Privacy Policy

MOJODAA helps people share genuine recommendations — "finds" — with friends and earn MOJODAA points when a purchase is verified. This policy covers the personal data MOJODAA processes to run that service for people in India.

MOJODAA is at an early stage, ahead of formal company registration. Once it operates under a registered company, this policy will name that entity and its registered office here. Until then, write to support@mojodaa.com with any question about who controls your data.

When you create an account, we collect:

• Your name and mobile number, verified by a one-time code (OTP).
• Your confirmation that you are 18 or older — self-declared, asked again if you open a shared find before confirming once.
• An optional recovery email, if you choose to add one later.

When you share or claim a find, we collect:

• The photo(s) of what you're sharing, and the shop name or place you select.
• Your location at the moment you share or claim, if you allow it. One reading, never tracking. It's optional — but it's what proves a find led to a real purchase, and if the person who buys hasn't shared it, that purchase can't be credited to anyone in the chain.
• Any personal note you write to go with the find.

When a purchase is reported, we collect:

• The receipt image or PDF you upload, and what our systems read from it — the shop, invoice number and date, and the amount — to check the purchase against the find.
• We do not collect your location at the moment you upload a receipt — only the shop address printed on the receipt itself is used.

Always, in the background:

• Your device type (e.g. Android, iPhone) and whether you're using the installed app — kept for support purposes only, such as helping when a camera won't open, never to personalise what you see.

Only if you switch it on (all off by default):

• A display name and one emoji, if you opt in to appear on public leaderboards — never your real name, phone number, or email.
• Additional device-based personalisation signals, if you opt in to that separately.

• Your account — Keeping you signed in and recognising you when you return. We also keep a simple note of your device type (iOS, Android, and so on) so support can help when something like the camera fails — for support and debugging, not to draw the page. MOJODAA cannot run without your account.
• Fair credit for sharing — Remembering who shared with whom so MOJODAA points can be split fairly. Without this we cannot compute or pay rewards.
• Protecting the reward pool — Checks that stop the same receipt being used twice and other obvious misuse. Without this we cannot safely pay points.
• Proving the sale to the store — When something you buy came through a MOJODAA find, the partner store is shown that the sale was ours to claim. They see the invoice number and date from the bill you uploaded, the amount, how many people passed the find along and in what order — which is what shows who found it and who ended up buying — and a genuineness score, so the store can trust the claim. Alongside that score they see the rough checks behind it: the weekday and part of day the find was made and the purchase happened, roughly how long passed between the two, and a distance band between where the find started and where it was bought — never your exact location and never the exact time. Your name, phone number and email are never part of it. This is how MOJODAA gets paid by the store, and that payment is what funds your points, which is why it is part of the core service rather than something you switch on.
• Optional insights (optional, off by default) — Help us understand patterns and may use your device type (iOS, Android, and so on) to personalise what we show. Off by default. Turning this off deletes interest and device-profiling data and stops new collection — it never reduces points already earned.
• Notifications about your finds (optional, off by default) — Lets MOJODAA tell you when someone claims a find you shared, and when a purchase in one of your chains earns you points. Nothing arrives between 11pm and 7am — anything overnight waits until morning. Off by default, and you can switch it off again whenever you like. Never affects your points.
• Optional messages (optional, off by default) — Permission for us to send occasional tips or updates by email or SMS. Off by default. We are not sending any such messages yet — switching this on records your permission for if we start, and nothing is sent in the meantime. Never affects your points.
• Optional social profile (optional, off by default) — Show a display name and emoji you choose on public leaderboards. Off by default. Turning this off removes you from every public board immediately — it never reduces points already earned.

We use a small number of service providers to run MOJODAA. They process data on our instructions, not for their own purposes, and some of these providers run on servers outside India. We share only what each one needs to do its job.

