Overview
Project Karma is a productivity game operated as a sole proprietorship in India, available at projectkarma.me and project-karma.pages.dev. This policy explains how we handle account information, game saves, payments and support requests. We do not sell your data.
Data we collect
If you sign in, Clerk handles your email address, account ID, and any display name or avatar supplied by Google. We do not receive your Google password. Game saves include your karma, lifeforms, task names, focus-session progress, deadlines and dates, chronicle entries, and blessings. These are stored in your browser. With Guru, game saves are also synced to Supabase so you can use them across devices.
Dodo Payments is the merchant of record and handles payment details and invoices. We receive payment and subscription notifications and store the identifiers linking your Karma account to your Dodo customer and subscription, subscription status, billing-period end, cancellation status and update timestamps. We do not store full card numbers.
Our hosting and service providers process technical information such as IP addresses, browser information and request times to deliver and protect the service. Application logs can also contain account IDs and payment-event identifiers. If you email support, we receive your email address and the information you include in your message.
How we use data
We use your data to provide and sync the game, including offline first sync when you are subscribed to Guru. We use it to manage subscriptions and premium access, to prevent fraud, and to provide support. We do not use your data for advertising and we do not sell it.
Where a legal basis is required, we use account and game information to provide the service you request, rely on legitimate interests for security and troubleshooting, and retain records needed to meet legal obligations. You can contact us about these uses or exercise the rights described below.
Service providers
Clerk provides authentication. Supabase stores synced game saves and subscription records. Dodo Payments handles payments, invoicing, tax and billing disputes. Cloudflare hosts the site and API. The site also loads fonts from Google Fonts and a browser library from jsDelivr; those requests send technical information such as your IP address and browser information to the respective providers. Support messages are handled through our email service. We may also disclose information when required by law.
Cookies and storage
We use cookies and browser storage for authentication, PWA caching, game saves and settings. A temporary record of your sign-in button click carries your terms acceptance through the Google sign-in redirect. Clerk may set authentication cookies on clerk.projectkarma.me. We do not use advertising cookies or third-party analytics.
Retention and deletion
Account information and cloud saves are retained while your account exists. Cancelling Guru stops renewal; it does not itself delete your account or cloud save. Browser saves, including local recovery copies, can remain until you clear the site's data.
To request deletion of your account and cloud save, email support@projectkarma.me from the address used for your account. Requests are handled manually, and we may need to verify account ownership. We will arrange account and cloud-save deletion and stop any remaining subscription renewal. We cannot remotely erase copies on an offline device.
Some billing, dispute and security records may need to be retained to meet legal obligations or resolve an outstanding issue. Dodo retains invoices and transaction records under its own obligations. Technical logs and backups follow the retention settings of the providers that hold them. We will explain any relevant retention exceptions when responding to a deletion request.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete or export your data, restrict processing, or object to certain uses. Where processing relies on consent, you may withdraw it. You may also complain to your local data protection authority. To make a request, email the address above. We will respond within the time required by applicable law, normally within one month.
Security
All data is transmitted over HTTPS. Direct database access requires a service role and is not exposed to the public. We do not store card data. No system is completely secure. Please report any security concerns to the contact address above.
Children
Project Karma is not directed to children under thirteen. Do not create an account if you are under thirteen.
International transfers
Project Karma is operated from India, and our providers may store or process information in other countries, including the United States and countries in the European Union. Processing locations and transfer arrangements depend on the provider and service involved. Contact us if you need information about a particular provider's handling of your data.
Changes
We may update this policy from time to time. When we do, we will update the effective date on this page. Material changes will be notified in the app or by email.
Contact
If you have questions or requests regarding this policy, contact us at support@projectkarma.me. For billing issues, please include the email address used at checkout.