Privacy Policy

Last updated: 9 October 2026 (version 2026-10-09)

This Privacy Policy explains how Nikatru ("Nikatru", "we", "us", or "our"), a proprietorship of Rajasekar Selvam based in Chennai, Tamil Nadu, India, handles information in connection with our website nikatru.com and our applications and games published across iOS, Android, Windows, macOS, Linux and the web (together, the "Services").

This Policy is a notice: it tells you what we do with personal data. It is not something you agree to by using the Services. Where we rely on your consent, we ask for it separately, by a clear action of yours, and you can withdraw it as easily as you gave it.

1. Information we collect

Information you give us — for example, your email address when you contact support, send feedback, or (in apps that offer accounts) create an account.
Problem reports — if you use "Report a problem" in an app, on this site or in an extension, we store what you write, the category you chose, a screenshot only if you attach one (text fields and anything marked private are blurred on your device before it is sent), and the basic diagnostics shown to you before you send (app version, platform, device type, language and recent error codes; logs only if you tick that box). We keep an email address with a report only if you are signed in and ask us to reply or to tell you when it is fixed, and we then mail only the address your account has confirmed, only about that report: a receipt if you asked for a reply, and one note when it is fixed if you asked for that (each mail has an unsubscribe link). A report sent while signed out keeps no email address and is mailed nothing: you are shown its number and a link to check its status instead. We delete each report and its screenshot after 90 days, and deleting your account deletes your reports.
Information collected automatically — basic technical data such as device model, operating system and version, app version, language, approximate region and crash/diagnostic logs, which help us fix bugs and keep the Services working.
Usage statistics, only if you allow them — if you agree when asked, we record which features of an app are used and when, so we can see what is working and what is not. These records are pseudonymous, not anonymous: each one carries a random identifier created on your device the first time the app runs, and that identifier stays the same until the app is uninstalled. It is not your name, your email or an advertising ID, and we cannot use it to identify you — but because it is stable, records from the same installation can be grouped together, which is why we describe it as pseudonymous rather than anonymous. We do not collect or store your IP address with these records; an approximate location (country, region, city) is determined at our network edge and the IP address itself is discarded. You can turn usage statistics off at any time in the app's Settings, and turning them off stops collection from that moment.
Launch-notification signups — if you ask us to tell you when an app launches, we store your email address and the time you signed up, and nothing else. To stop that form being abused we also keep a short-lived counter keyed to a salted, one-way fingerprint of the network address the request came from. The fingerprint is not reversible to an IP address, it is never stored alongside your email, and it is discarded automatically within an hour. To leave the list, use the link in any launch email we send — one click deletes your address — or enter your address at nikatru.com/api/unsubscribe. If the address is on the list, we email it a link that works for 24 hours; opening it deletes the address and the time it signed up. The form gives the same answer whether or not an address is on the list. To stop the form being used to flood someone's inbox, it keeps the same short-lived counters as the signup form, keyed to a salted, one-way fingerprint of the network address and of the email address entered; neither is reversible; the network-address counter is discarded automatically within an hour and the email-address counter within 24 hours. Our email provider, Resend, delivers that email.
Network addresses — apart from a pending sign-in verification (below), we do not keep the network address a request comes from with your account or with any record about you. Two things see it, and neither keeps it with your data: Cloudflare, at our network edge, uses it to deliver the request, to stop abuse and to work out an approximate location, and then discards it, apart from Cloudflare's own security logs; and the request log of our own sign-in service records it for security and fault diagnosis and deletes it after 7 days. Our sign-in service records the address on each sign-in, and since 2 October 2026 the database it writes to empties that field on every write, with one exception: a pending sign-in verification briefly holds the network address it was requested from. If you use a second sign-in step, its one-time code is accepted only from the address that asked for it, so that address is kept until the code is used; it is erased when the verification succeeds, or, if it is never completed, within a day of the code expiring, 5 minutes after it was requested. Copies made before that date remain until they age out: a sign-in session opened before 2 October 2026 keeps the address it was opened from until it next refreshes, which happens whenever the app is used; the encrypted backups of the sign-in records taken before that date contain those addresses; and so does the fallback copy Supabase holds (section 4).
Purchase information — if you buy something, the transaction is processed by the relevant app store or by our payment processor. We receive confirmation of the purchase but do not collect or store your full card or bank details.

We do not sell your personal information.

Item by item

Every kind of personal data our own servers hold, what it is for and how long we keep it. This table is generated from the inventory our systems are checked against. Your account’s sign-in details (your email address and password, held by our sign-in service) are described above.

