Privacy Policy
Short version: you can play as a guest and everything stays on your phone. If you choose to sign in with Google, we save your progress to your account so it is safe and can move to a new phone. No ads, no tracking, and we never sell your data.
- Signing in is optional. Guests' progress never leaves the phone.
- If you sign in, your Google account email and name, and your game progress, are stored with Google Firebase (servers in Mumbai, India).
- No ads. No analytics. No location. No contacts. Nothing sold.
- Delete your account any time: Settings → Account → Delete account.
1. Who we are
Mathlo is a daily brain-training app. It is made and run by Navneet Anand, an individual developer in Mumbai, India, publishing as Qlosk ("we", "us"). We decide why and how the data described here is used. Questions about privacy? Write to mathlo@qlosk.com.
2. Guests (no sign-in)
Everything stays on your phone, in the app's private storage, and we don't receive it:
- Progress: XP, level, streaks and streak freezes, scores, personal bests, round history, levels and stars, practice stats, quests, achievements, mascot outfits.
- Your display name (starts as "Player") and your learning goal.
- Settings: sound, haptics, timer, reminders and their times, play length.
- A short error log (the last 50 errors: time and message), to help fix bugs. It stays on your phone unless you choose to send it to us (see "Reporting a bug" below).
All of it is wiped when you uninstall Mathlo or use Settings → Account → Delete all my data. Your phone's own backup (for example Google backup) may include app data if you turned backups on. That is controlled by your phone, not by us.
3. If you sign in
| Data | Where it is stored | Why | Who receives it |
|---|---|---|---|
| Sign-in details from Google: your Google account ID, email address, name and profile picture link | Firebase Authentication | To sign you in and recognise your account. The app shows your email in Settings, shows your Google profile picture as your avatar (loaded from Google when you open the app), and may use your first name as your display name if you haven't picked one. | Google (Firebase), as our service provider |
| Game progress: everything listed for guests above except the error log, plus friend-challenge results (game, scores and a puzzle code; no names) | On your phone and in Cloud Firestore | To keep your progress safe and restore it on a new phone | Google (Firebase), as our service provider |
Only you can read or change your synced data: our database rules allow each signed-in account to reach its own records and nothing else. We don't show your data to other players.
Reporting a bug
Settings → Report a bug opens an email draft in your own mail app, addressed to mathlo@qlosk.com. It already contains the app version, your phone's operating system and version, and up to 10 recent entries from the error log (time and error message, no personal details). You can read, change or delete any of it before sending, and nothing is sent unless you press Send. If you send it, we receive the email, your email address and what you wrote, and use them only to fix the problem and reply to you.
4. What we do NOT collect
- No phone number, no password (Google handles sign-in).
- No location, contacts, photos, camera or microphone.
- No advertising ID. No ads at all.
- No analytics and no crash-reporting service. Error details reach us only in a bug report you send yourself.
- We do not sell or rent your data, and we don't share it for advertising.
5. Service providers and other parties
- Google Firebase (Firebase Authentication and Cloud Firestore) stores sign-in and synced data for us. The database is in Google's asia-south1 (Mumbai, India) region. Google may process some data in other countries to run these services. Firebase's privacy information: firebase.google.com/support/privacy.
- Google Play. You get the app through Google Play, which has its own privacy policy. If you allow "share usage and diagnostics" on your phone, Google may give us anonymous crash and usage counts through its developer tools. We can't tell who you are from these.
- Share sheet. If you share a result, an invite (a picture of your mascot with your display name, streak and level) or a challenge code, the app you pick (WhatsApp, Instagram and so on) receives it and its own policy applies.
- Review prompt. If the app asks you to rate it, Google shows and handles the prompt.
- This website uses no cookies, analytics or ads. The host of qlosk.com may keep standard server logs (such as IP address and time of visit) for a short time for security.
6. Phone permissions
Mathlo asks for one permission you will notice: notifications, for your daily and streak reminders. They are scheduled on your phone; nothing is sent to us. You can say no and still play, and change it any time in your phone's settings. On Android the app also declares permissions that don't show a prompt: internet access (only used for sign-in and sync), restoring reminders after a restart, and vibration.
7. Children and age rules
Accounts are for people aged 18 or older; the app asks you to confirm this before you sign in. If we learn that someone younger has an account, we delete it. Guest mode is open to everyone and sends us no personal data. If you are a parent and think your child has signed in, write to mathlo@qlosk.com and we will delete the account.
8. How long we keep data
- On your phone: until you uninstall the app, clear its data, or use Delete all my data.
- Account and synced progress: until you delete your account. Deleting it removes your synced progress and your sign-in record straight away (see Delete your account). We don't run separate backups; Google may keep deleted data in its own systems for a limited time before it is fully erased, under its data deletion terms.
- Emails with us (including bug reports): as long as we need them to help you and fix the problem, then deleted. You can ask us to delete them sooner.
9. Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask to see your data, correct it, erase it, nominate someone to act for you, and have complaints heard. In the European Union or UK, GDPR also gives you the right to restrict or object to processing, to data portability, and to complain to your data protection authority. For EU/UK users, we rely on your consent when you sign in, and on our legitimate interest in keeping the app working.
The fastest way to erase your data is Settings → Account → Delete account in the app. To use any other right, or to complain, contact our Grievance Officer: Navneet Anand, dev@qlosk.com. We reply within 30 days. If you're not happy with our answer, you can approach the Data Protection Board of India.
10. Security
Synced data travels over encrypted connections and is stored by Google Firebase, which encrypts it at rest. Database rules let each account reach only its own data. On your phone, data sits in the app's private storage, protected by your screen lock and the app sandbox. No system is perfectly safe, so keep your phone and Google account secure.
11. If something goes wrong
If a breach puts your personal data at risk, we will tell the people affected and the authorities as the law requires, without undue delay, and explain what happened and what to do.
12. Changes to this policy
We will update this policy when the app changes, for example before we add leagues. We'll post the new version here, change the date at the top, and tell you in the app about big changes.
13. Governing law
This policy follows the laws of India.
14. Contact
Qlosk, Mumbai, India
Email: mathlo@qlosk.com
Grievance Officer: Navneet Anand, dev@qlosk.com