• Supabase — Keeps your MOJODAA account, your finds, your rewards and the bills you upload, and sends the emails that let you sign in. What they can see: Your profile, finds, purchases, rewards, consent history, uploaded receipt files, and your sign-in email address.
• Vercel — Runs the MOJODAA app itself — every page you open and every button you press is served by them. What they can see: Request logs (which page, when, roughly where the request came from) and whatever the app is holding while it answers you.
• Anthropic — Reads the bill you upload or forward so we can pull out the shop and the amount without you typing them in, and reads your find photos for a category and any visible shop name so we can suggest the right store. What they can see: The receipt image or PDF you send, or the find photos you upload when creating a find, for that one reading only — Anthropic's commercial terms say it is not used to train their models.
• Google Maps Platform — Finds the shop you are naming when you create or claim a find, and turns a place into map coordinates. What they can see: The shop name you search for, the place it matched, and the coordinates sent to look it up.
• Google (Firebase Cloud Messaging) — Delivers the notification to your phone when a find you shared is claimed, or a purchase in one of your chains earns you points. What they can see: Your device's notification address, and the wording of the notification itself — which never contains your name, your number or a points figure.
• Mobiglitz — Sends the text message carrying your one-time code when you sign up, verify your mobile number, or reset your password. What they can see: Your mobile number and the message text (including the one-time code), for that one delivery only.

Partner stores. When something you buy came through a MOJODAA find, the partner store is shown the invoice number and date, the amount, how many people passed the find along and in what order, and a genuineness score — plus banded (never exact) timing and distance signals, so the store can trust the claim. Your name, phone number, and email are never part of that. This is how MOJODAA is paid, and that payment is what funds your points.

Other MOJODAA users can see your chosen display name and emoji on leaderboards only while your optional social profile is on. We do not sell your personal information.

A shared find itself travels for 7 days and can reach up to 10 people, including you, before it simply stops counting. MOJODAA points you earn are valid for 12 months from the day you earn them, unless a specific promotion states a different window when you earn those points.

• Reward amounts, purchase amounts, tax-relevant totals — kept for 8 years after the event.
• The address your phone is reachable at for notifications — kept for While the device is reachable; removed as soon as it stops being, or when you ask to be erased.
• Receipt photos/PDFs in storage — kept for 90 days.
• Exact claim/purchase lat/lng — kept for Account life; cleared when you ask to be erased.
• Append-only consent grant/withdraw rows — kept for Account life; removed on erasure (summary kept in erasure_requests).
• Optional interest / profiling signals — kept for Only while optional_profiling is granted.
• Email/phone login mapping — kept for Until erasure.
• Support / grievance correspondence — kept for 8 years.

Receipt images specifically are deleted after 90 days; we keep a fingerprint of the file (not the image itself) indefinitely to catch the same receipt being reused.

From Settings, you can:

• Get a copy of everything we hold about you, in plain language — profile, finds, purchases, rewards, and consent history.
• Correct your own name or phone number.
• Erase your account. We anonymise rather than delete outright: your login, photos, and exact locations are removed; other people who genuinely discovered finds through you keep the points they already earned; amounts we're legally required to keep for tax purposes are retained, anonymised.
• Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
• Raise a grievance — see below.
• Change your optional choices (personalisation, messages, public leaderboard profile) at any time, with no effect on points already earned.

Necessary purposes — your account, fair credit for sharing, fraud protection, and disclosing a verified sale to the store that funded it — can't be individually switched off, since MOJODAA can't compute or pay rewards without them. The only way to stop these entirely is to erase your account.

MOJODAA is for people 18 and older. We ask you to confirm this when you join, and again if you open a shared find before you've confirmed it — this is a self-declaration, not an identity check. We do not knowingly collect data from anyone who tells us they're under 18; someone who declares this is shown a plain explanation and asked to close the link rather than continue.

Your data is protected by database-level access rules that limit every table to its owner — your profile, finds, purchases, and rewards are readable only by you (or by MOJODAA's own backend service, never a fellow customer). Uploaded photos and receipts are stored privately and served only through short-lived links, never a public URL. Transport encryption and platform security are provided by our infrastructure providers (Supabase and Vercel) as part of their standard service.

Optional consents (personalisation, messages, and your public leaderboard profile) can be turned off any time in Settings, as easily as they were turned on, with no reduction to points you've already earned. Turning off your public profile removes you from every leaderboard immediately.

Email us at support@mojodaa.com, or raise a grievance from Settings. Our named Grievance Officer is Krishna Iyer (Grievance Officer (MOJODAA)); we aim to respond within 7 days.

You may also complain to India's Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

If how we collect or use your information changes in a way that matters, we'll show you an updated notice the next time it applies to you — the same way we did for the change described in this notice's own version history. This page will be updated to match.