What we hold	Why	How long we keep it
What you bought and what it entitles you to	To give you what you paid for, handle refunds and cancellations, and keep the purchase records the law requires.	while your account exists; 730 days
Your AI credits and your AI opt-in, and a count of each AI request	To meter the AI features you pay for. We do not keep what you write to an AI feature. Anthropic, which answers it, deletes it within 30 days of receiving or producing it, unless it must keep it longer to enforce its usage policy (up to 2 years for a request it flags) or to comply with the law (section 4).	while your account exists
Your AI credit purchases, your credit balance and what each AI request cost in credits	To sell you AI credits, keep your balance and show your purchase history. We do not keep what you write to an AI feature. Anthropic, which answers it, deletes it within 30 days of receiving or producing it, unless it must keep it longer to enforce its usage policy (up to 2 years for a request it flags) or to comply with the law (section 4).	while your account exists
Your in-app purchases from the Apple App Store or Google Play: the store's purchase number, the product, and its state (active, renewed, refunded, expired), with dates	To work out, from the store's own signed records, what your purchase entitles you to. It never changes what you pay.	while your account exists; deleted when you delete your account
The signed messages the Apple App Store or Google Play sends us about your purchase: purchase number, event, product and dates	To keep each store message once, and to check your purchase against what the store itself says.	while your account exists; deleted when you delete your account
After you delete your account: a one-way fingerprint of your account number, which cannot be turned back into it	So that a later message from the store about an old purchase is never linked to anyone again.	as long as the store can still send messages about those purchases
A payment we could not yet match to an account (your email address only as a one-way fingerprint)	To give the purchase to its owner when they sign in, or refund it.	until it is claimed or refunded
Reports you make about AI-generated content	To review and act on the report.	400 days
The link between your account and a browser extension	To let the extension check your plan, and to let you unlink it.	1 day; 30 days; while your account exists
Your renewal reminder choices, the reminders we sent, and your private calendar link	To send the reminders you asked for, once each.	while your account exists; 400 days
An account deletion still in progress, and the Apple or Google sign-in link it must cancel	To finish deleting your account everywhere, including the sign-in link.	until the deletion is complete
Your email address and sign-up time, if you ask to hear when an app launches	To tell you once when the app launches.	400 days
Usage statistics, only if you allow them: which features are used and when, with a random install identifier	To see what works in our apps and what does not.	400 days; 1100 days
A record of each consent choice you make, and which version of this Policy you were shown	To show that the choice was yours.	as the record of your choice
Your problem reports: what you write, an optional screenshot, the diagnostics you saw, and your email address only if you ask us to reply	To fix the problem, and to tell you about it if you asked.	90 days
Your privacy rights requests: what you asked and where our answer goes	To answer your request on time, and to show that we did.	400 days
The name and email address of the person you nominate	So that they can use your rights if you die or cannot act yourself.	while your account exists
The offer codes you redeemed	To give you the free months a code offers, and only once.	while your account exists
Your invite code, kept scrambled	So that a friend you invite can name you.	while your account exists
Who invited whom, if you invite a friend or accept an invitation	To give one free month to both of you, once, and to stop the reward being abused.	while your account exists
How many times a day an offer code you typed was wrong	To stop offer codes being guessed, by pausing redemption after too many wrong codes.	400 days
What you keep in Subscription Tracker: your subscriptions, budgets, categories, payments, price changes and settings	To run the app for you and keep your data in step across your devices.	while your account exists
Which of your sign-in sessions you signed out	To keep a signed-out session signed out.	until the session would have ended anyway
A short-lived counter against abuse of the sign-up and leave-the-list forms (a one-way fingerprint of the network address, or of the email address entered in the leave form)	To stop the sign-up and leave-the-list forms being abused, and the leave form being used to flood someone's inbox.	one hour for the network-address counter; 24 hours for the email-address counter
Nightly backup copies of the records above	To recover from a failure.	30 days
Addresses that asked for no more mail about their reports (as a one-way fingerprint)	So that we never mail them about a report again.	for as long as the request for no more mail stands

2. How we use information

To provide, operate, maintain and improve the Services;
To diagnose crashes and technical problems and enhance performance;
To respond to your support requests and communicate with you;
To process purchases and provide receipts; and
To comply with legal obligations and prevent fraud or abuse.

3. Offers and promotions inside our apps

Some of our apps show occasional messages about our own products — a paid upgrade to the app you are already using, or another Nikatru app. These are first-party promotions: we write them, we show them ourselves, and no advertising network, ad exchange or advertising SDK is involved. Nobody pays us to show them to you.

The legal basis we rely on. Where the law where you live requires us to state one, we rely on our legitimate interest in promoting our own products to the people who already use them (GDPR Article 6(1)(f)). The interest is narrow and we would rather name it than gesture at it: telling someone who already uses one of our apps that a paid version exists, or that the same small publisher makes another app, is how a business with no advertising budget reaches the people it already serves. We weighed that against your interests. These messages appear only inside an app you chose to open, they are chosen from what you have already paid for and from nothing else, and you can switch them off in one tap.

