Mindmart ("we," "us," "our") operates the website mindmart.app and associated applications (the "Platform"). This Privacy Policy describes how we collect, use, store, share, and protect your personal data. This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended in 2026).
By using the Platform, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy.
Account registration data: username, email address, date of birth, password (stored in hashed form). Date of birth is collected to verify the user meets the minimum age requirement of 13 years and to comply with the DPDP Act's requirements for processing minors' data. We store only the date of birth, not derived age, and use it solely for age verification.
User-generated content: thoughts, comments, and images you upload to the Platform.
Profile information: username, bio, avatar image.
Contest participation: when participating in contests or promotional campaigns, we may collect your full name, phone number, and payment information (bank account or UPI details) for prize disbursement and TDS compliance.
IP address, browser type, operating system, device type, screen resolution. Pages visited, features used, time spent on pages, trading activity, thoughts viewed and invested in. Essential cookies for authentication and session management. Approximate location derived from IP address (city/state level only — we do not collect precise GPS location).
We do not collect financial information such as credit card numbers, bank account details, or cryptocurrency wallet addresses for the purpose of platform usage. Neurons (◈) are fictional and involve no real financial transactions. We do not collect biometric data, government-issued identity numbers (Aadhaar, PAN), or health information during normal platform use. We strip EXIF metadata (including GPS coordinates, camera model, and timestamps) from user-uploaded images, though we cannot guarantee complete removal in all cases.
To create and maintain your account and profile. To display your thoughts, images, and comments to other users. To process trades, calculate P&L, and manage neuron balances. To populate leaderboards and display trading activity. To send notifications about trades, upvotes, replies, and platform announcements. To administer contests, verify winners, and comply with TDS obligations under Indian tax law. To understand usage patterns, identify bugs, and improve the platform using aggregated and anonymized data. To enforce our Terms of Service, detect fraud, and respond to legal requests.
We process your data based on your consent (provided at registration and through continued use), the necessity of processing for our services, and compliance with legal obligations under Indian law.
Your data is stored on cloud infrastructure. User-uploaded images are stored on Cloudflare R2 object storage. Database and application data are stored on servers that may be located outside India. By using the Platform, you consent to the transfer and storage of your data on servers outside the territory of India.
We implement reasonable security practices including encryption of data in transit using TLS/SSL (HTTPS), hashing of passwords using industry-standard algorithms, role-based access controls, regular backups, and EXIF/metadata stripping from uploaded images.
We retain your data for as long as your account is active. If you delete your account, we will delete or anonymize your data within 90 days, except where retention is required by law (tax records related to contest prizes are retained for 7 years). User-generated content that has been traded by other users may be retained in anonymized form to preserve marketplace integrity.
We do not sell, rent, or trade your personal data to third parties for marketing or any other purpose.
We may share data in limited circumstances: your username, profile, thoughts, images, comments, trading activity, P&L, and leaderboard position are visible to other users as core platform functionality. We use third-party services for hosting, analytics, and email delivery that process data on our behalf under contractual protections. We may disclose data if required by law, court order, or government authority. In the event of a merger, acquisition, or sale of assets, your data may transfer with prior notification.
Under the DPDP Act and applicable Indian law, you have the right to access your personal data, request correction of inaccurate or incomplete data, request deletion of your data (by deleting your account or contacting us — processed within 90 days subject to legal retention), withdraw consent at any time by deleting your account, nominate another individual to exercise your data rights in the event of your death or incapacity, and lodge a complaint with the Data Protection Board of India.
To exercise any of these rights, contact privacy@mindmart.app.
We use essential cookies for login, session management, and core platform functionality (these cannot be disabled). We may use analytics cookies to understand how users interact with the Platform (these can be declined). When you first visit mindmart.app, a cookie consent banner will allow you to accept or decline non-essential cookies. We do not use advertising cookies or tracking pixels. We do not serve ads.
The Platform is intended for users aged 13 years and older. We collect date of birth at registration to verify this requirement. We do not knowingly collect personal data from children under 13. If we discover such data, we will delete it promptly. Users under 18 must have parental or guardian consent as required under the DPDP Act. We do not engage in tracking, behavioral monitoring, or targeted advertising directed at children.
In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026, users who upload synthetically generated or AI-generated content (including images created using tools such as Midjourney, DALL-E, Stable Diffusion, or similar) are required to declare such content at the time of upload. The Platform may label AI-generated content. Failure to declare may result in content removal or account action.
Users may report content that violates our Terms of Service, community guidelines, or applicable law using the Report function available on every thought, image, and comment. We acknowledge reports within 7 days and resolve urgent grievances (identity theft, privacy violations, non-consensual intimate imagery) within 36 hours. We remove content within 3 hours of a valid court order or government authority request, and within 2 hours for non-consensual intimate imagery or deepfake content.
Grievance Officer
Name: [To be designated]
Email: grievance@mindmart.app
Address: [Registered office address]
The Grievance Officer will acknowledge complaints within 7 days and resolve them within the timelines prescribed by applicable law.
In the event of a personal data breach likely to cause harm, we will notify the Data Protection Board of India and affected users as required under the DPDP Act, including the nature of the breach, data affected, mitigation steps, and recommended user actions.
Your personal data may be transferred to and stored on servers located outside India. We ensure compliance with the DPDP Act and do not transfer data to countries or territories restricted by the Central Government.
We may update this Privacy Policy to reflect changes in practices, technology, or legal requirements. Updated versions will be posted with a revised "Last updated" date. Material changes will be communicated via email or in-app notification. Continued use of the Platform after changes constitutes acceptance.
In compliance with the IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026, we will notify all users at least once every three months about this Privacy Policy, their rights, the consequences of violating platform rules, and any updates to our terms.
General: hello@mindmart.app
Privacy: privacy@mindmart.app
Grievance Officer: grievance@mindmart.app
Address: [Registered office address]
By using Mindmart, you acknowledge that you have read, understood, and agree to this Privacy Policy.