Privacy policy
What we keep, why we keep it, and how to get it deleted. One policy for mundhralabs.com and every Mundhra Labs app, written to be read.
Your name, email and photo to sign you in, plus what you add to an app.
No ad trackers, no data brokers, no selling. Ever.
Postscript opens your chat on your device. It is never uploaded.
Ask, and your account and data are gone within 30 days.
Who we are
Mundhra Labs is the after-hours lab of Aditya Mundhra, based in India. We build small apps and guides and run them on mundhralabs.com and its subdomains.
This policy covers the website and every Mundhra Labs app: Substrack (app.mundhralabs.com) and Postscript (postscript.mundhralabs.com). One policy, with a section for each part. When we add an app, we add its section here.
Under India's Digital Personal Data Protection Act, 2023, Aditya Mundhra is responsible for your personal data. Write to [email protected] about anything on this page.
Your Mundhra Labs account
One account works across mundhralabs.com and our apps. Depending on the app, you sign in with your Google account or your email address.
When you sign in with Google, Google shares your name, email address and profile photo with us. That is all signing in gives us. We never see your Google password.
Each app reads only what it needs from your account. One app cannot see what you keep in another.
On mundhralabs.com
You don't need an account to read anything on the site.
| What | Why |
|---|---|
| Visit counts | Cloudflare Web Analytics counts visits and pages without cookies and without identifying you. |
| Small preferences | A few pages remember settings, like where you stopped reading, in your own browser. They stay on your device. |
| Comments and ratings (when they arrive) | Your comment, your rating, the page and the time. Your display name and photo appear publicly next to what you post. |
| Emails you send us | Your email address and message, so we can reply. |
In Substrack
Substrack keeps one list of everything that repeats: subscriptions, bills, EMIs and UPI AutoPays.
| What | Why |
|---|---|
| Your account | Your email address and the details you sign in with, so the list is yours alone. |
| What you add | Names, amounts, dates, plans and notes for each item, so Substrack can show totals and what charges next. |
| Your settings | The choices you make inside the app. |
In Postscript
Postscript turns a WhatsApp chat export into something worth going back to.
| What | Why |
|---|---|
| Your account | Your name and email address. |
| A little about your chats | How many chats you have and the labels you give them. Not what they say. |
| Share links | Only the summary you choose to share. Anyone with the link can see it, and you can delete it. |
| Google Drive backup (if you turn it on) | Postscript saves a backup file to your own Google Drive. It can open only files it created there, never the rest of your Drive. Backups live in your Drive, not on our servers. |
Why we use it
- To run the app you are using and keep your data in sync across your devices.
- To keep your account secure and stop abuse.
- To reply when you write to us.
- To fix bugs and see which features get used, in counts, not by person.
We rely on your consent: you give it when you sign in or use a feature, and you can withdraw it at any time by deleting your account or writing to us.
What we never do
- Sell, rent or trade your data.
- Show ads or use ad trackers.
- Read your chats, your bank details or your SMS.
- Use what you add to train AI models.
Who helps us run things
| Service | What it does for us |
|---|---|
| Supabase | Hosts our app databases and sign-in. Substrack's data is stored in Mumbai, India. |
| Cloudflare | Hosts mundhralabs.com and our apps, protects them from attacks, and counts visits without cookies. |
| Sign in with Google, Google Drive for Postscript backups, and our email. |
Each of them processes data only to provide its service to us. Some of their servers may be outside India.
How long we keep it
- Your account and app data: for as long as your account exists. When you delete it, we delete your data within 30 days.
- Comments: until you delete them or your account.
- Emails: as long as we need them to help you.
- Security logs: kept briefly by our hosting providers, then deleted.
Your rights
You can ask us to:
- Show you a summary of the personal data we hold about you.
- Correct or update it.
- Delete it, along with your account.
- Withdraw your consent.
- Name someone to act for you if you die or are unable to.
Write to [email protected] from the email address on your account. We reply within 7 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Keeping it safe
Everything travels over HTTPS. Our databases check every request so each person can read only their own data. Only Aditya has admin access.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the Data Protection Board of India, as the law requires.
Children
Our apps are for people aged 18 and over. If we learn that someone younger has an account, we delete it.
Data from Google
Mundhra Labs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Changes to this policy
When we change this page, we update the date at the top. If a change affects what we collect or how we use it, we tell you in the app or by email before it applies.
Contact
Questions, requests or complaints: [email protected]. Aditya Mundhra, Mundhra Labs, Hyderabad, India.