Privacy Policy
This Privacy Policy describes how Quizophrenia Pvt Limited ("Company", "we", "us", "our"), the operator of the Quizophrenia website and the Zvibe mobile application (collectively, the "Platform"), collects, uses, discloses, and protects your personal information. This Policy is published in compliance with:
- The Digital Personal Data Protection Act, 2023 (DPDP Act)
- The Information Technology Act, 2000 and the rules made thereunder
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
- The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
- The Consumer Protection (E-Commerce) Rules, 2020
1. Information We Collect
1.1 Information You Provide
- Account information: mobile number, name, username, profile photo, email (optional), date of birth, gender, address (only if you choose to ship purchases).
- Identity verification (sellers only): KYC documents — PAN, GSTIN, bank details — collected solely for seller onboarding under the Goods and Services Tax regime.
- Communications: chat messages, community posts, stories, support tickets.
1.2 Information Collected Automatically
- Device identifiers, IP address, OS version, app version, crash logs.
- Gameplay telemetry (scores, session duration, in-game actions) — used solely for matchmaking, leaderboards, and anti-cheat.
- Cookies and similar technologies on the website (see Section 6).
1.3 What We Do Not Collect
- We do not collect financial account credentials. All payments are processed by PCI-DSS compliant gateways (Razorpay) and we never store your card or UPI details.
- We do not charge users to play games. The Platform is 100% free to play for life; no entry fees, no in-app purchases for gameplay.
- We do not sell your personal data to third parties.
2. Purpose & Legal Basis for Processing
| Purpose | Legal Basis (DPDP Act) |
|---|---|
| Account creation and authentication | Consent & Performance of contract |
| Game matchmaking, leaderboards, anti-cheat | Legitimate use |
| E-commerce order fulfilment & shipping | Performance of contract |
| Personalised advertising (with consent) | Consent (revocable) |
| Fraud prevention & security | Legitimate use & legal obligation |
| Compliance with tax, GST and other statutory requirements | Legal obligation |
3. How We Share Information
We share data only with:
- Payment processors (Razorpay) — for transaction processing under RBI guidelines.
- Logistics partners — for shipping physical goods.
- Ad networks (InMobi, Google AdMob, AppLovin, Unity, Pangle) — only anonymised/aggregated identifiers; no personally identifiable information.
- Cloud infrastructure providers (AWS — data stored in India region) under contractual data-processing agreements.
- Law enforcement — only when required by a valid Indian legal process.
4. Data Retention
We retain personal data only as long as necessary for the purpose collected, or as required by law (e.g., GST records — 6 years; e-commerce transaction records — 5 years per the Consumer Protection Act). On account deletion, personal data is purged within 30 days, except where retention is legally mandated.
5. Your Rights under the DPDP Act, 2023
You have the right to:
- Access — request a summary of personal data we hold about you.
- Correction & erasure — correct inaccurate data or request deletion.
- Withdraw consent — at any time, with the same ease as giving it.
- Grievance redressal — escalate complaints to our Grievance Officer (see Section 9).
- Nominate — appoint a person to exercise your rights in case of incapacity.
Requests can be sent to team@quizophrenia.in. We respond within 30 days.
6. Cookies & Tracking
The website uses essential cookies for session management. Analytics and advertising cookies are used only with your explicit consent. You can withdraw consent any time via your browser settings.
7. Children's Privacy
The Platform is intended for users aged 13 years and above. E-commerce and payment features are restricted to users 18 years or older. We do not knowingly collect data from children below 13. Verifiable parental consent is sought for users below 18, in compliance with Section 9 of the DPDP Act, 2023.
8. Security
We implement reasonable security practices as defined under the SPDI Rules, 2011, including:
- Encryption in transit (TLS 1.3) and at rest (AES-256).
- Role-based access control on production systems.
- Regular security audits and vulnerability assessments.
- JWT-based authentication with rotating tokens.
- ISO 27001 -aligned operational practices.
9. Grievance Officer
As required under Rule 3(11) of the IT (Intermediary) Rules, 2021 and Section 8(9) of the DPDP Act, 2023:
Name: Pritha
Email: team@quizophrenia.in
Phone: +91 70999 96652
Address: C/o Shikha Dasgupta, Laxmicharan Road, Subashnagar, Sreebhumi – 788710, Assam, India
Hours: Monday – Saturday, 10:00 – 19:00 IST
Acknowledgement within 24 hours. Resolution within 15 days as mandated by law.
10. Changes to this Policy
Material changes will be notified by email and in-app notice at least 7 days before taking effect. Continued use of the Platform after the effective date constitutes acceptance.
11. Jurisdiction
This Policy is governed by the laws of India. All disputes are subject to the exclusive jurisdiction of the courts at Sreebhumi, Assam.