Privacy Policy

1. What We Collect

When you use MyOtherApp, we may collect:

• Account details: your name, email address and username. If you sign up with an email address, we also keep your password, stored only as a hash. If you sign in with Google or Apple, we receive the name and email address they share with us.
• Profile: the organisation or college and the WhatsApp number you add, the avatar or photo you choose, your interests, and the clubs you follow.
• Event registrations: your name, email address and phone number; your answers to the organiser's questions, including any files you upload; your ticket; whether and when you were checked in; certificates issued to you; and, if you arrived through a club's tracking link, which link it was.
• Payments: what you paid for, the amount, its status and Razorpay's reference numbers. You enter your card, UPI or bank details on Razorpay's checkout, and we never receive your full card number or CVV. We do keep the payment details Razorpay sends us, which can include your UPI ID, the bank or wallet you used, the last digits of your card, and the email address and phone number given at checkout.
• What you post: your comments, likes and poll votes on club threads; your questions and answers in an event's live room; and the ratings, reviews and feedback you give organisers.
• Reports and blocks: reports you make (what you reported, the reason and any note you add), reports other people make about your content, and the people you block.
• Device and app data: the push-notification token Firebase gives your device, and whether it runs iOS or Android; crash reports from Firebase Crashlytics, such as the device model, operating system, app version and what went wrong; and usage data from Firebase Analytics, such as which screens you open. On Android, Firebase Analytics can also read your device's advertising ID. We don't show ads.
• Sign-in and security records: each time you sign in or try to, the time, the method, the IP address and the browser or device used, and the approximate place (city and region) worked out from that IP address. We also keep the IP address and browser of each signed-in session.
• Location: the app doesn't ask for your location. On the website, we estimate your area from your IP address to show events near you. If you choose "Use my location", your browser asks for your permission and then shares a point rounded to about 100 metres. The website keeps that point in your browser and sends it with requests for nearby events; we don't save it to your account.
• Website visits: when you open an event page, we record the visit with your IP address, your browser and, if you're signed in, your account. Visits through a club's tracking link, and visits to a club's website, are counted using a one-way hash of your IP address and browser, along with the page you came from. In those cases we don't keep the IP address itself.
• Messages to us: what you send us by email, such as reports and requests.
• If you run a club: your club's details; the names and email addresses of your team members; your plan and billing history; and, if you connect your club's own Razorpay account, its API keys, which we store encrypted.
• If your club connects a social account: for a Facebook Page, Instagram account, LinkedIn profile or Page, or X account your club connects, the account's id, name, handle and picture, the access tokens the platform gives us (stored encrypted), and the posts we publish for your club. Section 7 has the details.

2. Why We Collect It

• To create and manage your account, and to sign you in securely
• To register you for events, issue your ticket and check you in, and to send you event emails, reminders and certificates
• To process payments and refunds, and to keep financial records
• To show you events, clubs and posts that are relevant to you, including events near you
• To send you notifications about events and clubs you follow
• To help clubs manage their events, registrations and payments, and see which of their links brought people in
• To keep MyOtherApp safe: reviewing reports, enforcing our Terms, and preventing fraud, abuse and unauthorised access to accounts
• To find and fix problems, and to make the app and website better based on what's working (and what's not)
• To meet our legal obligations

3. Who We Share It With

We don't sell your data, ever. We share it only as described here.

The organiser of an event

When you register for an event, the club or organisation running it sees your registration: your name, email address and phone number, your answers to its questions, your ticket and payment status, whether you checked in, and which of its links brought you. Clubs can download their registration lists. After an event, a club can keep your name, email address, phone number and attendance in its contact book. A club also sees who follows it, with each follower's name, username and organisation.

Once a club has your details, how it uses them is its responsibility.

Other people on MyOtherApp

Your comments on club threads are public and show your name. Anyone can read them in the app and on our website, signed in or not. We don't tell anyone that you reported them or their content, and we don't tell people you block.

Service providers who work for us

• Razorpay processes payments. If a club has connected its own Razorpay account, your payment for that club's events goes to its account. The club and Razorpay then handle that payment under their own terms.
• Google Firebase provides push notifications (Cloud Messaging), app usage analytics (Analytics) and crash reports (Crashlytics).
• Amazon Web Services hosts our servers and database, stores files such as photos and uploads (Amazon S3), and sends email (Amazon SES).
• Resend may also send our emails.
• Vercel and Cloudflare host and deliver our website, the clubs dashboard and club websites.
• Google and Apple sign you in, if you choose to sign in with them.
• ipapi.co turns an IP address into an approximate place.
• Google Maps shows an event's venue on its event page and gives directions. Loading the map shares your IP address and browser details with Google.
• WhatsApp (Meta) delivers an organiser's event messages, if the organiser sends them by WhatsApp.
• Discord is where our team receives alerts about errors and reported content.

We share with these providers what they need to do their part, and nothing more.

When the law requires it

We share information with the police, courts or other authorities when the law requires it. We may also share it when we need to, to protect someone's safety or to protect our users or MyOtherApp from fraud or abuse.

