Notice version 2026-11-05
Your information, plainly.
We ask about your investments to build community comparisons. We do not ask for your name, email or UPI ID on the investment form.
What we keep
Your age bracket, profession, optional income bracket, reported total or range, category amounts, optional investing habits, stories and consent choices are stored. We also keep a random record ID, submission date, private-code digest and a retry digest. Blank amounts remain different from zero.
Voluntarily submitted stories are retained for private review even if you do not allow video use. Public adaptation or publication requires permission, given using the optional video checkbox or the story-permission checkbox on the reward claim form. Please leave names, account details, contact details and identifying events out of stories. Automated checks cannot catch every identifying detail.
Your code and your browser
Your private code and result stay in this tab’s session storage so you can refresh the results page. Start over clears them. Browser session restoration may restore a tab’s session storage; use Start over on a shared device. The server stores a keyed digest of the code, not the readable code. We cannot recover it for you.
Anyone holding your code can check reward selection or remove claim contact details. Keep it private. We do not put it in links, analytics or shared cards.
AI-featured stories
With your permission, we may adapt your submitted story into an AI-featured story using fictional AI-generated visuals and narration. We will not show your real name, face, email address or UPI ID, and will remove or change identifying details before publication. The reward claim form asks for this permission separately from consent to use your delivery contact.
We record the exact story-permission notice, its version, your reward choice and the time of agreement. This permission history remains after your delivery contact is deleted. Contact the operator to withdraw story permission; deleting delivery details alone does not withdraw it.
Claims and community updates
A reward claim collects either an email address for an Amazon voucher or a UPI ID for a cash prize with your permission, linked privately to the selected submission until fulfillment or deletion. These contacts are encrypted in the database and deleted from the active database after fulfillment, or when you use Manage claim details. That action leaves your financial submission and story intact. Delivery services may retain their own transaction records.
Community update subscriptions are optional and stored separately, without a submission ID. They are only for community benchmark updates. Unsubscribe using your saved link or contact us. No partner promotions. If subscriptions are closed, we do not collect an update email.
Security and service providers
Cloudflare hosts the website and database and provides the security challenge. Requests necessarily reach Cloudflare with network and device information, including your IP address. The application uses a short-lived keyed IP digest for rate limits and does not store IP addresses in its database. Cloudflare’s infrastructure may process or retain technical metadata under its own policies.
Financial responses are not encrypted field by field. Access is limited to the operator’s authorized Cloudflare account and trusted operational tools. Claim and subscription contacts use separate application encryption. We use no advertising trackers or third-party analytics, and serve fonts locally.
These are private, pseudonymous records, not a promise of complete anonymity. Stories, unusual portfolios and very small comparison groups can reveal information. Results show aggregated comparisons, not a public list of submissions. Downloading a share card is your choice.
Administrators use a private password and a short-lived secure authentication cookie. Editorial review actions record an administrator label, action and timestamp for accountability. These administrator records are separate from participant claim contacts.
Retention and requests
Financial submissions and stories are retained for benchmarking and private editorial review while those purposes continue. The operator reviews this need at least annually. Claim contacts are removed after delivery; unused update subscriptions remain until unsubscribed or retired by the operator. Deleted data may remain in provider backups until those backups expire; the Free D1 plan currently provides seven days of restore history.
For access, correction, withdrawal or another privacy request, contact the operator. Include your code only in a private support channel if needed to locate the record. The public deletion tool intentionally removes claim contacts only. Publication withdrawal and other legal requests need operator review. Existing exported or published material may need separate handling.
Storage location
Cloudflare may process data outside India. An Asia-Pacific placement hint is not an India-only storage guarantee. The operator must review applicable requirements before opening collection.