Data Policy
Last updated: 26 July 2026
This Data Policy explains, in technical detail, how Unity stores, secures, and retains the personal data described in our Privacy Policy.
1. What we store
- Profile data — name, phone number, email, referral code, activation status.
- Payment records — amount, gateway, transaction reference, and status (not your card/UPI details, which Razorpay handles directly).
- Referral relationships — who referred whom, and whether that referral has completed its own activation payment.
- Device tokens — used solely to deliver push notifications, removable at any time by uninstalling the app or revoking notification permissions.
- In-app notifications — records of messages sent to you (activation status, payment receipts, referral updates, admin broadcasts).
2. Where your data is stored
Unity's application and database are hosted in India via Hostinger. Some third-party processors — notably Firebase/Google (authentication and push notifications) — may process data on infrastructure located outside India as part of their global service delivery.
3. Retention periods
We retain account data for as long as your account is active. If you request account deletion, we remove or anonymise your personal data within a reasonable period, except where we are required to retain payment records for accounting, tax, or fraud-prevention purposes under applicable law.
4. Security measures
- Passwords are one-way hashed and never stored or logged in plain text.
- All traffic between your device and Unity is encrypted in transit (HTTPS).
- Payment webhook callbacks are cryptographically signature-verified before any payment is marked successful.
- Admin panel access is role-restricted and limited to approved team members.
5. Third-party data processors
| Provider | Data shared | Purpose |
|---|---|---|
| Razorpay | Payment amount, order reference | Processing the activation fee |
| Firebase / Google | Phone number, device token | OTP verification, push notifications |
| MSG91 | Phone number | Transactional SMS delivery |
| Hostinger | All application data | Hosting & database storage |
6. Requesting deletion
You may request deletion of your account and personal data at any time by contacting [email protected]. We will confirm your identity before processing the request.
7. Data breach notification
In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required under applicable Indian law.
8. Contact
For any data-handling question, contact [email protected].
This page is a general template and does not constitute legal advice. It should be reviewed by a qualified lawyer before being relied upon as your organisation's binding data policy.