Privacy Policy

You can play Deduce without an account. Signing in is optional and saves your streak across devices. This page covers the website (deducepuzzles.com) and the Android app, which shows the same site inside the app, so everything below applies to both.

Last updated: 15 September 2026.

What we collect

• An anonymous session. When you first open Deduce we set a session cookie so we can serve you today's puzzle, run the clock and keep your streak. It is not tied to your name, email or phone number.
• Gameplay data. Which puzzles you were served, your attempts and answers, your elapsed time, score, rank and streak, and your practice results. The game needs this to work, and the leaderboard is built from it.
• Usage and device information. The pages and screens you open, the page or ad that brought you here (including campaign tags in the link), your device type, browser and operating system, the country worked out from your IP address, and a random visitor ID kept in your browser's storage. We store a salted, one-way hash of your IP address, not the address itself.
• Optional sign-in. Signing in is never required to play. If you sign in with Google, Google sends us a verified token. From it we store a stable account identifier, your display name, your email address and a link to your Google profile photo. We never receive your Google password. You can instead sign in with a one-time code sent to your email address, in which case we store that address.
• Things you choose to give us. The exam you are preparing for and your state and district, if you pick them; your email address or phone number if you ask for a free puzzle PDF; a device token if you turn on push reminders; names you type for a group; problem reports, feedback and survey answers; a testimonial, which we publish only if you agree to it; the details you enter on an institute enquiry form; and messages you send to the in-app assistant (see below).
• Server logs and error reports. Requests to our servers are logged with technical details (IP address, time, user agent) for security, abuse prevention and debugging. When something breaks on our servers, an error report with those technical details is sent to Sentry, which we use to find and fix bugs.

How we use it

• To generate and validate the daily puzzle, enforce the timer fairly, and compute your score, rank and streak.
• To keep your history, and to merge anonymous progress into your account if you sign in.
• To send the emails the service needs (sign-in codes, receipts, eBook download links) and the reminder and update emails you can opt out of (a welcome email, daily puzzle reminders, a note before a free trial ends, and occasional "come back" emails). Every reminder and update email has an unsubscribe link.
• To send push reminders, if you turn them on.
• To see how people use Deduce, so we can fix puzzles and screens that are confusing, too hard or broken.
• To measure our own advertising on Google and Meta: which ads bring people who then play, sign up or subscribe.
• To prevent abuse and keep the leaderboards fair.

Who can see your information

• Other players. The leaderboard shows your display name (or an anonymous handle if you haven't set a name), your time and your score. Boards can be narrowed to one state, so if you picked a state you appear on that state's board. Members of a group you join see your name on that group's board.
• ComputePrep. Deduce and ComputePrep are run by the same company, and one Pro subscription works in both. When you sign in, we send your sign-in identifier and email address to ComputePrep to check whether you already have Pro there.
• Companies that run parts of the service for us. Cloudflare (hosting, our database and the assistant's AI model), Resend (sending email), Razorpay (payments), PostHog (product analytics), Sentry (error reports), the push services built into your browser or phone (from Google, Mozilla or Apple) for push reminders, and Telegram, which carries internal alerts to our team, such as a new problem report, a new institute enquiry or a short excerpt of a question asked to the assistant. They process this data to provide their service to us.
• Our own reporting copy. We keep a copy of our database on a server we operate, for internal reporting.

Analytics and advertising tools

We don't show ads inside Deduce. We do advertise Deduce on Google and Meta (Facebook and Instagram), and to measure those ads the website and the app load the following tools. Each receives the technical details your browser or phone sends with any request, such as your IP address and device information.

• Google Ads tag. Tells Google when someone who saw or clicked one of our ads visits, starts a puzzle, signs up, asks for a free PDF or buys (including the amount paid). Google may set its own cookies. Google's use is covered by the Google Privacy Policy.
• Meta Pixel. Sends Meta the pages you view and the same kinds of events (starting a puzzle, signing up, asking for a free PDF, buying or subscribing, including the amount paid). Meta may set its own cookies and may connect these events to a Facebook or Instagram account you are signed in to. Meta's use is covered by the Meta Privacy Policy.
• Google Firebase Analytics (Android app only). Records when the app is first opened and when you start or win a round, and tells us which of our Google Ads led to an install. For this it reads your device's advertising ID.
• Meta SDK (Android app only). Tells Meta when the app is installed and opened, and when you start or win a round, so we can tell which of our Meta ads led to an install. For this it reads your device's advertising ID. It never receives your name, email or puzzle answers.
• PostHog. Product analytics that shows us which screens people use and where they get stuck. If you sign in, it is linked to your internal account number (not your email address). It records sessions: how the pages looked and where you tapped, scrolled and typed. It runs through our own web address and processes this data for us.
• Cloudflare Web Analytics. Measures how quickly pages load. It does not set cookies.

Pages also load fonts from Google Fonts, and the sign-in button loads Google's sign-in script. We don't send your puzzle answers to Google or Meta. You can limit ad personalisation in Google My Ad Center and in Meta's ad preferences. On Android you can reset or delete your advertising ID in Settings → Google → Ads.

What we don't do

• We don't sell or rent your personal data.
• We don't show ads inside Deduce.
• We don't ask for your address or exam roll number.
• We never see or store your card or UPI credentials.