4. How Long We Keep It

How long we keep your data depends on what it is:

• Your account and profile: for as long as your account is open. For what happens when you delete it, see Deleting your account.
• Event registrations: for as long as your account is open, so that your tickets and certificates keep working. Each organiser decides what happens to its guest list after an event. By default the list is kept. An organiser can instead have us erase phone numbers and answers to its questions a set time after the event; the registration itself is still kept. If the organiser keeps a contact book, it keeps your name, email address, phone number and attendance from that event.
• Payment records: for as long as we need them for accounting, tax and resolving disputes, even after you delete your account.
• Reports and moderation decisions: for as long as we need them to deal with repeated abuse.
• Sign-in and security records: for as long as we need them to protect accounts and look into misuse.
• Crash reports and usage analytics: for the periods set in our Firebase project.

5. Your Controls

You've got power. You can:

• Edit your profile at any time
• Turn off push notifications in your phone's settings
• Block people whose comments you don't want to see, and unblock them under Settings → Blocked Users
• Stop sharing your browser's location with the website, with "Forget my location" or in your browser's settings
• Ask for a copy of your data, or for something to be corrected, by emailing support@myotherapp.in
• Delete your account, in the app or by email (see below)

6. Deleting Your Account

You can delete your MyOtherApp account at any time, in the app or by email.

In the app

1. Open the Profile tab and tap Settings.
2. Scroll to the bottom and tap Delete Account.
3. Tap DELETE to confirm. You're signed out straight away.

By email

Email support@myotherapp.in from the email address on your account, with the subject "Delete my account". We may ask you to confirm the request before we act on it, and we'll reply when it's done. If you registered for events on our website without an account, you can ask us to delete those details in the same way.

What is deleted

• Your account is closed, and no one can sign in to it.
• Your profile, your interests and the clubs you follow are removed.
• Your event registrations are removed. Your tickets stop working, including tickets for events that haven't happened yet, and organisers no longer see you in their lists on MyOtherApp.

What is kept

• These records are marked as deleted and hidden everywhere on MyOtherApp, but they are not erased straight away. If you want your personal data erased, not just your account closed, say so when you email us. We'll erase whatever the law doesn't require us to keep.
• Payment records: we keep records of your payments and refunds, as the law requires for accounting and tax.
• Your comments: they stay under the posts you commented on, but without your name; they show as "A follower". Your likes and poll votes still count. If you want your comments gone, use Delete comment on each one before you delete your account.
• Reports and moderation records: we keep these so we can deal with repeated abuse.
• What organisers already have: registration lists a club has downloaded, and contact books it kept after past events, are the club's own. Ask the club to delete them.

Deleting your account doesn't refund anything you've paid. If you've paid for an event that hasn't happened yet, ask the organiser about a refund before you delete your account.

7. Social Accounts Clubs Connect

A club can connect its Facebook Page, Instagram business or creator account, LinkedIn profile or Page, and X account, so that MyOtherApp posts the club's events there when the club schedules or approves a post. Only a club's owners and admins can connect or disconnect an account.

• What we keep: the platform's id for the account, its name, handle and profile picture; the access tokens the platform gives us, stored encrypted and never shown, logged or sent to a browser; for Facebook and Instagram, the id Facebook gives us for the person who connected the account; and, for each post we publish, the platform's id and link for it, when it went out and whether it worked.
• What we don't: we ask each platform only for permission to publish and to read the account's name and picture. We don't read or keep its messages, followers or comments.
• What we use it for: only to publish the posts the club scheduled or approved, to show the club how they went, and to tell the club when an account needs connecting again. We never post anything the club didn't schedule or approve.
• Who sees it: the club's team sees which accounts are connected and how its posts went. The post itself goes to the platform, under that platform's own terms and privacy policy.
• How long: until the club disconnects the account. Disconnecting deletes the access tokens at once and revokes them where the platform allows; so does deleting the club, or removing the team member who connected it. Posts already published stay on the platform, and the record that they went out stays with the event.
• Facebook data deletion: if you remove MyOtherApp from your Facebook account and ask for your data to be deleted, we delete it as soon as Facebook tells us. Our data deletion page explains what is deleted and shows the status of your request.

8. Data Storage & Security

We store your data with the trusted providers listed above. Connections to our servers are encrypted, passwords are stored only as hashes, and the Razorpay keys clubs give us are stored encrypted. No system is 100% hack-proof, so we can't guarantee that your data will never be accessed without permission. Stay safe out there, and keep your password to yourself.

9. Cookies & Tracking

• In the app: we use Firebase Analytics and Crashlytics, as described above. We don't use them for advertising, and we don't track you across other companies' apps or websites.
• On our websites: we don't use advertising or analytics cookies. The website keeps a few things in your browser's storage so that it works: your sign-in, the location you chose, a registration you haven't finished, your place in an event's live room, and, until you close the tab, the tracking link you arrived by. Signing in can also set cookies that keep you signed in.
• Other companies' content: Google Maps on event pages, Google sign-in and Razorpay's checkout load from Google and Razorpay, which may set their own cookies under their own privacy policies.

10. Children

MyOtherApp is made for students and the clubs and organisations they belong to. It is not directed at children, and we don't knowingly collect personal data from children. If you believe a child has given us personal data, email support@myotherapp.in and we'll delete it.

11. Changes to This Policy

If we change anything major, we'll let you know via the app or email. You can always see the latest version here, and the date at the top shows when it last changed.

12. Contact Us

Got questions, a privacy concern, or a request about your data? Write to us:

Email: support@myotherapp.in