1. Introduction
Built by Foundry, Inc., formerly known as Playpen Games, Inc. ("Foundry," "we," "us," or "our"), operates the Taiyaar mobile application ("App") for Tavi Gandhi. This Privacy Policy explains what information we collect when you use the App, how we use it, who we share it with, and what choices you have. By installing or using Taiyaar you agree to this Policy. If you do not agree, please do not use the App.
Taiyaar V1 has no user accounts, no sign-in, and no in-app purchases. You can use the entire App anonymously.Contact: For privacy requests, email privacy@builtbyfoundry.io. For general questions: hello@builtbyfoundry.io2. Information We Collect
2.1 Onboarding Preferences You Choose
When you first open Taiyaar, you tell the App a few things so the swipe feed is useful: the occasion you're shopping for (wedding, party, festive), the sub-occasion if it's a wedding (sangeet, mehndi, reception, etc.), an optional event date, your country (India, United States, United Kingdom, Canada, or United Arab Emirates), your budget band, your size band(s), your modesty preference, your preferred sleeve lengths, and your preferred silhouettes. You can edit these any time from your profile.2.2 Swipe Activity and In-App Behavior
As you use the App, we record what you swipe right on, what you swipe left on, what you tap into, the boards and labels you create, the looks you save and unsave, and which vendor links you tap. We use this activity to (a) tune the feed to your taste, (b) understand which pieces and which categories of pieces are working, (c) inform Tavi's curation decisions, and (d) improve the App overall.2.3 Device and App Information
We collect basic device and app information used by every mobile app: device type, operating system version, app version, language, locale, and country setting. We collect crash and error events to fix bugs.2.4 Approximate Region from IP
Our service providers may infer an approximate region from the IP address of your device. Taiyaar does not request precise GPS location, does not include any location-tracking SDK, and does not run in the background to collect location.2.5 Information You Send Us
If you email us or send feedback from inside the App, we receive whatever you choose to include in that message: your email address, the body of your message, and any screenshots or attachments you add.2.6 Local Storage on Your Device
Your onboarding preferences, swipe history, boards, and saved looks are stored on your device in encrypted local storage (MMKV). A copy of your swipe activity and preferences is also sent to Foundry-operated servers so we can analyze it and improve the App.2.7 Data We Do Not Collect
Taiyaar V1 does not collect: your name, your email address (unless you email us), your phone number, your precise location, your contacts, your microphone, your health or fitness data, your financial or payment information, or any biometric data. Taiyaar V1 has no user accounts, so we do not collect login credentials or social-media handles.2.8 Children
Taiyaar is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided information to us, please contact privacy@builtbyfoundry.io and we will delete it.3. How We Use Your Information
• Show you a personalized swipe feed based on the size, country, budget, and style preferences you chose during onboarding
• Save the looks you like into the boards and labels you create
• Send optional local notifications about your saved boards and upcoming events you flagged
• Detect bugs, improve performance, debug crashes, and improve the App
• Inform Tavi's curation decisions about which pieces, brands, and categories to add or remove
• Build aggregated insights about how Taiyaar is used and how to make it better
• Detect abuse, enforce our Terms, and comply with legal obligations
• Respond to support requests and feedback you send us4. Third-Party Service Providers
We share limited data with service providers to operate the App. All are contractually required to protect your data and use it only as we instruct.Infrastructure and Storage: Supabase (Postgres database, Storage, Edge Functions) hosts the catalog, your swipe activity, your boards, and your saved looks. Data processed in the United States.Analytics: PostHog (cloud-hosted) for product analytics: screens viewed, swipes, saves, board interactions, and similar events. We do not send the contents of your boards, free-text input, or any direct identifier to PostHog.Crash Reporting: Sentry for crash and error diagnostics. Free-text inputs are not captured.Distribution: Apple App Store and Apple TestFlight for distribution and beta testing.We Never Sell Your Data. Full service provider details and privacy policies available upon request.5. International Data Transfers
The App is hosted in the United States. If you access from other regions, your data is transferred to and processed in the US.EU/UK Users: We use Standard Contractual Clauses (SCCs) approved by the European Commission and Data Processing Agreements (DPAs) with all processors. All transfers are encrypted. You can request copies of our SCCs by contacting privacy@builtbyfoundry.io.6. Data Retention and Deletion
