This Privacy Policy explains how Giani, a product operated by Moonrise Labs Inc.(“Giani,” “we,” “us,” or “our”) collects, uses, and protects information when you use the Giani iOS application (the “App”) and the website at giani.app (together, the “Service”). Giani is a daily Punjabi challenge app. We try to collect as little information as possible, and only what we need to make the product work.
If you have any questions, email us at support@giani.app.
1. Information we collect
a. Account information
You can sign in to Giani using Sign in with Apple or Sign in with Google. Depending on which you choose, we receive:
- A unique user identifier issued by Apple or Google
- Your email address
- Your name (if you choose to share it)
- Your profile picture URL (Google only, if available)
When you use “Sign in with Apple,” you can choose to hide your email address; in that case we only receive Apple’s private relay email and a user identifier.
b. Profile and progress data
To run the daily challenge, streaks, and rating features, we store:
- Display name and avatar URL you signed up with
- Your current streak and last active date
- Your rating (an Elo-style score that changes when you answer questions)
- A history of each question you answered, whether you answered correctly, and your rating before and after that answer
- A snapshot of your rating after each completed daily set, used to draw your rating graph
c. Feedback you send us
If you submit in-app feedback, we store the message, your display name at the time, your user ID, and the app version. We use this only to respond to you and improve the app.
d. Device and usage data (analytics)
We use PostHog for product analytics and session replay. This helps us see which screens are confusing, where people drop off, and what to build next. PostHog receives:
- Your Giani user ID (once you sign in) and display name
- App version, build number, and whether this is a debug build
- Your device’s timezone and local date
- Events such as: app opened, app backgrounded, screen viewed, daily set started / completed, question answered, word-of-the-day audio played, notification permission status, notifications scheduled / tapped, sign in / sign out
- Session replay screenshots of the app’s UI while you use it (text inputs and images are included so we can debug real issues). Session replays do not capture anything outside the Giani app.
e. Advertising
Giani shows ads to keep the app free. We use Google AdMob, Google’s mobile advertising platform, to serve rewarded and interstitial ads. To serve and measure those ads, AdMob and Google may collect and process:
- Your device’s advertising identifier (IDFA) — only if you allow tracking (see below)
- Coarse location derived from your IP address, device type, and operating system version
- Ad interaction data, such as which ads were shown, tapped, or watched to completion
App Tracking Transparency.Because ads may use your device’s advertising identifier, iOS will show you Apple’s App Tracking Transparency prompt. If you decline, you will still see ads, but they will be non-personalized (not based on your advertising identifier).
Consent in the EEA, UK, and Switzerland.If you are in a region covered by these privacy laws, we use Google’s User Messaging Platform to ask for your consent before showing personalized ads. You can change or withdraw your choice at any time from Settings → Privacy Options inside the app.
Google’s handling of advertising data is governed by its own policies. For details, see how Google uses information from apps that use its services.
f. Notifications
With your permission, we send local push notifications for your daily set reminder, word of the day, streak-at-risk, streak-lost, and 1v1 rematch reminder messages. These are scheduled on your device; we record in analytics when you tap them, so we can tell if they’re useful.
g. Emails we send you
We send a small number of service emails directly tied to your use of Giani:
- A one-time welcome email after you finish onboarding and pick a username.
- A one-time “first set complete” email after you finish your first daily set, summarizing your score and rating.
These emails are sent from arsh@giani.app via Resend, our email delivery provider, who receives your email address and the message content only when we send these emails. If you signed in with Apple and chose “Hide My Email,” delivery is routed through Apple’s private email relay, so we never see your real address.
We do not currently send marketing or promotional email. If we ever introduce marketing emails in the future, we will ask for your separate consent and include an unsubscribe link in every such message. To stop receiving any emails from Giani, delete your account (see Section 6) or email support@giani.app.
h. Photo library
If you share your daily summary to Instagram or Snapchat, iOS will ask for permission to add the generated image to your Photo Library. We only write the image you generated; we never read your photos.
i. Purchases and Giani Pro
Giani Pro is an optional auto-renewing subscription billed by Apple through In-App Purchase. Apple processes the payment. We do not receive your Apple ID password or card details.
