Privacy Policy — Playlix
Effective date: 20 October 2026 Last updated: 20 October 2026 Version: 2.0
This Privacy Policy explains how Panchumarthi Dimpul Kumar ("we", "us", "our"), the individual developer and operator of Playlix (also called "PlayZone"), collects, uses, shares, stores and protects personal data when you use the Playlix mobile application, its web version, the website at https://playlix.aitradingsignal.in and the related online services (together, the "Service").
We act as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and, where the EU/UK General Data Protection Regulation applies, as the controller of your personal data.
By creating an account, tapping "Accept & Continue", or otherwise using the Service, you confirm that you have read this Privacy Policy and agree to the processing described in it. If you do not agree, do not use the Service. This Privacy Policy forms part of our Terms & Conditions.
1. Who may use Playlix (18+ only)
Playlix includes live voice calls, text chat and friend features with other people, including strangers. For that reason the Service is intended only for users aged 18 years or older. You must confirm that you are 18 or older before using the Service.
We do not knowingly collect personal data from anyone under 18 and we do not knowingly allow children to create accounts. If we learn that a person under 18 is using the Service, we will delete the account and associated personal data. If you believe a child is using Playlix, contact us at playlixapp@gmail.com and we will act promptly.
2. Summary
| Topic | In short |
|---|---|
| Do we sell your data? | No. We never sell or rent personal data. |
| Do we record calls? | No. Voice is encrypted end-to-end between devices and is never recorded, stored or listened to by us. |
| Are your messages stored? | Yes. Direct messages between friends are stored on our game server and on your device so they can be delivered and shown later. |
| Do we show ads? | Yes. Google AdMob shows ads and may use your device's advertising ID. |
| Can you delete your account? | Yes, instantly from inside the app (Profile → Delete Account) or by request. See Section 10. |
| Is location tracked? | No precise location. Advertising partners may infer an approximate region from your IP address. |
3. Personal data we collect
We collect only what is needed to run the games and the online features you choose to use.
3.1 Data you give us
- Account and sign-in data: your chosen username or display name, avatar choice, and — if you sign in with Google or Facebook — the account identifier, name and email address that the provider shares with us. Guest players are identified by a randomly generated identifier and need not provide a name or email.
- Social data: follow requests you send, accept, decline or cancel; your friends list; and users you block or report (including the reason you give).
- Messages: text messages and game invitations you send to friends ("direct messages"), and messages you send in the chat of an online match or room, including messages addressed to everyone in a room or privately to one player.
- Support communications: anything you send us by email (for example support, deletion or grievance requests).
3.2 Data created when you play online
- Gameplay data: matches played, moves, room codes, scores, wins/losses/draws, Elo or skill rating, ranked/casual mode, quests, daily check-ins, virtual coin balance, trophies, tournament entries and results, and leaderboard positions.
- Matchmaking and session data: the game you queue for, matchmaking tickets, match and room identifiers, seat numbers and timestamps.
- Presence data: whether you are online, and when you were last online, which is shown to your friends.
- Call metadata: that a call took place between two players, when it started and ended, and whether it was answered, declined, missed or cancelled. We do not collect the content of calls.
3.3 Data collected automatically from your device
- Identifiers: a random per-installation identifier created by the app (used to recognise the same phone, for example to stop one person taking several seats in a room), your account's user ID, and session tokens.
- Push-notification token: if notifications are enabled, a Firebase Cloud Messaging registration token for your device, so that we can deliver incoming calls and messages when the app is closed.
- Technical data: IP address (necessarily processed by our servers and service providers to connect you), device model, operating-system version, app version, network type (Wi-Fi/mobile/offline) and diagnostic information about connection failures.
- Advertising data: collected by Google AdMob as described in Section 5.
3.4 Data that stays on your device
Game settings, single-player progress and high scores, your local copy of chats and friends, blocked-user list and similar preferences are stored on your device (Android/iOS app storage, or browser storage on the web). Deleting the app or clearing its storage removes them from the device.
