This Privacy Policy explains what information the Acto Rummy Android app (“Acto Rummy”, “the app”, “the game”, “we”, “us”) collects, why we collect it, how long we keep it, and who it is shared with. Acto Rummy is developed and published by DeniDeveloper India, operated by Deniotech Solutions Private Limited (“the Company”, “we”, “us”), whose registered address is Ghaziabad, Uttar Pradesh 201001, India and whose GSTIN is 09AALCD7369P1ZL. The Company is the data controller responsible for the personal data described in this Policy. By installing or using the app, you agree to this Policy.
1. About the app
Acto Rummy is a free, practice-only card game. It is skill practice only. The game contains no real money, no deposits, no withdrawals, no wagering, no betting, no cash or physical prizes, and no in-app purchases of any kind. Nothing in the app can be bought, won or cashed out. Because there is no money in the game, we never ask for and never process payment, banking, card or UPI details.
2. What we collect and why
We collect only what the app needs in order to sign you in and keep your account secure. Specifically:
a. Mobile number
When you create an account or sign in, we collect your mobile number. It is the only thing we use to identify your account — Acto Rummy has no usernames and no passwords. We use it to create your account, to sign you in on future visits, to recover your account if you change device, and to contact you about your account or a support request if you write to us.
b. OTP verification data
To confirm that the mobile number really belongs to you, we send a one-time password (OTP) to it by SMS. In connection with this we handle the OTP code itself, the time it was sent, whether the verification succeeded or failed, and how many attempts were made. This exists for one reason: to prove you control the number, and to stop other people creating accounts on your number or flooding the app with fake accounts. The OTP code is short-lived — it expires a few minutes after it is sent and is then discarded.
c. Device identifiers
We handle a device identifier — a technical ID for your app installation, together with basic technical details such as your device model, operating-system version and app version. We use these to keep your account secure (for example, recognising a new device signing in), to prevent one person creating large numbers of accounts, and to diagnose crashes and bugs. We do not use device identifiers to build an advertising profile of you, and we do not use your device's advertising ID for tracking.
d. Local practice scores
Your practice scores, game progress, statistics and in-game settings are stored locally on your own device. This information stays on your phone so the app can show you your own practice history. It is not uploaded to us and we cannot see it. Clearing the app's data or uninstalling the app removes it completely.
3. How long we keep it
| What | Why we have it | How long we keep it |
|---|---|---|
| Mobile number | Identifies and secures your account; lets you sign back in | For as long as your account is active. Erased within 30 days of a verified deletion request, and removed from encrypted backups within 90 days. |
| OTP code | Proves you control the number | Expires a few minutes after it is sent, then discarded. Never stored long-term. |
| OTP verification records (success/failure, time, attempt count) | Security and abuse prevention | Up to 90 days, then deleted. |
| Device identifiers and basic technical details | Account security, abuse prevention, crash diagnosis | For as long as your account is active, and up to 90 days after it is deleted. |
| Practice scores, progress, settings | Shows you your own practice history | Held only on your device, for as long as you keep the app. Gone the moment you clear the app's data or uninstall it. |
We may keep a record for longer than the periods above only where a law applying to us requires it, or where it is needed to resolve a dispute or enforce our Terms & Conditions. When a retention period ends, the data is deleted or irreversibly anonymised.
4. Who we share it with
We do not sell your personal data. We do not share it with anyone for advertising, marketing or profiling. Acto Rummy contains no third-party advertising networks.
The only outside parties that ever handle your data are the service providers we need in order to run the app. They act only on our instructions, are bound by contract to protect your data, and may not use it for their own purposes:
- SMS / OTP delivery — our SMS delivery partner receives your mobile number for the sole purpose of delivering the one-time password to it.
- App hosting and account storage — our cloud hosting provider stores account data securely on our behalf.
- Crash and stability reporting — our diagnostics provider receives anonymous technical crash information only, never your identity.
Beyond these providers, we disclose personal data only if we are legally required to — for example in response to a valid order from a court or an authorised government agency under Indian law, or where disclosure is necessary to protect the safety or legal rights of our users or of the Company.
5. What we never collect
- No payment, banking, card or UPI details — there is no money in the app.
- No contacts, call logs or SMS inbox.
- No location data.
- No photos, camera or microphone access.
- No advertising identifiers used for tracking or ad profiling.
6. Permissions
Acto Rummy asks only for the permissions its features actually need, and each is used only for the purpose stated here:
- Network / internet access — to send the OTP, sign you in, and deliver the app through Google Play.
- Storage — to save your practice scores, progress and settings locally on your device.
- Notifications (if you allow them) — to alert you about your account. You can turn these off at any time in your device settings.
7. Your rights and choices
You are in control of your data. You may:
- Access — ask us for a copy of the account data we hold about you.
- Correct — ask us to fix data that is wrong or out of date.
- Delete — delete your account and data at any time. Full instructions are on our Data Deletion page.
- Withdraw consent — stop using the app and delete your account. Note that because your mobile number is the only way we can identify your account, we cannot keep the account open without it.
- Complain — raise a grievance with our Grievance Officer (section 11) or with the relevant data protection authority in India.
To exercise any of these rights, contact us using the details in section 11. We acknowledge every request within 24 hours and respond within 15 days. We may need to verify that the request comes from the owner of the mobile number before we act on it.
8. Age requirement
Acto Rummy is intended for users aged 18 and over and is not directed at children. Although the game involves no real money, no wagering and no prizes, it is positioned 18+ because of its card-game theme. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has created an account, contact us and we will delete it. See also our Responsible Gaming page.
9. Security
We use reasonable technical and organisational safeguards to protect your data, including encryption of data in transit and restricting access to accounts data to the people who need it. Your practice scores are held on your own device and are protected by your device's own security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take the protection of your mobile number seriously and keep the amount of data we hold deliberately small.
10. Changes to this policy
If we update this Policy, the revised version will appear on this page with a new “Last updated” date. If a change is significant, we will make it clear in the app. Continuing to use Acto Rummy after a change is posted means you accept the updated Policy.
11. Contact us about privacy
For any question, request or complaint about your privacy or this Policy, contact:
Privacy queries and data-access requests — business@denideveloperindia.com
Grievance Officer — Grievance Officer, Deniotech Solutions Private Limited, business@denideveloperindia.com, Ghaziabad, Uttar Pradesh 201001, India. We acknowledge grievances within 24 hours and resolve them within 15 days.
Registered address — Deniotech Solutions Private Limited, Ghaziabad, Uttar Pradesh 201001, India · GSTIN 09AALCD7369P1ZL
We acknowledge every privacy request within 24 hours and aim to resolve it within 15 days.