Privacy Policy

On the waitlist (today):

• Email address — so we can notify you when TFIK opens.
• Favourite hero — optional; used to personalise your onboarding.
• IP address and browser user-agent — automatically collected to enforce rate limits, prevent abuse, and dedupe signups across email variants.
• Signup timestamp and position — used to determine your founding-fan tier ( Adhinaayakudu, Mass Hero, or FDFS) when you create your account at launch.

In the mobile app (after launch):

• Account details you provide — name, username, optional date of birth, optional gender, optional profile photo.
• Content you create — posts, comments, reactions, hero contributions.
• Activity data — streaks, scores, login history, push-notification tokens.

We never collect financial data. The waitlist has no purchases, and the launch app's premium tier (when introduced) will be billed by Apple App Store and Google Play — neither of which shares card details with us.

• Email — send the launch notification, then occasional updates about the founding-fan programme. We do not send third-party marketing.
• Hero choice — pre-fill your selection during onboarding.
• IP / user-agent — enforce our 10-requests/minute rate limit, detect duplicate signups (e.g. plus-addressing variants), and keep aggregate non-identifiable signup analytics.
• Position / tier — redeem your founding-fan perks the first time you sign into the app.

The marketing site (tfik.co.in) does not use cookies, analytics scripts, advertising trackers, or third-party pixels. There is no Google Analytics, no Facebook Pixel, no Meta SDK. The only request your browser makes to a third party is to load Google Fonts (Inter and Manrope).

We do not sell or rent your data to anyone. We use a small set of infrastructure providers to operate the service:

• Cloudflare — serves the marketing site; receives request metadata (IP, headers) as a normal part of HTTP delivery.
• DigitalOcean — hosts our backend API and managed PostgreSQL database.
• ZeptoMail — delivers transactional email (launch notification). Receives only your email address and the message body.

All providers are bound by contract to process your data only on our instructions.

Your data is stored on servers we operate in India and Singapore. All traffic is over HTTPS (TLS 1.2 or higher), and the database is encrypted at rest.

• If you don't join TFIK at launch — we delete your waitlist record within 90 days of the public launch announcement.
• If you do join at launch — your waitlist record is merged into your user account. The launch-day Terms and in-app Privacy Policy then govern that account.
• If you ask us to delete you sooner — we delete your record within 30 days of your request.

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix incorrect data.
• Deletion — request removal of your waitlist entry.
• Consent withdrawal — opt out of launch notifications.

Email [email protected]with your request. We'll respond within 30 days.

• All traffic is over HTTPS (TLS 1.2 or higher).
• Database is encrypted at rest.
• Access to waitlist data is limited to TFIK's engineering team, on a need-to-know basis.
• We don't store financial information.
• Suspected breaches will be reported to affected users and to the Indian Data Protection Board within 72 hours, as required by the Digital Personal Data Protection Act, 2023.

TFIK is intended for users aged 13 and above. If you are under 18, please use TFIK with the involvement of a parent or guardian. If we learn we've collected data from a child under 13, we'll delete it promptly.

When we change this policy, we'll update the "Last updated" date above. For material changes, we'll also email everyone on the waitlist.

• General privacy questions: [email protected]
• Grievance Officer (Digital Personal Data Protection Act, 2023): [email protected]

We acknowledge messages within 7 days and resolve them within 30 days.