3.5 Voice audio
When you use voice chat or calls, your microphone audio is captured only while a call or voice session is active, encrypted (DTLS-SRTP) and sent directly to the other participant(s). If a direct connection is not possible (for example behind strict mobile or corporate networks), the encrypted audio is relayed through our TURN server, which forwards it without being able to decrypt it. Audio is never recorded, stored, transcribed, analysed or listened to by us. Other participants could, however, record a call with their own devices or software, which our Terms prohibit.
3.6 Data we do not collect
We do not request access to your contacts, photos, camera, precise GPS location, SMS or call logs, and we do not use the Service to collect sensitive personal data such as health, biometric, financial-account or government-ID data.
4. How and why we use personal data
| Purpose | Data used | Legal basis (DPDP Act / GDPR) |
|---|---|---|
| Create and secure your account, sign you in, restore your session | Account data, identifiers, session tokens | Consent; performance of our contract with you |
| Run games, matchmaking, private rooms, LAN games, tournaments and leaderboards | Gameplay, matchmaking, session data | Performance of contract |
| Friends, follow requests, presence, direct messages, room chat | Social data, messages, presence | Performance of contract; consent |
| Voice chat and calls, including ringing your phone when the app is closed | Call metadata, push token, temporary connection data | Performance of contract; consent (microphone and notification permissions) |
| Show advertising that keeps the Service free | Advertising identifiers, approximate location from IP, device data | Consent (where required) |
| Safety, moderation, fraud and cheat prevention, enforcing our Terms | Reports, blocks, gameplay and technical data, messages reported to us | Legitimate uses permitted by law; our legitimate interests |
| Diagnose problems and improve the Service | Technical and diagnostic data | Legitimate interests |
| Respond to requests, complaints and legal claims; comply with law | Any relevant data | Legal obligation; legitimate interests |
We do not use your personal data for automated decisions that produce legal or similarly significant effects on you. Ranking and matchmaking algorithms only decide which games you are offered and your in-game rating.
5. Who we share personal data with
We never sell personal data. We share it only as follows:
5.1 Other players (by design)
Your username, avatar, rating, online status, game moves and anything you say in chat or voice are visible or audible to the players you play, chat or call with. Leaderboards show usernames and scores publicly inside the app. Please do not share personal information (real name, phone number, address, financial details) with other players.
5.2 Service providers (processors)
| Provider | What they do | Data involved |
|---|---|---|
| Our hosting provider(s) (cloud servers running our Nakama game server, TURN voice relay and website) | Host our servers | All server-side data in Sections 3.1–3.3; relayed encrypted audio |
| Google Firebase Cloud Messaging (Google LLC) | Delivers incoming-call and message notifications | Push token, caller/sender name and IDs, call identifiers and the text of the direct message being delivered |
| Google AdMob (Google LLC) | Shows ads | Advertising ID, IP address, device and ad-interaction data — see Google's policy |
| Google Sign-In / Meta Facebook Login | Optional sign-in | Sign-in tokens and basic profile data — see Google and Meta |
| Public STUN servers (e.g. Google) | Help devices find a direct route for voice | IP address and port only |
| ntfy.sh relay (third-party open-source messaging service) | Backup channel for matchmaking, rooms, game moves, call and social signals when our game server cannot be reached | Usernames, user IDs, ratings, room codes, game moves, and call/social signals (see 5.3) |
5.3 Important notice about the backup relay
When our own game server cannot deliver a message, the app may fall back to the ntfy.sh relay. Messages on that relay are published to topic channels that are not access-controlled: anyone who knows or guesses a topic name could read them while they are cached (typically up to 12–48 hours). Data sent this way is limited to the items listed above. Copies on the relay cannot be deleted by us and expire according to the relay's own policy. We are progressively moving all such traffic to our own server.
5.4 Legal, safety and business reasons
We may disclose personal data if required by law, court order or a lawful request by a government authority (including under the Information Technology Act, 2000 and rules made under it); to protect the rights, safety or property of users, the public or us; to investigate fraud, abuse or security incidents; or as part of a merger, acquisition or transfer of the Service, in which case this Privacy Policy will continue to apply.
