Privacy Policy

Mission 0500 ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services (collectively, the "Platform").

By accessing or using Mission 0500, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored in encrypted form)

1.2 Usage Data

As you use the Platform, we collect data related to your activity, including:

• Daily routines and task completions
• Goals and goal progress logs
• Daily reports (mood, energy, discipline ratings, notes)
• XP (experience points), rank, and streak data
• Theme and settings preferences
• Timezone (detected automatically for scheduling)

1.3 Payment Information

If you subscribe to our premium plan (Elite Protocol), payments are processed through Razorpay, a third-party payment gateway. We do not store your credit card numbers, debit card numbers, or banking details on our servers. Razorpay handles all payment data in compliance with PCI-DSS standards. We only store your subscription status, plan tier, and payment reference identifiers.

1.4 Automatically Collected Information

• Browser type and version
• Device type
• IP address (for security and analytics)
• Pages visited and interactions within the Platform

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform
• Track your routines, tasks, goals, and progress
• Calculate XP, ranks, streaks, and medals
• Generate performance reports and analytics
• Process subscription payments via Razorpay
• Send service-related notifications and updates
• Improve and personalise the user experience
• Monitor for errors and technical issues (via Sentry)
• Ensure security and prevent fraud

3. Cookies and Tracking

We use the following cookies and similar technologies:

• Authentication cookies — to keep you logged in securely across sessions
• Preference cookies — to remember your theme and settings
• Role cookie — to route admin users appropriately

We do not use third-party advertising or marketing cookies. We use Sentry for error monitoring in production, which may collect anonymised diagnostic data.

4. Third-Party Services

We use the following third-party services:

5. Data Protection

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted passwords (never stored in plain text)
• Secure authentication with JWT tokens and HTTP-only cookies
• Server-side input sanitisation to prevent injection attacks
• Auth guards on all server actions to prevent unauthorised access
• HTTPS encryption for all data in transit
• Row-level data isolation — users can only access their own data

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you wish to delete your account and associated data, please contact us at mission0500commandcentre@gmail.com.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Withdraw consent for data processing (which may limit Platform functionality)
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at mission0500commandcentre@gmail.com.

8. Children's Privacy

Mission 0500 is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Platform after changes constitutes acceptance of the updated policy.