We use RevenueCat to know whether Pro is active on your account, so we can unlock unlimited custom sets, unlimited replays, and hide ads, and so Pro follows you across devices. When you buy, restore, or cancel, RevenueCat receives your Giani user ID and App Store transaction data (the product, the billing period, the expiration date, and whether the plan will renew).
We also store a boolean is_pro on your Giani profile. That flag is how the Super badge is shown to you and to other people in the app (for example on leaderboards and Pinds). It is not used to charge you; Apple remains the merchant of record.
2. How we use your information
We use the data above to:
- Create and maintain your account
- Run the daily set, rating, streak, and word-of-the-day features
- Show you your progress history and rating graph
- Send you notifications you opted into
- Send you the service emails described in Section 1g
- Show ads to keep Giani free (see Section 1e)
- Provide Giani Pro and keep your subscription status in sync (see Section 1i)
- Respond to feedback you send us
- Debug issues, fix crashes, and improve the app
- Detect and prevent abuse
We do not sell your personal information for money. We do show ads through Google AdMob, which may involve sharing device identifiers with Google as described in Section 1e. Depending on your choices and where you live, this may be treated as “sharing” or a “sale” of information under some U.S. state privacy laws; you can limit it by declining the App Tracking Transparency prompt or adjusting your consent in Settings → Privacy Options.
3. Who we share data with
We only share data with service providers who help us run Giani, under their own privacy policies:
- Supabase (database, authentication, hosting) — stores your profile, rating, question history, rating snapshots, feedback, and the is_pro flag described in Section 1i.
- PostHog (product analytics and session replay) — receives the analytics events listed above.
- Resend (transactional email delivery) — receives your email address and the message content only when we send the service emails described in Section 1g.
- Google AdMob(advertising) — receives your device’s advertising identifier (when you permit tracking), IP-derived coarse location, and ad interaction data to serve and measure ads, as described in Section 1e.
- RevenueCat (subscriptions) — receives your Giani user ID and App Store purchase / entitlement data so Pro stays in sync across devices, as described in Section 1i. See RevenueCat’s privacy policy.
- Apple and Google — as your identity providers when you sign in. Apple also processes Giani Pro payments through In-App Purchase.
We may also disclose information if required by law, to protect the rights and safety of Giani, our users, or the public, or as part of a corporate transaction (merger, acquisition, etc.). Aside from the ad identifiers shared with Google AdMob to show ads (Section 1e), we do not sell your data to advertisers or data brokers.
4. Where your data lives
Giani’s primary database is hosted on Supabase in the United States. Analytics data is processed by PostHog in the United States. Subscription data is processed by RevenueCat in the United States. Advertising data is processed by Google (AdMob), which operates data centers globally. If you use Giani from outside the U.S., your data will be transferred to and processed in the U.S. and other countries.
5. How long we keep your data
We keep your account data for as long as your account exists. If you delete your account (see below), we delete your profile (including is_pro), question history, rating snapshots, and feedback within 30 days. Aggregated / anonymized analytics (which cannot be linked back to you) may be retained longer. Apple and RevenueCat keep purchase records under their own policies; deleting your Giani account does not cancel a paid Apple subscription.
6. Your rights and choices
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Object to or restrict certain processing
- Lodge a complaint with your local data protection authority
Account deletion. You can delete your account and all associated data by emailing support@giani.app from the email you signed up with, or by using the delete-account option inside the app Settings. We will delete your data within 30 days.
Notifications. You can turn notifications off any time, from inside Giani Settings or in iOS Settings.
Advertising.You can decline the App Tracking Transparency prompt (or turn off “Allow Apps to Request to Track” in iOS Settings → Privacy & Security → Tracking) to get non-personalized ads. In the EEA, UK, and Switzerland, you can change or withdraw ad consent any time from Settings → Privacy Options in the app.
7. Children
Giani is not directed at children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal information from children in that age range. If you believe a child has given us personal information, email us and we will delete it.
8. Security
We use industry-standard protections, including encrypted connections (HTTPS / TLS), Supabase row-level security so users can only read and modify their own data, and hashed nonces for sign-in. No system is perfectly secure; we can’t guarantee absolute security.
9. Changes to this policy
If we make material changes to this policy, we will update the “Last updated” date at the top and, where appropriate, notify you in the app.
10. Contact
Questions, requests, or concerns? Email support@giani.app.