PRIVACY POLICY

Privacy Policy — Art of Mentalism by Sandeep (Mobile Application)
Last updated: August 12, 2026

This Privacy Policy describes how Art of Mentalism by Sandeep ("we", "our", or "us") collects, uses, and protects information when you use our mobile application (the "App") on Android or iOS.

By installing or using the App, you agree to this Privacy Policy.

1. Scope

This policy applies only to the mobile App. It does not describe practices of third-party websites or apps you open outside the App (for example, support links, WhatsApp, maps, social networks, or show ticket pages).

Some public home, demo, catalog, and course information pages may be viewable before you sign in. Signed-in features (assigned courses, progress, and downloads) require an academy account.

2. Information We Collect

Account information

• Email address used to sign in

• WhatsApp / phone number used to sign in (account credential linked to your academy account; used for authentication, not for marketing spam)

• Display name and profile photo (if present on your account)

• Training access levels and plan status linked to your account

Learning and usage data

• Video playback progress and completion status

• Lesson and level progress

• Download requests and offline content status

• Technical logs needed to sync progress with our servers

Device and notification data

• Local download progress notifications shown by your device OS when you start an offline download

• Push notification device tokens (Firebase Cloud Messaging) when notifications are enabled, so we can deliver academy announcements and similar messages

• Device integrity / App Check signals (for example Google Play Integrity on Android) used to help protect the App and our backend from abuse

Local device data

• App settings and preferences (including sound and notification preferences)

• Cached lesson metadata (for example, duration)

• Encrypted offline download files stored in app-private storage

We do not collect payment card numbers or process purchases inside the App.

3. How We Use Information

• Authenticate you and maintain your session

• Provide access to training assigned to your account

• Stream and download course media

• Sync progress between your device and our backend

• Send optional push and local notifications about academy updates and download progress

• Detect misuse such as unauthorized account sharing and protect App integrity

• Respond to support requests

• Check network type when you enable Wi-Fi-only downloads

The App is a companion viewer for enrolled students. It does not sell courses, subscriptions, or digital goods inside the App. Course or support inquiries you start via WhatsApp or other external channels happen outside the App under those services' policies.

4. Legal Bases (where applicable)

We process data as necessary to perform our contract with you (providing the App) and for legitimate interests (security and service improvement).

5. Third-Party Services

• Bunny Stream and its CDN (iframe.mediadelivery.net and b-cdn.net) — user-selected lesson video delivery. When you open a supported lesson, Bunny may receive your IP address, browser/device information, playback requests and interactions, and may use cookies or local storage needed to provide and secure playback.

• YouTube privacy-enhanced embeds (youtube-nocookie.com) — videos on home, demo, and course information screens that play only after you choose them. YouTube may process IP address, device/browser information, playback interactions, cookies or similar technologies, and may show ads under Google's policies.

• Firebase (Google) — Firebase Cloud Messaging for optional push notifications (device tokens) and Firebase App Check / Play Integrity for abuse protection.

• Our first-party media host — streams public showcase and demo MP4 videos stored with or delivered by the App

• Our academy API and media delivery infrastructure — login, content, progress sync

• External apps you choose to open — WhatsApp (customer care / course inquiry links), Google Maps (academy address), YouTube / Instagram / Facebook (social links), and ticket or website links. Those services receive whatever information is needed to open the link and operate under their own policies.

Session security: our API may use HTTP cookies for authentication and CSRF protection during your signed-in session.

The App uses an in-app WebView only for supported video playback. YouTube and Bunny playback are user-initiated. Local poster artwork is shown before YouTube playback, so no YouTube request is made until you choose Play. Google/YouTube, Bunny, and Firebase process information under their own privacy terms and may use data for delivery, security, analytics, personalization, or advertising as applicable.

When you use share actions, content you choose may be sent to apps you select through your device's system share sheet.

These providers process data to operate the App or the external action you requested. We do not sell personal data to advertisers.

6. Data Storage and Security

• Authentication tokens are stored in secure device storage (Keychain on iOS, Keystore on Android).

• Data is transmitted using encrypted connections (HTTPS).

• Offline downloads are stored locally within the App in an encrypted format.

7. Data Retention

We retain account and progress data while your academy account is active and as needed to provide the service, comply with law, and resolve disputes. When you request deletion, we delete or anonymize data unless retention is legally required. Push tokens are retained only while notifications remain enabled for your installation.

8. Your Choices and Account Deletion

• Notifications: control push and related preferences in App Settings and via your device notification settings.

• Download notifications: control via your device notification settings.

• Account deletion: this public section is the web deletion-request resource. Open Settings → Request Account Deletion in the App, or email artofmentalismbysandeepfradian@gmail.com with subject "Account Deletion Request" and include your sign-in email (and WhatsApp number if helpful for verification). We will verify your identity and delete or anonymize the account, progress and profile data unless retention is legally required.

9. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child provided data and we will delete it.

10. International Users

If you use the App outside India, your information may be processed in India or where our service providers operate.

11. Changes

We may update this Privacy Policy. The "Last updated" date will change when we do. Continued use of the App after changes means you accept the updated policy.

12. Contact

Questions about privacy or your data:
artofmentalismbysandeepfradian@gmail.com