Privacy
Last updated 5 September 2026
This page explains what PRABAL collects about you, why, where it is kept, and how to get rid of it. It is written to be read rather than to be legally impressive.
The short version
- You can take the whole screen and see your full result without giving us anything at all.
- We ask for your email only if you want to save the scorecard, share it, or retest against it later.
- Your data is stored in India, on servers in Mumbai.
- We do not sell your data, and we never will.
- You can ask us to delete everything, and we will.
Who we are
PRABAL is run by Jay M.. For the purposes of India’s Digital Personal Data Protection Act, 2023, we are the data fiduciary for the information described here.
What we collect, and why
If you only take the screen
Nothing leaves your device. Your answers are held in your browser’s session storage so that a locked phone does not lose your progress, and your scorecard is calculated and shown to you. If you close the tab without saving, it is gone and we never saw it.
If you save a scorecard
We store, and need, the following:
- Your email address — to give you a sign-in link and to attach the scorecard to you.
- Your age and sex — every threshold in the screen is set by age band and sex. Without these the score has no meaning.
- Your results — the raw numbers you entered, and the scorecard calculated from them.
- The date — so a retest can be compared against the right earlier screen.
We rely on your consent, given when you enter your email and press save. You can withdraw it at any time by asking us to delete your data.
Saving a scorecard also subscribes you to occasional emails about training and the research behind it. Every one has an unsubscribe link, and unsubscribing does not affect your scorecards. Only your email address is ever sent to our email provider — never your results.
Shared scorecard links — read this one
Each saved scorecard gets its own web address, and anyone who has that address can view it. That is deliberate: it is what lets you send your result to a friend or into a family group.
The address contains a long random identifier, so it cannot be guessed or discovered by trying other addresses, and these pages are excluded from search engines. But a link is a link. If you send it to someone, they can send it on. A shared scorecard shows your age band, your sex and your results — it does not show your email address or your name.
Who else touches it
Three services, and this is the complete list of what each one gets.
| Service | What for | What it receives | Where |
|---|---|---|---|
| Supabase | Database and sign-in | Your email address, age, sex, screening results and scorecards. | Mumbai, India (ap-south-1) |
| Kit | Email newsletter | Your email address only. No screening results are ever sent. | United States |
| Vercel | Website hosting | Standard server request data such as IP address and browser type, as any web host receives. | Global edge network |
We do not run advertising trackers, and there are no third-party analytics on this site at present. If that changes, this page will be updated before the change goes live, not after.
Cookies
We set cookies for one purpose: keeping you signed in after you click a sign-in link. There are no advertising or tracking cookies, which is why this site has no cookie banner — there is nothing to ask you to consent to.
Your screening answers, while you are part-way through, are kept in your browser’s session storage. That is on your device, not ours, and it clears when you close the tab.
How long we keep it
- Scorecards — until you ask us to delete them. The whole point is comparing a screen today against one two years from now, so we do not expire them on a timer.
- An unclaimed email address — if you save a scorecard but never sign in, we hold your email so you can claim it later. Once you sign in, that copy is deleted automatically.
- Newsletter — until you unsubscribe.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask us to:
- tell you what we hold about you and who we have shared it with;
- correct anything inaccurate, or complete anything missing;
- delete your data, unless we are legally required to keep it;
- nominate someone to exercise these rights on your behalf if you die or become incapacitated;
- raise a grievance about how we have handled any of the above.
Write to prabal.support@gmail.com and we will respond. You do not have to give a reason for a deletion request.
Grievance officer
If you are unhappy with how we have handled your data, the named contact is Jay M., at prabal.support@gmail.com. If we do not resolve it, you can escalate to the Data Protection Board of India.
Under 18s
The screen is built and scored for adults of 18 and over, and we do not knowingly collect data from anyone younger. If you believe a child has given us their information, tell us and we will delete it.
One thing about the data itself
Your screening results describe what your body can currently do. They are not a medical record, they are not a diagnosis, and we do not share them with insurers, employers, or anyone else. We treat them as sensitive because they feel sensitive, whatever their legal classification.
For what the screen does and does not tell you, the methodology page is more useful than anything here.
Changes to this policy
If we change what we collect or who we share it with, we will update this page and change the date at the top. Material changes will be sent to anyone on the email list.
This policy is written in plain English rather than legal language, and it has not been reviewed by a lawyer. It is governed by the laws of India.