Privacy Policy

1. About Jeet Sikka

Jeet Sikka is a mobile reward and gaming platform developed and operated by Shani Wattoo, accessible via the mobile application available on Google Play Store. The platform allows registered users in Pakistan to earn virtual coins ("Sikke") by participating in skill-based activities, which can be redeemed for real monetary value via Easypaisa and Jazzcash mobile wallets.

2. Information We Collect

We collect the following categories of information when you create an account or use our app:

2.1 Information You Provide Directly

• Account Information: Email address, display name, and password (hashed/encrypted) when you sign up via email.
• Google Sign-In: If you authenticate via Google, we receive your Google account's name, email address, and profile photo as provided by Google OAuth.
• Withdrawal Information: Easypaisa or Jazzcash mobile wallet number (MSISDN) and account holder name provided at the time of a withdrawal request. Note: We never store or have access to your mobile banking PIN or password.
• Display Name Customization: Any display name or profile name you choose to set in the app.
• Referral Code Usage: If you use or share a referral code, we associate the referral activity with your account.

2.2 Information Collected Automatically

• App Activity Data: Records of in-app activities including quiz attempts, quiz scores, daily streak check-ins, spin wheel outcomes, scratch card results, game plays, daily quest completions, and Sikke coin transactions.
• Device Information: Device model, operating system version, app version, and unique device identifiers (Android ID / IDFA) — used only for crash reporting and fraud prevention purposes.
• Crash & Error Logs: Anonymized crash reports and error logs collected via our in-app logging system (AppLoggerService). These logs contain stack traces and feature names — never personally identifiable information (PII).
• Session Data: App session timestamps, session durations, and general navigation patterns (e.g., which screens were visited). This data is used solely to improve the app experience.

2.3 Information Collected by Third-Party Services

• Google AdMob: We display rewarded video advertisements via Google AdMob. AdMob may collect non-sensitive device identifiers (such as the Advertising ID) to serve contextually relevant ads and measure ad performance. This data is governed by Google's Privacy Policy.
• Supabase (Backend-as-a-Service): Our backend database and authentication are powered by Supabase, which stores your profile data, Sikke coin balance, and game history securely in encrypted cloud storage (Google Cloud infrastructure). Supabase's privacy practices are available at supabase.com/privacy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Account Management: To create, verify, and maintain your Jeet Sikka account and user profile.
• Core App Functionality: To credit Sikke coins for quizzes, games, daily streaks, referrals, and other in-app activities.
• Withdrawal Processing: To verify withdrawal eligibility (1,500 Sikke minimum) and process payments to your Easypaisa or Jazzcash mobile wallet.
• Leaderboard & Competition: To display your display name and coin balance on the global in-app leaderboard. Note: your email address is never publicly shown.
• Personalization: To maintain your daily streak count, notification preferences, sound effect preferences, and other user settings.
• Push Notifications: To send daily reward reminders, promotional announcements, and in-app banner notifications if you have granted notification permission. You can revoke this permission at any time in your device settings.
• Anti-Fraud & Fair Play Enforcement: To detect and prevent account abuse, botting, multiple account fraud, emulator exploitation, and other violations of our fair play rules.
• App Improvement: To analyze crash logs, error reports, and anonymized usage patterns to continuously improve app performance and fix bugs.
• Legal Compliance: To comply with applicable laws, court orders, and regulatory requirements in Pakistan.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third parties. We share your data only in the following limited circumstances:

• Supabase: Our cloud database provider stores your account and activity data in encrypted form. Supabase processes data under strict data processing agreements.
• Google AdMob: Non-sensitive advertising identifiers are shared with AdMob for ad serving and attribution. No financial or contact data is shared with AdMob.
• Easypaisa / Jazzcash: Your mobile wallet number is used solely to initiate your requested withdrawal payment. We do not store this number permanently after the transaction is complete.
• Legal Authorities: We may disclose information if required to do so by law or in good faith that such disclosure is necessary to comply with legal obligations, protect our rights, or prevent harm.

