Effective 2 September 2026
Muskan Educom Foundation runs the Museo mobile app, a QR-based game and ticketing app for parks and museums. This policy explains exactly what the app collects, why, and how you get it deleted.
Information we collect
- Account details — your name, phone number, and (if you sign in with Google) your email address and profile picture. You give these when you register.
- Activity in the app — QR codes you scan, quizzes you answer, missions and streaks, XP, badges, coins, certificates you earn, and which venues you have visited. This is what makes the game work.
- Location — with your permission, your device location is used to show nearby parks and to confirm you are at a zone when you check in. You can refuse this permission and still use the rest of the app.
- Camera — used to scan QR codes and to take photos for photo challenges. Camera frames used for scanning are processed on your device and are not uploaded.
- Photos you upload — profile pictures and photo-challenge entries. These are stored on our image host and are visible to venue staff, and to other visitors where the app clearly says so.
- Orders and tickets — what you booked or bought, quantities, prices, and the delivery address you enter for merchandise.
- Notification token — a device token from Firebase Cloud Messaging so we can send you push notifications. You can switch categories off in Settings, or turn notifications off at the OS level.
- Basic technical data — app version and error reports, so we can fix crashes.
What we do not collect
- We never see or store your card number, UPI ID, CVV, or bank credentials. Payments are handled entirely by Razorpay on their own screen; we only receive a payment reference and a success or failure result.
- We do not sell your personal information, and we do not share it with advertisers.
- We do not track you across other companies' apps or websites.
Why we use it
- To create and secure your account and keep you signed in.
- To run the game — award XP, badges, coins, streaks and certificates, and show leaderboards.
- To sell and validate tickets, and to fulfil and deliver merchandise orders.
- To send you notifications you have opted into, such as mission reminders and order updates.
- To keep the service safe — detect fraudulent scans, abuse, and duplicate reward claims.
Who we share it with
We share only what each provider needs to do its job:
- Razorpay — payment processing. Subject to Razorpay's own privacy policy.
- Google Firebase — sign-in and push notifications.
- Cloudinary — hosting the images you upload.
- MongoDB Atlas — our database.
- Vercel — our application hosting.
- The venue you are visiting — park and museum staff can see your booking, ticket, order and certificate details so they can serve you at the gate and the counter.
We also disclose information where the law requires it.
Children
Museo is used by families and by school groups. Where a visit is booked by a school or a guardian, the account is expected to be created and managed by that adult. We do not knowingly collect personal information directly from a child without that adult acting on their behalf. If you believe a child has registered independently, write to us and we will remove the account.
How long we keep it
We keep your account data while your account is active. Ticket, order and payment records are kept for as long as tax and accounting law requires, even after account deletion, and are held separately from your game profile.
Deleting your account
You can delete your account yourself, in the app: Profile > Settings > Delete Account. The screen lists exactly what gets removed before you confirm. Deletion is permanent and cannot be undone.
If you cannot access the app, email us from the address or phone number on the account and we will delete it for you within 30 days.
Your rights
You can ask us to show you the data we hold about you, correct anything wrong, or delete it. Write to the contact below and we will respond within 30 days.
Security
Data is transmitted over HTTPS, passwords are stored hashed, and access to our systems is restricted to staff who need it. No system is perfectly secure, so please keep your login details private.
Changes
If we change this policy we will update the date at the top and, for significant changes, tell you in the app.
Contact us
Email: info@muskanaerospace.com
Phone: +91 70779 00369
Address: Raipur, Chhattisgarh 492001, India