Privacy Policy

Lazy Patta is a platform for traditional Indian family card games. It is not a gambling product — there are no cash prizes, no real-money play and nothing that can be cashed out. This page describes exactly what the app stores, where it goes, how long it stays, and how to get rid of it.

We do not sell or rent your personal data, we do not show ads, and we do not track you across other apps or websites. The app ships with no analytics or advertising SDK.

Playing without an account

Playing against the computer needs no account at all. Your display name, chosen language, theme, sound, motion and accessibility settings, computer-mode scores and tour progress are stored in your browser or in the app on your device. Deleting the app, or clearing your browser storage, removes them. They are never uploaded on their own.

Choosing Continue as guest for online play is different: it creates a real but anonymous account on our server so other players at your table have someone to play against. A guest account has no email attached, but it is a stored account, and everything in the next section applies to it.

What we collect when you play online

Account.Online play uses a guest account: we store a user id created on our server, and nothing else that identifies you. The app does not ask for an email address, a password or a phone number. If you signed in with an email address in an earlier version, that address stays attached to your account until it is deleted — see “Deleting your account” below.

Profile. Your display name, chosen avatar, preferred language, and simple play counters (games played, wins, level, a fair-play score, and when you were last seen).

Gameplay. The rooms you create or join and their codes, your seat, the state of the game in progress, the cards dealt to you, match results and running scoreboards, matchmaking queue entries, rematch votes, and messages sent in a match.

Social and safety. Friend requests and friendships, the people you played with recently, and any reports or blocks you make — reports are kept so we can act on abuse.

Coins and cosmetics. Coins are earned by playing and can only be spent on looks — card backs, table themes, avatars and celebrations. They cost nothing, cannot be bought, cannot be exchanged for anything outside the app, and never affect who wins. We store the record of coins earned and spent, the items you own, and the ones you have equipped, plus your daily-visit streak.

Invites.Your personal invite code, and — if you joined using someone else's code — the link between the two accounts, so both sides can be credited once.

Family rooms. If you create or join a family group: its name, join code, who is in it, scheduled game nights and notes, and past series results.

Technical. Our hosting and database providers keep ordinary server logs, which include IP addresses, for security and debugging.

Why we use it

To sign you in and keep you signed in; to run a game and keep every player at the table looking at the same state; to match you with other players; to show a scoreboard and match history; to run the coin and cosmetics features; to credit an invite; to investigate abuse reports and enforce blocks; and to keep the service secure and working. We do not use any of it for advertising or profiling.

Who processes it

Supabase hosts our database, authentication and realtime connections, and therefore stores everything listed above. Vercel hosts and serves the site and app. Both act on our instructions as processors.

OpenAI is used only for Patta Saathi, the optional in-app helper. When it is switched on, a description of the visible table is sent so it can explain a move. Hidden cards, room codes, raw chat, email addresses and phone numbers are stripped before anything is sent, and it never sees your account. Turning Patta Saathi off in Settings stops this entirely.

These providers operate infrastructure in several countries, so your data may be stored or processed outside the country you live in. We do not share your data with anyone else, and we never sell it.

How long we keep it

Your account, profile, coins, cosmetics, invite links and social connections are kept until you delete your account. Completed match results are kept for up to 180 days and then removed automatically. Rooms and their game state are removed when the room is retired. Server logs follow our providers' own retention periods. Abuse reports may be kept longer than the reported account so a pattern can still be investigated.

How it is protected

Everything travels over HTTPS. Every table in our database has row-level security so an account can only read its own rows and the rooms it is a member of, and no client can write to gameplay, coin or moderation tables directly — every change goes through a server-side function that derives who you are from your session rather than trusting anything the app sends. Secret keys live only on the server and are never shipped to the browser or the app.

Deleting your account

You can delete your account from inside the app at any time: Settings → Account → Delete my account. Deletion is immediate, not queued: your account, profile, settings, coins, cosmetics, invite links, friendships and room seats are removed in one go, and you are signed out.

Records that belong to other players — a finished match your table played together — stay with them, but your name is replaced with a neutral label first. Rooms you created are removed along with your account. Family circles are not: a circle belongs to the family, not to whoever started it, so it stays with the people still in it and you are simply removed from it. See Delete your account for the full description, including how to ask us if you can no longer sign in.

Your rights

You can ask us for a copy of the data held about you, ask us to correct it, or ask us to delete it — email bhatt.ishani@gmail.com. Depending on where you live, local data-protection law (for example India's DPDP Act or the EU/UK GDPR) may give you further rights, including the right to object to processing or to complain to your data-protection authority. We answer requests to the address above.

Children

Lazy Patta is made for families to play together, but it is not directed at children under 13 and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, email bhatt.ishani@gmail.com and we will delete it.

Changes and contact

If this policy changes materially we will update the date at the top of this page. Question about any of it? Email bhatt.ishani@gmail.com.