We retain data only as long as necessary or required by law.While you use the App: your onboarding preferences, swipe history, boards, and saved looks are retained as long as the App is installed on your device and you continue to use it.Local-only data: if you delete the App from your device, your locally stored preferences and saved looks are removed with it.Server-side data: the swipe activity and preferences we receive on Foundry-operated servers are retained for as long as we need them to operate, debug, and improve the App. We may keep aggregated and de-identified data indefinitely.Deleting your data: because Taiyaar V1 has no user accounts, we identify your data on our servers by an anonymous device-installation identifier, not by your name or email. To delete the data tied to your installation, email privacy@builtbyfoundry.io with the device-installation identifier shown at the bottom of the Profile screen, and we will remove or de-identify the matching records within 30 days. Backup copies are purged within 90 days. Aggregated, de-identified data that no longer reasonably identifies you may be retained.Other retention periods: analytics events (up to 26 months), crash reports (up to 90 days), support tickets (up to 3 years), tax and accounting records (up to 7 years where required by law).Your rights: depending on where you live (including under the GDPR and the CCPA/CPRA), you may have the right to access, correct, delete, port, restrict, or object to the processing of your personal information. To exercise any of these rights, email privacy@builtbyfoundry.io. We will respond within the timelines required by applicable law and will not discriminate against you for exercising a right.7. Your Privacy Rights
All Users can request access, correction, or deletion of personal data.EU/UK Users (GDPR)
Additional rights: Data portability, restrict processing, object to processing, withdraw consent, file complaints with your Data Protection Authority.File a complaint: UK (ICO: ico.org.uk), Ireland (dataprotection.ie), or your local EU authority.Legal basis: Contract performance, legitimate interests (analytics, security), consent (session replay), legal obligations.California Users (CCPA/CPRA)
Additional rights: Know what data we collect and who we share with, delete data, correct inaccuracies, opt-out of data sales (we don't sell data), limit use of sensitive information.You can designate an authorized agent to make requests. We verify identity before fulfilling requests. No discrimination for exercising rights.How to Exercise Rights
Email privacy@builtbyfoundry.io with your name, email, user ID (Settings → Profile), and specific request.In-app deletion: Settings → Account → Delete AccountResponse time: GDPR: 30 days, CCPA: 45 days. Requests are free.8. Children's Privacy
Taiyaar is not directed to children under 13. We do not knowingly collect data from children under 13.Parents: If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We'll delete it within 30 days.Teens (13-17): Review this policy with a parent or guardian.9. Data Breach Notification
If a breach compromises your data, we will notify you and relevant authorities within 72 hours, describing what happened, what data was affected, what we're doing, and what you should do.Report security concerns: privacy@builtbyfoundry.io10. Security
We use encryption in transit (TLS 1.3+), encryption at rest (AES-256), secure authentication (OAuth 2.0), access controls, and regular security audits. While no system is 100% secure, we work to protect your data.You should: Protect your device passcode and biometric authentication, use strong Apple/Google account passwords, enable two-factor authentication.11. Foundry Owns the Aggregated Data
Your swipe activity, the boards you create, and the preferences you set are valuable signal that lets us improve Taiyaar and make Tavi's curation sharper. By using the App, you agree that Foundry owns the de-identified, aggregated dataset built from how Taiyaar is used, and that Foundry may use that dataset for any lawful business purpose, including improving the App, informing Tavi's curation, building new features, and creating insights about South Asian fashion demand. We do not sell identifiable personal information.12. Taiyaar Is a Discovery Tool, Not a Retailer
Taiyaar curates and links to looks sold by third-party South Asian fashion retailers. Foundry is not the seller of any item shown in the App. We do not handle payment, shipping, customs, duties, returns, or customer support for any item you order. Sizing, fabric details, color accuracy, lead times, and refund policies are determined by each retailer; please review the retailer's product page and policies before ordering.13. Updates to This Policy
We may update this policy to reflect new features or legal requirements. Material changes will be communicated via email or in-app notification 30 days before taking effect. Continued use after changes means you accept the updated policy.