zPrivacy Policy
Last updated: 4 October 2026
This Privacy Policy explains how Darfun Labs ("we", "our" or "us") handles personal data when you visit the RefleXn website or use LeXz, the self-serve online challenge available on the website (together, the "Online Service").
This policy is focused on the website and Online Service. RefleXn facilitated events are arranged separately. Where an event involves additional personal data processing, including event photography or video recording, the relevant arrangements and notices will be provided separately as part of the event booking or participation process.
Darfun Labs is responsible for personal data processed by us in connection with the Online Service, in the capacity applicable under Indian data protection law.
-
Scope
This policy applies to visitors to the RefleXn website, users of LeXz, people who submit enquiries or contact us, and customers who interact with us about the Online Service. It does not replace any separate privacy notice or event-specific arrangement provided for a facilitated RefleXn event.
-
Camera Access and Local Processing
Camera-based LeXz features require access to your device camera so the software can detect movement and interaction.
Local processing. Camera input and movement tracking are processed locally in your web browser or application on your device.
No video upload. We do not record or upload your camera feed, face images or biometric templates to our servers. Camera input is used locally to operate the relevant interaction features. Separately collected gameplay results, such as completion times or selected modes, may be processed as described in this policy.
Permission. Your browser or application will ask for camera access. If you refuse permission, features that require the camera will not work. You can manage camera permission through your browser or device settings.
-
Information We Collect
Depending on how you use the Online Service, we may collect the following information:
- Contact and enquiry information: name, email address, phone or WhatsApp number, company or organisation, team size and the content of an enquiry that you submit.
- Leaderboard information: display name, completion time, selected mode and other details you choose to submit when participating in a leaderboard feature.
- Gameplay information: challenge completion times, selected modes, results and similar information needed to operate gameplay, leaderboards or fair-play controls.
- Technical information: limited device and browser information, IP address and basic usage or error logs that may be generated when you use the website or Online Service.
- Communications: contact details and the content of messages you send to us by email, form, phone or messaging service.
Some information is provided by you, while limited technical information may be collected automatically when you use the Online Service. We aim to collect only information reasonably needed for the purposes described in this policy.
-
How We Use Information
We may use personal data to:
- provide, operate and maintain the website and LeXz;
- enable camera-based movement interaction through local processing;
- record and display leaderboard results when you choose to use that feature;
- respond to enquiries and communicate with you about requests or purchases;
- process payments and maintain relevant transaction records, where applicable;
- maintain security, prevent misuse, investigate technical errors and troubleshoot issues;
- understand and improve the reliability and operation of the Online Service; and
- meet legal, regulatory and recordkeeping requirements.
We do not sell personal data. We will not use your contact details for unrelated promotional communications unless we have an appropriate legal basis and provide any choice or consent required by applicable law.
-
Consent and Other Permitted Grounds
We process personal data where we have a lawful basis to do so, such as your consent, steps taken at your request before entering into a contract, performance of a contract, or another ground permitted under applicable law.
Where processing is based on consent, you may withdraw that consent using the method described in this policy or by contacting us. Withdrawal does not affect processing that took place before withdrawal, and we may continue to retain or process information where permitted or required by law.
Where a feature, such as a leaderboard, is optional, you may choose not to provide the information requested for that feature. This may mean that you cannot use that particular feature, but it will not prevent access to unrelated parts of the Online Service.
-
Children's Privacy
LeXz is designed primarily for adults and general entertainment or engagement use. A person under 18 should use LeXz only with the involvement, permission and supervision of a parent, legal guardian or other adult authorised to supervise them.
We do not intend to collect personal data directly from children without the consent or other lawful authorisation required under applicable law. Adults should not submit a child's name, email address, phone number or other personal data through an enquiry or leaderboard form unless they are authorised to do so and any legally required consent has been obtained.
If we become aware that a child's personal data has been collected in a way that does not comply with applicable law, we will take appropriate steps to address it, which may include deleting the information where appropriate. A parent or guardian may contact us using the details below.
-
Leaderboards and Public Display
If you choose to participate in a LeXz leaderboard, the information shown for that feature, which may include a display name and completion result, may be visible to other users or visitors of the relevant leaderboard. Do not use a display name that contains information you do not want others to see.
You may contact us to request correction or removal of a leaderboard entry. We may retain limited records where necessary for security, dispute handling or legal compliance, subject to applicable law.
-
Sharing of Information
We may share personal data with service providers that support the operation of the Online Service, such as website hosting, database, form, email, payment, security and technology providers. They may process information on our behalf and as needed to provide their services.
We may also disclose information where required by law, to respond to valid legal processes, to protect the rights and security of users or the Service, or in connection with a business restructuring or transfer, subject to applicable law.
For a facilitated RefleXn event, information may be shared with the relevant client or organiser where described in the event-specific notice or booking arrangements. Event photography, video recording and any use or publication of such material will be addressed separately for that event.
-
Cookies and Similar Technologies
The website or Online Service may use essential browser technologies, such as cookies or local storage, to support functionality, remember settings, maintain security or operate features. If analytics or other non-essential tracking technologies are used, we will provide any notice, choice or consent mechanism required by applicable law.
You can manage or block cookies through your browser settings. Blocking certain technologies may affect the operation of some website features.
-
Retention and Deletion
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including operating the Online Service, maintaining leaderboard or transaction records, responding to enquiries, resolving disputes, protecting security or meeting legal requirements.
Retention periods may vary by data type and purpose. When information is no longer needed, we will take reasonable steps to delete it or anonymise it, subject to applicable law and legitimate backup or recordkeeping requirements.
You may request deletion of your personal data, subject to any information we are permitted or required to retain under applicable law.
-
International Processing
Our service providers may process or store personal data in India or other countries, depending on the services they provide. Where personal data is transferred or processed outside India, we will take steps required by applicable law and apply appropriate contractual or other safeguards where required.
-
Security and Data Breaches
We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No online service or method of transmission can be guaranteed to be completely secure.
We maintain processes to assess and respond to suspected personal data breaches. Where applicable law requires notification to affected individuals or authorities, we will provide the required notification in the manner and within the time required by law.
You are responsible for maintaining the security of your own device, accounts and network.
-
Your Privacy Rights and Requests
Subject to applicable law, you may have rights to request access to information about your personal data, correction or updating, erasure, withdrawal of consent, and grievance redressal.
To make a request, contact us at reflexn@darfun.in with a description of your request and enough information for us to identify the relevant data and verify your identity where reasonably necessary. We may ask for additional information to protect against unauthorised requests.
We will handle requests and complaints within the time limits prescribed by applicable law. You may also have the right to raise a complaint with the relevant authority under applicable law.
-
Changes to This Policy
We may update this Privacy Policy to reflect changes to the Online Service, our data practices or applicable law. The updated policy will be published on this page and the "Last updated" date will be revised. Where required, we will provide additional notice or seek consent for material changes.
-
Contact and Privacy Grievances
For privacy questions, rights requests or grievances relating to the Online Service, contact:
Darfun Labs
Bengaluru, Karnataka, India
Email: reflexn@darfun.in