The in-app assistant (Asha and Saarathi)

Deduce has a chat assistant. Asha answers questions about the app and the plans, and Saarathi (part of Pro) coaches you on the puzzle you are playing. Using it is optional; nothing in the game requires it.

• What is stored. Your message, the assistant's reply, the puzzle in context (its type, its difficulty, and whether the round had finished), your account or anonymous session identifier, and the time. Saarathi also keeps a note of the kinds of mistakes you make, so it can coach you on them later.
• Where it is processed. Your message, together with your display name so the assistant can address you, is sent to Cloudflare Workers AI, which runs an open Llama 3.2 model on Cloudflare's own network. It is not sent to any other AI provider, and under Cloudflare's terms these inputs are not used to train the model.
• Why we keep it. The assistant is an AI and it can be wrong. We read these conversations to find wrong or unhelpful answers and fix them. They are never sold and never used for advertising.
• What not to type. Please don't put personal details (phone number, address, exam roll number, payment information) into the chat. The assistant never needs them, and a chat you send is stored.

Payments

The daily puzzle is free and needs no payment. If you buy Pro or an eBook, the payment is processed by Razorpay under its own privacy policy. We pass Razorpay your email address so the checkout is filled in for you. Your card or UPI credentials go to Razorpay, never to us. We keep your subscription or purchase status, the transaction identifiers and the email address on the receipt, so we can grant what you paid for, send your receipt and download link, handle refunds and meet tax rules.

Cookies and browser storage

• Ours. A first-party session cookie that identifies your play session. Without it we cannot show you the puzzle you started or keep a streak. We also keep, in your browser's storage, a random visitor ID and a per-visit ID for our own analytics, the page or campaign that first brought you here, your exam and display settings, and, for a few minutes while you sign in, the email address you typed.
• Third parties. The Google Ads tag, the Meta Pixel and PostHog set their own cookies or storage entries, as described above.

Clearing your browser's cookies and site data removes all of these. You can carry on playing with a fresh anonymous session.

Google & YouTube API Services

Deduce uses Google API services in two limited ways:

• Google sign-in (optional, described above), used only to save your streak to a durable account.
• YouTube uploads (our own channel). Deduce's internal publishing tool uses YouTube API Services to upload our videos to our own YouTube channel (@deducepuzzles). It acts only for the account that explicitly authorizes it (scope: manage your YouTube videos) and touches no other user's YouTube or Google data.

Deduce's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Use of YouTube API Services is also governed by the YouTube Terms of Service and the Google Privacy Policy. You can revoke Deduce's access to your Google account at any time via your Google security settings.

Children

Deduce is intended for competitive-exam aspirants and is not directed at children under 13. We do not knowingly collect personal data from children under 13.

How long we keep data

• Page visits. Deleted from our main database after 90 days, and from our internal reporting copy within 13 months.
• Sign-in codes. Deleted as soon as they are used.
• Conversations with the assistant. Your messages, the assistant's replies and Saarathi's notes on your mistakes are deleted after 12 months.
• Our log of emails we sent. The address, which email it was and whether it was delivered are deleted after 12 months. We keep a note of which one-time emails an account has already had, so we never send one twice.
• Free-PDF and institute enquiries. An email address or phone number you gave us is deleted after 2 years, unless it is linked to a Deduce account.
• Problem reports and feedback. Problem reports are deleted after 2 years. The text of your feedback is deleted after 2 years; the record that you gave feedback stays, because it earns the Founding Tester badge.
• Testimonials. Kept until you ask us to remove them.
• Inactive accounts. If you do not use your account for 3 years, we will email you and then delete it.
• Payments. Payment and invoice records are kept for 8 years, as tax law requires.
• Backups. Our database provider keeps point-in-time backups for 30 days, so deleted data is gone from backups within 30 days.

Your puzzle results and other account records stay while your account exists. You can have any of your data removed sooner, as described below.

Deleting your account and data

If you have signed in, you can delete your account yourself on the website or in the app: open My Account, scroll to Danger Zone, choose Delete account and type DELETE to confirm. This:

• removes your name, email address, phone number, profile photo link and the link to your Google or email sign-in;
• deletes your visit history and signs you out on every device;
• deletes your conversations with the assistant and Saarathi's notes on your mistakes;
• removes you from your groups, and deletes the problem reports, feedback and testimonials you sent;
• deletes free-PDF and institute enquiries made from your account or with its email address, and removes that address from our log of emails we sent;
• turns off push reminders and ends access to any download links;
• cancels a Pro subscription so it does not renew, and ends Pro on this account.

Your past puzzle results stay in our records with nothing that identifies you, so leaderboards and puzzle statistics remain accurate. We keep a one-way hash of the sign-in identity so the same account cannot claim a second free trial; it cannot be turned back into your email address. A group you started stays for its other members, without your name.

Account deletion does not remove: payment and invoice records, which tax law requires us to keep for 8 years; our note of which one-time emails the account already had, which holds no email address; or an enquiry you made with a phone number or a different email address. Data already sent to the analytics and advertising tools above stays under those services' own retention rules. Email hello@deducepuzzles.com and we will delete what we can. The same address works if you cannot sign in, or if you played without an account and want your anonymous session's data removed.

Contact

Questions or data requests: hello@deducepuzzles.com, or see our contact page. Deduce is operated by Launchship IT & Media Services Private Limited, Hyderabad, India.