5. Data Retention

We retain your personal information for as long as your account remains active or as necessary to provide our services. Specifically:

• Account Data: Retained for the duration of your active account plus 6 months after account deletion or deactivation.
• Transaction Records: Withdrawal transaction records are retained for 12 months for financial compliance and dispute resolution.
• Crash Logs: Anonymized crash and error logs are retained for 90 days and then automatically purged.
• Deleted Accounts: Upon account deletion request, all personally identifiable information is permanently erased from our databases within 30 days of the deletion request. Anonymized aggregate statistics (e.g., total quiz attempts — no user link) may be retained for analytics.

6. Google Play Data Safety Disclosure

In accordance with Google Play's Data Safety requirements, the following summarizes our data practices:

• Data Collected: Name, email address, mobile wallet number (for withdrawals only), in-app activity data.
• Data Shared: Advertising ID shared with Google AdMob for ad delivery and measurement.
• Data Encryption: All data is encrypted in transit (TLS 1.2+) and at rest.
• User Control: Users can request account and data deletion from within the app (Profile → Delete My Account).
• Children: Jeet Sikka is intended for users aged 13 and above. We do not knowingly collect data from children under 13.

7. AdMob & Advertising Consent

Jeet Sikka displays rewarded video advertisements through Google AdMob. By using Jeet Sikka and watching in-app video ads, you acknowledge that:

• Google AdMob may use your device's Advertising ID to serve personalized or contextual ads.
• You can opt out of personalized advertising by adjusting your device's ad personalization settings: Device Settings → Google → Ads → Opt out of Ads Personalization.
• We do not collect or control the data processed by AdMob beyond standard integration. AdMob's practices are governed by Google's Privacy Policy.

8. Security

We implement industry-standard security measures to protect your data:

• All data transmission between the app and our servers uses TLS 1.2+ encryption.
• Passwords are never stored in plain text — we use Supabase's secure bcrypt hashing.
• Database access is protected by Supabase Row-Level Security (RLS) policies, ensuring users can only access their own data.
• Withdrawal requests are validated server-side to prevent unauthorized or fraudulent transactions.
• No sensitive financial credentials (bank PINs, payment passwords) are ever collected or stored by Jeet Sikka.

While we take every reasonable precaution, no internet-based system can guarantee 100% security. We encourage you to use a strong, unique password and to report any security concerns to contact@jeetsikka.app.

9. Your Rights & Account Deletion

As a Jeet Sikka user, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Update your display name from within the app (Profile → Edit Display Name).
• Right to Deletion (Right to be Forgotten): Request permanent deletion of your account and all associated personal data via:
  • In-App: Profile → "Delete My Account" button
  • Email: contact@jeetsikka.app
• Right to Opt-Out of Notifications: Disable push notifications at any time via your device settings or within the app (Profile → Push Notifications toggle).
• Right to Data Portability: Contact us to request an export of your personal data in a machine-readable format.

10. Children's Privacy

Jeet Sikka is designed for users aged 13 and above. We do not knowingly collect or solicit personal information from children under the age of 13. If we become aware that a child under 13 has provided personal information, we will promptly delete that account and all associated data. If you believe a child under 13 has registered, please contact us at contact@jeetsikka.app.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display an in-app notification informing you of the changes.
• Request re-consent if the changes materially affect how we process your personal data.

Your continued use of Jeet Sikka after any changes constitutes your acceptance of the updated Privacy Policy.

12. Compliance with Pakistani Law & Data Protection (PDPB)

Jeet Sikka complies with applicable Pakistani digital data protection guidelines, including the principles outlined in the Personal Data Protection Bill (PDPB) of Pakistan:

• Data Localization & Cloud Security: User data is stored in secure, encrypted cloud servers with access strictly controlled via role-based access policies.
• Skill-Based Activity Data: Quiz scores, game times, and streak records are processed solely for awarding Sikke rewards and maintaining fair competition on the leaderboard.
• No Financial PIN Collection: Jeet Sikka never requests, accesses, or stores your mobile banking PINs, passwords, or OTPs. Payout numbers (Easypaisa/Jazzcash) are used strictly to disburse earned reward funds.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• 📧 Email: contact@jeetsikka.app
• 🌐 Website: jeetsikka.app
• 🏢 Developer: Shani Wattoo, Pakistan