Mutable

    Privacy notice

    Last updated 23 October 2026

    Mutable is a game for founders and teams: Founder's Road takes your idea from first spark to proof, with Rigel, an AI guide. This notice explains what we collect, why, who helps us run the service, and the choices you have. It is written for India's Digital Personal Data Protection Act, 2023.

    What we collect

    • Account: your name, email address, optional company, college or community, and a password if you sign up with email (we store only a secure hash of it).
    • Google sign-in: if you choose Continue with Google, Google shares your name, email address and profile picture with us. We ask for nothing else from your Google account.
    • What you create in the game: your team, your road progress, answers, notes, hand-ins, messages to Rigel and teammates, and any voice recordings you choose to make.
    • Technical data: sign-in sessions, device notification tokens if you turn on notifications, and basic server logs (time, IP address, browser) kept for security.

    How we use it

    • To create your account, sign you in and keep it secure.
    • To run the game: save your road, share it with your team, and let Rigel answer from what you and your team have written.
    • To send emails you need, such as confirming your address or resetting your password, and notifications you turned on.

    We do not sell your data, we do not show ads, and we do not use your data to build advertising profiles.

    Google user data

    Data we receive from Google sign-in (name, email address and profile picture) is used only to create and sign in to your Mutable account and to show your name and picture to your team. It is never sold, never used for advertising, and never shared with anyone except the service providers below who host the service for us. Mutable's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

    Who helps us run Mutable

    • Supabase: database, sign-in and file storage.
    • Vercel: hosts the website and app.
    • Brevo: sends account emails.
    • AI providers (Google Gemini, with Groq and OpenRouter as backups): when you talk to Rigel, the message and the relevant parts of your team's road are sent to generate a reply. We do not send your email address or password.
    • Cloudflare: relays team voice calls when a direct connection is not possible.

    These providers may store data outside India. They process it only to provide their service to us.

    How long we keep it

    We keep your account and game data while your account is open. When you ask us to delete your account, we delete your personal data within 30 days, except where the law requires us to keep something longer. Security logs are kept for up to 90 days.

    Your rights and choices

    • Ask for a summary of the personal data we hold about you.
    • Correct or update it.
    • Delete your account and data.
    • Withdraw consent, for example by turning off notifications or signing out of Google sign-in from your Google account settings.
    • Nominate someone to exercise these rights for you.

    To use any of these rights, or to raise a complaint, email mutable.game@gmail.com. We reply within 7 days. If you are not satisfied, you can complain to the Data Protection Board of India.

    Children

    Mutable is for people aged 18 and over. If you are under 18, please use Mutable only with a parent or guardian's consent.

    Changes and contact

    If we change this notice in a way that matters, we will tell you in the app or by email before it applies. Questions: mutable.game@gmail.com.