Privacy Policy & Data Protection Notice
Dimagy adheres strictly to the Digital Personal Data Protection (DPDP) Act, 2023 (India) and international security standards for user identity protection.
1. Information We Collect
We collect only the minimum necessary digital personal data required to deliver customized habit tracking, community insights, and account security:
Verified email address, full name, and avatar image URL received via Google Identity Services with your permission.
Daily routine completions, streaks, timezone offset, growth points ledger, reflections, and community comments.
2. Zero-Sale Commitment & Data Safeguards
Dimagy will NEVER sell, lease, or monetize your personal data, email, or habits to third-party advertisers or data brokers.
- Encryption: Sensitive account records and passwords are protected with bcrypt cryptographic hashing and HTTPS TLS 1.3 encryption in transit.
- Two-Factor Authentication: High-privilege administrative accounts and opted-in user accounts utilize Two-Factor Authentication (2FA OTP verification) to prevent unauthorized takeovers.
- Transactional Isolation: Community hype (PerkUp) actions are logged to mitigate bot abuse without exposing your browsing habits.
3. Your Rights as a Data Principal (DPDP Act, India)
As a registered user under the Digital Personal Data Protection Act, 2023, you possess the following rights:
- Right to Access: You can view your full profile, habit logs, and points at any time on your dashboard.
- Right to Rectification: You can update your profile name, avatar selection, and timezones from your settings.
- Right to Erasure / Forget: You may request complete account deletion and data scrubbing by submitting a Data Privacy request via our Contact portal.
- Right to Nominate: You may designate an authorized representative in event of incapacity.
4. Data Protection Inquiries & Grievance Contact
If you have questions regarding this Privacy Policy or wish to exercise your data principal rights, please contact our administrative team: