Privacy policy

Who is responsible

• Operator of MySpecial.App: [TO BE FILLED BY LEGAL] (legal entity name)
• Registered address: [TO BE FILLED BY LEGAL]
• Grievance officer: [TO BE FILLED BY LEGAL] (see the grievance officer page)

What we collect and why

• Your mobile number: to sign you in with one-time codes and to send you notices about your orders.
• Your display name and profile photo, and an email address if you give one: to show who you are to the creators you buy from and to reach you.
• Your date of birth and your answer to the age question: MySpecial.App is only for people who are 18 or older.
• Your consents (terms, privacy policy, age, WhatsApp messages), with the version you accepted and when.
• Your orders, payments, refunds and messages, and what you upload: to deliver what you buy, to keep the accounts the law requires, and to review reports and problems.
• For creators: PAN, an identity document, a selfie and bank account details, to verify who is paid and to pay them; social handles they choose to verify.
• A random device identifier, your browser's description (user agent) and network address: to keep your account secure and to stop abuse. Page visits are counted with a daily code that cannot be traced back to you.

Payments

Card, UPI and bank details are entered on our payment gateway's own page and are handled by the gateway. We receive the result of the payment and the details the gateway reports about it.

Who we share it with

Creators see your display name and what you send or buy from them, never your phone number or email.

Service providers that run parts of MySpecial.App for us receive only what their task needs: the payment gateway, text-message and WhatsApp delivery, identity verification for creators, content screening, and media storage and video.

We do not sell your personal data.

We give information to authorities when the law requires it.

Cookies

• Session cookie: keeps you signed in.
• Security token (XSRF-TOKEN): protects your actions against forged requests.
• Age confirmation (age_ok): remembers that you confirmed you are 18 or older.
• Device identifier (device_id): a random value that recognises your browser, for security and to count page visits.
• We set no advertising or tracking cookies.

How long we keep it

While your account is open, we keep what you see in it.

When you delete your account, your name, email, date of birth, profile and devices are removed at once. Financial and identity (KYC) records, such as orders, payments, refunds, payouts and the phone number, are kept for 7 years, until the end of the seventh financial year after the financial year in which the account was deleted (to 31 March, Indian time), because Indian government rules require records of this kind to be kept. After that the personal data in them is erased; amounts and accounting entries stay without it. If the account was suspended for breaking our rules, a one-way coded form of its phone number (not the number itself) is kept permanently, so that the number cannot be used to sign up again.

An account that is the subject of an open legal request is kept until the request is closed.

Your choices and rights

• Download your data: from your account page you can ask for a copy of what we keep about you, as a ZIP file. It stays available for 7 days.
• Correct your details: change your name and photo on your account page.
• Delete your account: from your account page, once nothing is open.
• Complaints: write to the grievance officer.