What we use to decide what to show you. Your entitlement state — whether you have a paid plan for the app you are using — and nothing else. That decision is made on your device. We do not build a profile of you, we do not use your behaviour inside the app to choose these messages, we do not use any advertising identifier, and we never look at which other apps are installed on your device.

Your right to object, and how to use it. You can object at any time to your information being used for direct marketing, and that right is absolute: if you object, we stop. There is nothing for us to weigh and no reason we could give for carrying on (GDPR Article 21(2)). You do not have to write to us. Open the app's Settings and turn Offers and promotions off — promotions stop immediately, and they stay off, because we record that you objected so that nothing can turn them back on. You can also object by emailing support@nikatru.com. Objecting costs you nothing else: no feature is removed, no content is withheld, and nothing you have paid for changes.

These messages are about Nikatru apps only. We do not promote anyone else's products, we are not paid to show you anything, and we do not share any information with anyone else in order to show them.

Offer codes and inviting a friend. If you redeem an offer code, we keep a record that your account redeemed it, which offer it was and when the free months end; the code itself is kept only in a scrambled form that cannot be read back. If you invite a friend, or accept a friend's invitation, we keep a record of who invited whom — the two accounts, the app, and whether the reward was given — so that each invited person is rewarded once and nobody is rewarded more than five times a year. Before the reward, we check only that the invited account was created no more than 7 days before the invitation was accepted, is at least 7 days old, has a confirmed email address, has started using the app and has never had Pro of any kind (a paid plan, a trial, a free month from a code, or one we gave); otherwise the invitation is recorded as not eligible and neither of you is rewarded. The record is deleted when the invited person deletes their account; if the person who invited them deletes theirs, their name is taken off it. Free months never include the AI features.

4. Third-party services

We rely on trusted third parties to deliver the Services. Who takes your payment, and who is the seller, depends on where you buy:

In an app from the Apple App Store or Google Play, the store bills the purchase through its own system and sells it under its own terms. We verify the purchase with the store ourselves, on our own servers, so an app knows what you have paid for; no other company records what it entitles you to.
Everywhere else we sell — this website, the Microsoft Store, the Snap Store, our Linux download (AppImage), the Chrome Web Store, Microsoft Edge Add-ons and Firefox Add-ons — outside India, the seller is Paddle, acting as our merchant of record: Paddle takes the payment, issues the receipt and handles sales tax.
When you buy in India — on this website, the Microsoft Store, the Snap Store, our Linux download (AppImage), our app on apps.gov.in, the Chrome Web Store, Microsoft Edge Add-ons and Firefox Add-ons — Nikatru is the seller and Razorpay takes the payment as our payment gateway, processing your payment details on our behalf.

We also rely on Cloudflare (hosting, and the network edge our website and endpoints run on; browsers also send Cloudflare a report when a connection to our sites fails, under a browser feature called Network Error Logging, and send it nothing about visits that succeed); Hostinger, which rents us the servers our own sign-in service runs on, so it holds the account credentials and sign-in sessions for apps that offer accounts; Supabase, which ran that sign-in service until 27 September 2026 and still holds a fallback copy of the account and sign-in records from before that date until it is retired; Resend, which delivers the email we send you (sign-in and account-verification messages, and the renewal reminders you choose to receive, which list the subscriptions about to renew) and therefore processes your email address on our behalf; and Google, whose Google Workspace hosts our support mailbox, so it holds what you write to us, and whose Google Drive stores our backups, which contain a copy of the account and app records described here. Where an app offers them, Sign in with Apple and Sign in with Google are optional ways to sign in: if you choose one, Apple or Google shares with us the email address and name on that account, as you allow, and you can change the name in the app's Settings. We do not sell anything directly from this website today; the arrangements above are the ones that apply when we do. Each provider processes data under its own privacy policy. We encourage you to review the policies of the app store you use.

Anthropic provides the AI model behind our AI features, such as the help assistant that answers questions about an app. When you use one, what you write is sent to Anthropic, a company based in the United States, to produce the answer. We do not keep it. Anthropic deletes it within 30 days of receiving or producing it, unless it must keep it longer to enforce its usage policy (up to 2 years for a request it flags) or to comply with the law.

We do not use advertising networks or advertising SDKs, we do not sell or share data with data brokers or advertisers, and no Nikatru app carries third-party advertising. The only promotional messages in our apps are our own, about our own products; section 3 explains how they work and how to turn them off. Usage statistics and crash reports are likewise not sent to a third-party analytics product: they are received and stored by software we run ourselves. Usage statistics run on infrastructure provided by Cloudflare as our hosting provider; crash reports are received by a server we operate ourselves on Hostinger.

