Mestorio Privacy Policy

Effective date: 1 October 2026

This policy explains how the Mestorio app and website (“Mestorio”, “we”, “us”) handle personal data. Mestorio is operated by Rohit Borude, India, the developer named on our Google Play listing. Contact us at [email protected].

Data we collect

• Account details: name, username, email address, password (stored only as a secure hash), and optional phone number, date of birth, bio, country, state, city and profile picture.
• Location: your device location when you allow it, to show nearby quests and verify location-based quests. Location can be attached to quest proof you submit.
• Photos, videos and audio: media you capture or choose to upload as quest proof, feed posts or a profile picture. Video recordings can include audio.
• Health and fitness data: only if you connect Health Connect (Android) or Apple Health (iOS). We read steps, distance and active calories. We store a health snapshot only when you choose to submit it as proof for a crew task. We never write health data.
• Social content: posts, comments, replies, reactions, follows, blocks, reports, crew membership and trail notes.
• Quest and progress activity: quests you join or submit, review results, levels, achievements, collectibles, vouchers and notifications.
• Payment and reward records: rewards, withdrawals, refunds and payments, including the payout details you provide (such as UPI ID or bank account details) and payment reference numbers. Card and payment credentials are handled by our payment provider; we do not receive full card numbers.
• Support messages you send us.
• Technical data: IP address, device and app information and server logs used for security, fraud prevention and troubleshooting.

How we use data

• To create and secure your account, including email verification and password resets.
• To show nearby quests, review quest proof, and award progress, vouchers and rewards.
• To run social features and apply your privacy choices.
• To process payments and payouts, prevent fraud and meet legal, tax and accounting duties.
• To respond to support requests, moderate content and enforce our terms.

We do not sell personal data and we do not use it for third-party advertising. Health data is used only to show your activity and to verify crew tasks you choose to submit.

Who can see your data

Posts, comments, your profile and progress can be visible to other users according to your privacy settings. Quest sponsors and our reviewers can see proof submitted for their quests. You can block and report users and content.

Service providers

We share data only as needed with providers that operate Mestorio for us: cloud hosting, database and file storage; email delivery (for verification and password reset emails); payment processing (Razorpay); map display (Google Maps); and push notification delivery. We may also disclose data when required by law or to protect users and the service.

Security

Data is sent over encrypted HTTPS connections. Passwords are hashed and access to administrative tools is restricted. No system is perfectly secure, so please use a strong, unique password.

Retention and deletion

We keep your data while your account is active. When you delete your account we delete your profile, posts, comments, reactions, follows, quest submissions and proof media, crew contributions and health snapshots, vouchers, notifications, achievements and support messages.

We keep payment, reward and withdrawal transaction records after deletion, without your profile, for as long as payment, tax and accounting laws require. Server logs are kept for a limited period for security. See how to delete your account.

Your choices and rights

• Update your profile and privacy settings in the app.
• Turn off location, camera, microphone or health permissions in your device settings at any time. Some quests need them to be verified.
• Delete your account in the app or by request to us.
• Ask us for access to or correction of your data, or raise a grievance, by emailing [email protected]. We aim to respond within 30 days.

Children

Mestorio is intended for people aged 18 or over. We do not knowingly collect data from children. Contact us if you believe a child has used Mestorio and we will delete their data.

Changes

We will update this page and its effective date when this policy changes, and tell you in the app about significant changes.