Rash on the road, careful with your data.

The short version

• You don't need to sign up. The game creates an anonymous guest account for you, with no email or password.
• Adding an email address is optional and is used only to send you sign-in codes and account messages, never marketing.
• In-app purchases are optional and paid through the App Store or Google Play, so we never see your card, UPI or bank details.
• The game does not access your contacts, precise location, camera, microphone or photo library.
• Crash reports and usage statistics help us fix and improve the game. Since version 2.1.2 the game has no ads and no ad SDK.
• We do not sell your personal data.
• You can delete your account at any time in Settings > Account > Delete account.

Who we are

Eriksha Rash (app ID com.tathyalabs.eriksharash) is published by TathyaLabs ("we", "us"). This policy covers the Eriksha Rash app for iPhone and Android and these web pages. You can reach us at hello@tathyalabs.com.

Your guest account and game progress

The first time you open the game, it creates an anonymous guest account with our database provider, Supabase. The account is a random user ID; there is no email address or password. We store the following with that account:

• the driver name you type;
• your game progress: sikke (in-game coins), XP, rank, rickshaws, upgrades, paint jobs and weapons;
• game statistics such as races, wins, passengers and takedowns;
• your daily-bonus streak and the items you bought in the shop;
• your platform (iOS or Android) and the app version.

We use this to run the game: to save your progress, apply the daily bonus and purchases fairly, and keep the game working across updates. Your progress and settings are also saved on your phone.

Your driver name is shown in the game and may be shown to other players in features such as leaderboards or, once it launches, multiplayer. Please don't use your full real name or other personal details as your driver name.

Supabase processes this information only as our service provider. It may be stored and processed outside the country where you live.

Optional: saving progress with your email

If you want to keep your progress when you change phones, you can add an email address in Settings. We then email you a one-time sign-in code, which you enter in the game to link the email to your account, or to restore your progress on another device.

Your email address is used only to send sign-in codes and messages about your account. It is never used for marketing and never shared for advertising. If you don't add an email, your account stays anonymous.

Crash reports

When the game crashes or hits an error, it sends a crash report to Firebase Crashlytics, a Google service, so we can find and fix the problem. A crash report contains:

• the error message and stack trace (where in the game's code it happened);
• your device model, operating-system version and app version;
• technical state such as free memory, free disk space and screen orientation;
• a random installation ID created by Crashlytics, and your random game user ID;
• the screen or race you were in when it happened.

Crash reports do not include your email address. They are kept for 90 days and then deleted.

Usage statistics

To understand which parts of the game are played and where players get stuck, the game uses Google Analytics for Firebase. It receives:

• the screens you view;
• game events, such as starting and finishing a race, buying items with sikke, upgrades, purchases and shares;
• when the app is opened and for how long, and your first open;
• app version, device model, operating-system version and language;
• an approximate region worked out from your IP address;
• a random app-instance ID created by Google Analytics.

Advertising-ID collection by Google Analytics is switched off. Usage statistics are not linked to your email address. They are kept for up to 14 months and then deleted. You can read more in Google's Firebase privacy information.

In-app purchases

Purchases are optional. When you buy something, Apple or Google takes the payment; we never receive your card, UPI or bank details. The game gets back what was bought and a transaction ID from Apple or Google, and saves them with your game progress so the item stays yours, can be restored and is never credited twice. Usage statistics record that a purchase was started and whether it went through, which helps us fix problems.

Ads

Since version 2.1.2 (October 2026) Eriksha Rash shows no ads and contains no ad SDK, does not use your device's advertising identifier and does not ask for tracking permission.

Earlier versions showed ads from Google AdMob. If you still have one of them installed, then, to serve ads, measure them and prevent fraud, Google may collect:

• your device's advertising identifier. On iPhone, this happens only if you allow tracking when Apple's App Tracking Transparency prompt asks. On Android, this is your Advertising ID, which you can reset or delete in your phone's settings;
• your IP address, which can be used to estimate your general location;
• information about your device and the app;
• your interactions with ads, such as views and taps.

Where permitted, ads may be personalised. In the European Economic Area, the United Kingdom and Switzerland those versions showed Google's consent form before any ads loaded. On iPhone you can also change the tracking permission in the iOS Settings app under Privacy & Security > Tracking.