Your own AI key. If you use an AI feature with your own AI provider's key (bring your own key, included with Pro) — for Anthropic, OpenAI or Google Gemini — the key is kept only on your device, in its secure storage, and is sent only to that provider with your request. Your request goes directly from your device to that provider, under your own account with it and never through our servers; neither the key nor what you send reaches Nikatru, and your own agreement with that provider decides what it keeps.

5. Sharing of information

We share information only as needed to operate the Services (for example, with the payment processor to complete a purchase), to comply with the law or a valid legal request, or to protect our rights and the safety of users. We do not sell or rent personal data to third parties.

6. Data retention

We keep information only for as long as necessary for the purposes described here or as required by law. You can ask us to delete information associated with you by emailing us (see Contact).

7. Security

We use reasonable technical and organisational measures to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Age requirement

Our Services are for adults. You must be at least 18 years old to use the Services or to create an account, and no Nikatru app, extension or site is designed for or directed to anyone younger. India's Digital Personal Data Protection Act, 2023 treats every person under 18 as a child, and 18 is the single floor we apply everywhere we operate rather than a different age per country.

We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, contact us and we will delete it.

9. Your rights, and how to complain

You have the right to get a copy of the personal data we hold about you and a summary of how we use it; to have it corrected or completed; to have it erased; to withdraw a consent you gave; to nominate someone to use these rights for you if you die or cannot act yourself; and to complain, to us and then to the Data Protection Board of India. The law where you live may give you more, and we honour that too.

How to use them. In an app, open Settings, then Your privacy rights: there you can download a copy of everything our servers hold about your account at once, name your nominee, and delete your account. Anyone, signed in or not, can also send a request at nikatru.com/privacy-rights or email support@nikatru.com. When you ask to use a privacy right, we keep the request, what you wrote and the address our answer goes to, for 400 days after we close it, as the record that we answered. A request sent without signing in counts only once you confirm it from the email we send, so nobody can make one in your name. We acknowledge every request within 48 hours and resolve it within 30 days.

Your nominee. In the app you can name one person, by their name and email address, to use your rights if you die or become unable to act. We tell them nothing until they contact us, and deleting your account deletes the nomination.

Usage statistics can be withdrawn without contacting us. Open the app's Settings and turn Usage statistics off; collection stops immediately. We keep a record of each consent decision (that a decision was made, when, and which version of this Policy you were shown) so that we can demonstrate the choice was yours. That record contains no IP address and no device fingerprint.

How to complain

Write to our Grievance Officer, Rajasekar Selvam, Proprietor, at support@nikatru.com (other ways to reach us are on the Contact page). We acknowledge a complaint within 48 hours and resolve it within 30 days. If we do not resolve it, or you are not satisfied with our answer, you can complain to the Data Protection Board of India. Under the Digital Personal Data Protection Act, 2023, a complaint goes to our Grievance Officer first; once our process has ended, you can file it with the Board, which takes complaints online.

10. International users

We operate from India, and information may be processed in India and in countries where our service providers operate.

11. Changes to this Policy

We may update this Policy from time to time. We will post the revised version here with a new "Last updated" date, and every earlier version stays available. If a change affects something you consented to, we ask you again in the app before the change applies to your data.

12. Cookies and local storage

This website sets no cookies. It keeps two things in your browser. When you choose an app on the Pricing page, the page stores that app’s name in your browser’s local storage so that the checkout opens for the right app. It says nothing about you and never leaves your browser. When you choose Sign in with Apple on one of our web pages, the page keeps a one-time sign-in code and the details it needs to carry on (such as a code you entered to redeem) in your browser’s session storage, for that tab only, so that it can finish the sign-in when Apple sends you back. The page deletes it as soon as you come back, whether or not the sign-in worked, and your browser clears it when you close the tab; the sign-in code is sent only to our own sign-in service, to complete that sign-in.

Our web apps set no cookies either. Like an installed app, a web app keeps its working data in your browser’s local storage, on your device: your sign-in session, your settings and choices (such as language, theme and the consent choices you made), a random install identifier (used with usage statistics only if you allow them), anything waiting to be sent while you are offline, and a copy of your own app data so that the app works offline. Signing out ends the session, and you can clear the rest in your browser’s settings.

13. Contact us

Questions about privacy? Email support@nikatru.com or see our Contact page.

Individual apps may publish an app-specific privacy notice that describes that app in more detail. It is generated from the same records as this Policy and adds to it; it does not replace it. This Policy is the notice whose version we record when you make a consent choice.