Privacy Policy

devsforfun ID is operated by devsforfun (India). This policy explains what personal data we collect, why, and the rights you have under GDPR, UK GDPR, CCPA, and the Indian Digital Personal Data Protection Act, 2023 (DPDP).

Data we collect

• Account: email, name, phone number, avatar, hashed password.
• Security: MFA factor metadata, auth events (IP + user agent + timestamp).
• OAuth / consent: the satellite apps you authorized, scopes granted, and when.
• Billing: subscription status, payment method metadata (no card numbers).
• Reviews / activity: your reviews, and that you use the apps you review.

Your rights

• Access: download your data at /settings/privacy/data-export.
• Erasure: request deletion at /settings/privacy/delete-account (30-day grace).
• Rectification, portability, restriction, objection: submit via /privacy/dsr.

Retention

We retain data for as long as your account is active. Auth events older than 3 years are anonymized. Financial records are retained for 7 years where law requires.

Contact

Data Protection contact: privacy@devsforfun.app.

This is a baseline policy generated during M8. Replace with counsel-reviewed copy before public launch.