6. International transfers
We and our service providers may store and process personal data in India and in other countries (for example where Google or our hosting providers operate). Such transfers are made in accordance with the DPDP Act (including any restrictions notified by the Government of India) and, for data subject to the GDPR, using appropriate safeguards such as the European Commission's Standard Contractual Clauses used by those providers.
7. How long we keep personal data
| Data | Retention |
|---|---|
| Account, profile, rating, stats, leaderboard, tournament and friends data | Until you delete your account (or we close it), then deleted from live systems within 30 days and from backups within a further 90 days |
| Direct messages stored on our server | Until your account is deleted; messages you already delivered may remain in the recipient's conversation until their account is deleted |
| Match moves, room chat, call signals | Kept only as long as needed to run the match or call; not retained afterwards except in normal server logs |
| Push-notification token | Until you sign out, delete your account, or the token becomes invalid |
| Server and security logs (IP address, timestamps) | Up to 180 days, or longer if needed to investigate abuse or as required by law |
| Reports and enforcement records | Up to 2 years after the related action, to prevent repeat abuse and defend legal claims |
| Copies held by Google, Meta or the ntfy.sh relay | According to their own policies |
| Inactive guest accounts | May be deleted after 12 months without any sign-in |
8. Security
We protect personal data with reasonable security practices and procedures, including encrypted connections (HTTPS/TLS) to our servers, signed session tokens, encrypted voice (DTLS-SRTP), restricted server access, firewalls, and keeping the server key and other secrets out of the app. Push tokens are readable only by our server. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required by law.
9. Your rights
Subject to applicable law, you have the right to:
- Access a summary of the personal data we hold about you and how it is processed;
- Correct, complete or update inaccurate personal data;
- Erase your personal data and delete your account (Section 10);
- Withdraw consent at any time — for example by switching off microphone or notification permissions in your device settings, resetting your advertising ID, or deleting your account. Withdrawal does not affect processing already done, and some features will stop working;
- Grievance redressal through our Grievance Officer (Section 12);
- Nominate another person to exercise your rights in the event of your death or incapacity (DPDP Act);
- If you are in the EEA/UK: data portability, objection to processing based on legitimate interests, restriction of processing, and complaint to your local data-protection authority;
- If you are a California resident: to know, delete and correct personal information, and not to be discriminated against for exercising your rights. We do not sell or "share" personal information for cross-context behavioural advertising as defined by the CCPA/CPRA, other than through Google AdMob as described above, which you can limit by opting out of ad personalisation on your device.
To exercise a right, email playlixapp@gmail.com from the email linked to your account (or include your in-app username and user ID). We may need to verify your identity. We respond within 30 days (or the shorter period required by law). If you are not satisfied, you may complain to the Data Protection Board of India or your local authority.
10. Deleting your account
- In the app (instant): Profile → Delete Account → confirm. Your server account and the data listed in Section 7 are deleted, your push registration is removed and the chats and friends stored on that phone are erased.
- Without the app: follow the steps at https://playlix.aitradingsignal.in/delete-account.html or email playlixapp@gmail.com with the subject "Account Deletion Request".
Uninstalling the app does not delete your server account. Some data may be retained after deletion where Section 7 or the law requires it (for example security logs, enforcement records, or messages already delivered to other users).
11. Third-party links and services
The Service may contain ads or links to third-party websites and services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.
12. Grievance Officer and contact
In accordance with the Information Technology Act, 2000, the rules made under it, and the DPDP Act, 2023:
Grievance Officer: Panchumarthi Dimpul Kumar Email: playlixapp@gmail.com Location: Vuyyuru, Andhra Pradesh, India
We acknowledge grievances within 24 hours and aim to resolve them within 15 days of receipt.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will change the "Last updated" date and, for material changes, notify you in the app (for example by asking you to accept the updated documents) before the change takes effect. Continued use of the Service after the effective date means you accept the updated Privacy Policy.