Privacy Policy
Last updated: August 2026
Vyomio ("we", "us", "our") builds web-based apps and games — currently Whodunly, a daily browser mystery game. This Privacy Policy explains how we handle information across our products. It is deliberately privacy-first: you can enjoy the daily game with no account and no personal information at all. Whodunly also has its own detailed policy at whodunly.com/privacy.
1. Information We Collect
Playing anonymously: You can play the daily game without an account. Your streak, results, and preferences are stored locally in your browser — not on our servers — and we do not store your IP address.
Account information: If you choose to sign in — for a membership or a ranked detective identity — we collect your email address and the display name you pick. Sign-in is passwordless: we email you a one-time link, so there are no passwords to store.
Usage analytics: We use privacy-friendly, cookieless analytics (Cloudflare Web Analytics) to understand aggregate traffic. It does not use cookies, does not build advertising profiles, and does not track you across other sites.
Payment information: Membership payments are processed by Stripe. We never see or store your card details; we receive only your subscription status and transaction identifiers from Stripe.
2. How We Use Your Information
- To provide and maintain the game and its features
- To enable optional accounts, membership, and the ranked leaderboard
- To send transactional emails (your sign-in link, membership receipts)
- To send product news only if you opt in — with one-click unsubscribe in every email
- To improve our products using aggregated, non-identifying analytics
3. Data Storage & Security
Account data is stored with Supabase (hosted on AWS) in regions compliant with applicable data-protection laws. We use encryption in transit (TLS) and at rest, and access is protected by Row Level Security so your account data is only reachable through authenticated requests.
4. Third-Party Services
We use the following third-party services, sharing only the minimum data each needs to function:
- Supabase — accounts and database
- Stripe — membership payments
- Resend — sign-in and (opt-in) product emails
- Cloudflare — hosting, security, and cookieless analytics
- Vercel — application hosting
Each service has its own privacy policy. Optional reminders, if you enable them, use your browser's built-in web notifications — you can turn them off at any time.
5. Your Rights
You have the right to:
- Access your data — your account details are visible in the app, or contact us for a copy
- Delete your account and all associated data — available in settings
- Opt out of product emails — one-click unsubscribe in every email
Account deletion is a full hard-delete, completed within 30 days. If you played anonymously, clearing your browser data removes your local streak and results.
6. Children's Privacy
Anyone can play the daily game anonymously. Accounts are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have, we will delete it promptly.
7. Data Retention
We retain account data for as long as your account is active. When you delete your account, your data is permanently deleted after a short grace period (within 30 days). Aggregated, non-identifying analytics may be retained indefinitely.
8. International Data Transfers
Your data may be processed in countries other than your own, including Australia and the United States. We ensure appropriate safeguards are in place for any cross-border data transfers. You may have rights under the Australian Privacy Act 1988, the EU/UK GDPR, or similar laws, including the right to complain to your local data-protection authority.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will note material changes on this page and, where appropriate, in the app. Continued use of our services after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
Email: support@vyomio.com
Location: Sydney, Australia