Privacy Policy

Last updated: June 11, 2025  ·  Effective: June 11, 2025

1. Who We Are

Boltha is a social prediction platform operated by PIZISTE INTERNATIONAL PRIVATE LIMITED, a company incorporated in India (CIN available on request). Our registered office is in Mumbai, Maharashtra, India.

For the purposes of the DPDP Act 2023, PIZISTE INTERNATIONAL PRIVATE LIMITED is the Data Fiduciary for all personal data processed through the Boltha app.

2. What Data We Collect

We collect only what is necessary to run Boltha:

• Account data: Email address, username, display name you provide during registration
• Profile data: Avatar selection, bio, prediction arenas you choose
• Prediction activity: Questions you predict on, your answers, confidence level, points earned
• Social data: Circles you create or join, users you follow, reactions you give
• Device data: Push notification token, device platform (Android/iOS) for delivering notifications
• Usage data: App interactions to improve the product (no third-party analytics SDKs)

We do not collect: payment information, precise GPS location, contacts, camera/microphone access, or any biometric data.

3. How We Use Your Data

• To create and maintain your Boltha account
• To show your predictions, score, and reputation on your profile and leaderboards
• To send you streak reminders, prediction results, and circle activity notifications
• To generate AI-powered prediction questions relevant to your selected arenas
• To prevent fraud, abuse, and violations of our Terms of Service
• To improve the app based on aggregate usage patterns

4. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase Inc. — our database and authentication provider (data stored in ap-south-1 Mumbai region)
• Anthropic PBC — AI question generation (only anonymised topic prompts, no personal data sent)
• Expo / EAS — app build and push notification delivery infrastructure
• Law enforcement — if required by a valid Indian court order or government directive

5. Your Public Profile

The following information is visible to all Boltha users by default: your username, display name, avatar, boltha score, prediction accuracy, streak, arenas, and public predictions. Your email address is never shown publicly.

You can edit your display name, bio, and avatar at any time from your profile settings.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is permanently deleted within 30 days. Your predictions may be retained in anonymised, aggregated form for platform statistics.

7. Your Rights Under DPDP Act 2023

As a Data Principal under the DPDP Act 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate or incomplete data (available directly in the app)
• Erasure — request deletion of your account and personal data
• Grievance redressal — raise a complaint with our Data Protection Officer
• Nominate — nominate another person to exercise rights on your behalf in case of death or incapacity

To exercise any right, email us at privacy@boltha.app. We will respond within 30 days.

8. Children's Privacy

Boltha is not intended for users under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us immediately and we will delete it.

9. Security

We implement industry-standard security measures including encrypted data transmission (TLS), Row Level Security on our database, and hashed password storage through Supabase Auth. However, no system is 100% secure and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app. Continued use after changes constitutes acceptance of the updated policy.