Effective date: 4 July 2025

This Privacy Policy explains how Sanaita Technologies Pvt Ltd (“Company,” “we,” “our,” or “us”) collects, uses, and safeguards the information you provide when you use the mobile application Flip To Win (“App”). By installing or using the App, you acknowledge that you have read and understood this Policy.

1. Laws We Comply With

Because we make the App available in India, the United States, Japan, and China, we comply with:

India — Digital Personal Data Protection Act 2023 (DPDP)

United States — California Consumer Privacy Act (as amended by CPRA)

Japan — Act on the Protection of Personal Information (APPI)

China — Personal Information Protection Law (PIPL)

Where these laws differ, we apply the more protective standard.

2. Information We Collect

Data Category Items Collected Purpose of Collection

User Identifiers Email address, Phone number (OTP) • Account creation and login

• Password reset

• Customer support correspondence

Device Identifiers None stored or transmitted —

Payment or Location Not collected —

We do not collect photos, contacts, precise or coarse location, biometrics, or financial information.

3. How We Use Your Information

Authenticate you via email or phone OTP and keep your account secure.

Send essential service messages (e.g., password-reset links).

Respond to support queries you submit.

4. Legal Bases for Processing

Consent — you provide data voluntarily during sign-up.

Contractual necessity — we need the data to deliver the App’s core functionality.

Legitimate interests — fraud prevention and protecting the App’s integrity.

5. Third-Party Services / SDKs

The App uses a phone-number OTP identity provider (e.g., Firebase Authentication SMS). No analytics, ad, crash-reporting, or payment SDKs are integrated.

6. Data Sharing

We do not sell, rent, or share personal data with advertisers or analytics partners. The OTP SMS gateway receives only the phone number needed to deliver the verification code and is contractually bound to use it for that purpose alone.

7. International Transfers

All servers are located in India. We do not store or process personal information outside the user’s country of residence.

8. Data Retention

We keep your data until you delete your account. Once an account is deleted, we erase associated personal information from production databases within 30 days and from backups within 90 days.

9. Your Rights

Access / Copy — request a copy of the data we hold.

Correction — correct inaccurate or incomplete data.

Deletion — permanently erase your account data.

Opt-Out — withdraw consent for email or SMS notifications.

You can exercise these rights at any time using the Data Request Portal.

10. Security Measures

All network traffic is encrypted in transit via HTTPS / TLS 1.3.

Add any at-rest encryption, firewall, or RBAC details here if applicable.

11. Children’s Privacy

The App is intended for users aged 18 and older. We do not knowingly collect data from children under 18. If you believe a child has provided us personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Policy from time to time. We will post the revised version here and update the “Effective date” above. Continued use of the App after we make changes constitutes acceptance of the updated Policy.

13. Contact Us

Sanaita Technologies Pvt Ltd

1151, Block G, Sector 57, Gurugram, Haryana 122413, India

Phone: +91-92059 01626

Email: [email protected]