- To run the reward programme when it is on: work out rankings, issue vouchers, meet tax obligations.
- To keep the Service safe: prevent fraud, duplicate accounts and misuse.
- To send service messages and, if you allow, notifications about matches.
- To improve the Service, fix errors and understand how features are used.
We process your data with your consent, to perform our contract with you, and for legitimate uses allowed by law.
3. Who we share it with
- Google, for sign-in.
- Razorpay, to process payments.
- Voucher provider (Xoxoday), when a reward voucher is ordered. We send the voucher amount and an order reference. We send your email address only if email delivery of vouchers is switched on.
- FormSubmit, a form service that delivers the messages sent from the contact form on this website to our support inbox. We use these details only to reply to you.
- Service providers such as cloud hosting, notification and error-monitoring services, who process data for us under our instructions.
- Authorities, where the law requires it (for example, tax filings or a valid legal order).
- Other users: your display name, points, rank and winner tag may be shown in match rankings. Your email is not shown to other users.
We do not sell your personal data.
4. How long we keep it
We keep your data while your account is active and for as long as needed for the purposes above and to meet legal, tax and accounting duties. When you delete your account we delete or anonymise your personal data, except what we must keep by law (for example payment and reward records).
5. Your rights
You may ask us to: give you a summary of your data; correct or update it; erase it; withdraw consent; or nominate someone to exercise your rights. Write to [email protected]. We may need to verify your identity. You may also complain to the Data Protection Board of India once it is functioning, after contacting us first.
6. Children
The Service is only for people aged 18 and above. We do not knowingly collect data of children. If you think a child has given us data, write to us and we will delete it.
7. Security
We use reasonable safeguards such as encrypted connections, access controls and limited staff access. No system is completely secure. If a data breach affects you, we will tell you and the authorities as the law requires.
8. Where data is processed
Your data may be stored on servers located in India or in other countries where our service providers operate. We take steps so that your data is handled with care.
9. Changes
We may update this policy. The date at the top shows the latest version. We will notify you in the app about material changes.
10. Contact and grievance officer
Mahesh Kolate
Mahesh Kolate, Mali Babulgao Malibabhulgaon Pathardi Ahmadnagar Maharashtra 414102
Email: [email protected]