Google's use of this information is described in How Google uses information from sites or apps that use our services.

Sharing results and invites

You can share a result card, a screenshot or an invite link through your phone's share sheet, for example to WhatsApp or Instagram. Result cards are created on your phone and go only where you send them; TathyaLabs does not receive a copy. The invite link points to this website and does not contain your name or any personal information.

If you choose "Save image" in the share sheet, the picture is added to your photos. The game never reads your photo library.

Notifications

If you allow notifications, the game shows reminders it schedules on your phone (today's prize, the Daily Challenge, your streak). On Android it also stores a push token (a random address for your phone from Google's Firebase Cloud Messaging) with your cloud save, so our game server can tell you when a friend finishes your challenge or passes you on the Daily Challenge board. The token identifies only the app on your phone. Turn notifications off in the game's Settings or your phone's settings at any time; deleting your account deletes the token with your cloud save.

Our website

tathyalabs.com, including this page and the pages invite links open, uses Google Analytics to count visits: which pages are viewed, roughly where visitors are (country and city), their device and browser, how they arrived, and simple actions such as opening the game from an invite link or tapping a store button. Invite-link counts record only the kind of link (for example a challenge or a room invite), not your name or player ID. Google Analytics sets cookies to tell repeat visits apart; for visitors in the EEA, UK and Switzerland it runs without cookies. Google signals and ad personalisation are off, and the website shows no ads. You can opt out with Google's browser add-on or by blocking cookies.

What we don't collect

• No payment information: the App Store or Google Play handles payment, and we only receive what was bought (see below).
• No contacts, no precise location, no camera and no microphone.
• No access to your photo library, other than saving an image when you choose to in the share sheet.

If you turn on tilt steering, the game reads your phone's motion sensors on the device to steer. Motion data is not sent to us.

Who we share data with

We do not sell your personal data. We use these service providers to run the game:

• Supabase: database and sign-in for your guest account, progress and optional email.
• Apple and Google: the App Store and Google Play process in-app purchases and payments.
• Google: Firebase Crashlytics (crash reports), Google Analytics for Firebase (usage statistics), Firebase Cloud Messaging (notifications) and Google Analytics on our website (visit statistics). Versions before 2.1.2 also used Google AdMob (ads).

These providers may process data in the United States or other countries. We may also disclose information if the law requires it, or to protect players, the game or TathyaLabs from fraud, cheating or abuse.

How long we keep data

• Account, progress and email: until you delete your account.
• Crash reports: 90 days.
• Usage statistics: up to 14 months.
• Ad data from earlier versions: as described in Google's policies.
• Data on your phone: until you delete your account in the game or uninstall the app.

Deleting your account

In the game: open Settings > Account > Delete account and confirm. Your Supabase account and cloud progress, including any linked email address, are deleted immediately, and the game on that phone is reset.

By email: write to hello@tathyalabs.com from the email address linked to your account, or include the Player ID shown in Settings. We will delete your account and progress within 30 days.

Crash reports and usage statistics are not linked to your email address. They are deleted automatically when their retention period ends (90 days for crash reports, up to 14 months for usage statistics). More details are on the account deletion page.

Your choices and rights

You can change your driver name in Settings, choose whether to add an email, and delete your account. If you still use a version before 2.1.2, you can also decline tracking on iPhone and reset or delete your Advertising ID on Android.

Depending on where you live, you may also have the right to ask for a copy of your data, correct it, delete it, or object to or limit how it is used, and to complain to your local data-protection authority. To make a request, email hello@tathyalabs.com and include your Player ID from Settings so we can find your account.

Security

Data sent between the game and our providers is encrypted in transit, and access to our database is restricted. No system is completely secure, but we work to protect your information and keep only what the game needs.

Children

Eriksha Rash is not directed at children under 13, and we do not knowingly collect personal data from them. If we learn that we hold personal data from a child under 13, we will delete it. If you believe a child has given us personal data, please contact us.

Changes and contact

If this policy changes, the date above will change with it. Eriksha Rash is published by TathyaLabs. Questions, privacy requests and complaints can be sent to hello@tathyalabs.com.