Privacy Policy

1. Who We Are and Scope of This Policy

This Privacy Policy explains how ApnaChat ("ApnaChat", "we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you use:

• The ApnaChat: Talk & Connect caller mobile application on Google Play (and our upcoming listener mobile application); and
• Our websites at apnachat.in and app.apnachat.in (together, the "Service").

ApnaChat is a friendly voice-call and chat service in India where a caller (aged 18 or older) talks to a verified listener for company and conversation. This policy is written in accordance with India’s Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and its rules, and Google Play’s User Data policies.

2. Personal Data We Collect, Why We Collect It, and How Long We Keep It

We collect only the personal data needed to create your account, connect voice calls and chats, process payments and payouts, and keep the community safe. Below is the complete list grouped by purpose:

3. Data We Do Not Collect

To protect your privacy, ApnaChat is designed so that we never collect:

• Your precise or approximate GPS location;
• Your phonebook or contacts list;
• The content of your personal SMS messages or your phone’s call log;
• Camera video or photos (unless you specifically pick a photo to upload for your profile picture or a support ticket);
• Recordings of your voice calls (live voice calls are never recorded or stored); or
• Your credit/debit card numbers or UPI PIN (all payments are handled directly by Razorpay).

4. Permissions the Mobile App Asks For and Why

The ApnaChat mobile app asks only for the device permissions necessary for voice calling, messaging, and profile setup:

• Microphone: Used only during an active live voice call so you and the listener can hear each other. The microphone is never active in the background when you are not on a call.
• Notifications: Used to alert you about incoming calls, unread chat messages, and account updates or offers.
• Full-Screen Incoming-Call Alerts: Used so an incoming ApnaChat voice call can ring and appear over your phone’s lock screen, just like a regular phone call.
• Foreground Service: Used to keep your live voice call connected and running smoothly if you switch screens or lock your phone during a call.
• Bluetooth: Used so you can talk and listen through your wireless earphones, headphones, or Bluetooth headset during a call.
• Photos / Media Picker: Used only when you choose to upload a profile picture or attach a screenshot to a support ticket. We cannot browse your gallery without your selection.
• Vibration: Used to vibrate your phone when an incoming call or notification arrives.

5. Who We Share Your Data With

We do not sell or rent your personal data to anyone. We share limited data only with trusted service providers ("Data Processors") who help us run ApnaChat under strict confidentiality and security obligations:

• Supabase: Provides our cloud database, user sign-in authentication, file storage, and backend servers.
• LiveKit: Routes live, real-time voice audio between callers and listeners without exposing either person’s phone number.
• Razorpay: Processes caller balance recharges (UPI, cards, netbanking) and payment verification.
• Google Firebase Cloud Messaging (FCM): Delivers push notifications to your mobile device.
• SMS Gateway Provider: Delivers one-time sign-in verification codes (OTPs) to your mobile number.
• Meta (Facebook) Pixel (Website Only): Used only on our public website and web sign-up pages for advertising measurement. The mobile app does not use Meta Pixel or any advertising SDK.

Legal and Safety Disclosures: We may disclose necessary information to Indian courts, law enforcement agencies, or government authorities when required by Indian law, or when necessary in good faith to protect a person’s life, physical safety, or prevent illegal activity.

6. Where Your Data Is Stored and International Transfers

Our primary database and application servers are hosted in Mumbai, India. Some of our service providers listed above (such as Supabase, LiveKit, Google Firebase, and Meta for web pages) may process or route technical data on servers located outside India. Whenever personal data is processed outside India, we ensure it is protected by industry-standard encryption and complies with the cross-border transfer rules under the Digital Personal Data Protection Act, 2023.

7. How We Protect Your Data (Security)

We take reasonable technical and organizational safeguards to protect your personal data against unauthorized access, loss, or misuse:

• Encryption in Transit: All traffic between the ApnaChat app/website and our servers—including voice calls, chat messages, and payment requests—is encrypted using TLS/HTTPS and encrypted WebRTC audio streams.
• Hashed Identifiers: Device identifiers (Android ID / iOS vendor ID / install ID), network addresses, and payment-instrument fingerprints are stored as cryptographic hashes rather than plain text.
• Strict Access Controls: Only authorized team members who need access to review safety reports, handle support tickets, or process listener payouts can access relevant records.

8. Account Deletion and Data Retention

You can delete your ApnaChat account at any time in two ways:

1. Inside the Mobile App: Go to Account → Delete account.
2. On the Web (without needing the app): Visit https://app.apnachat.in/deleteaccount.

How deletion works:

• For Callers: Your account and personal data (name, photo, mobile number, email, text of chat messages, support ticket text, device and push tokens, referral and streak data, and sign-in record) are deleted immediately.
• For Listeners: Deletion requests are completed by our team after settling any pending payouts, and always within 30 days of your request.
• De-identified Legal & Tax Records: We keep records that tax and accounting laws require (call and billing records, orders and payment records, the balance ledger, chat charges without message text, and reports made about chats) in a form that no longer identifies you. They are kept for 8 years from the date of the transaction, and then removed. If a law, an appeal or a dispute requires, we keep them longer.

9. Your Rights Under Indian Law (DPDP Act, 2023)

As a user ("Data Principal") under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Ask for a summary of the personal data we hold about you and how we have shared it with our service providers.
• Right to Correction and Updating: Correct or update your profile details in the app or by emailing us.
• Right to Erasure (Account Deletion) & Withdrawal of Consent: Delete your account and personal data at any time in the app or at https://app.apnachat.in/deleteaccount.
• Right to Nominate: Nominate another individual who can exercise your data rights on your behalf in the event of death or incapacity.
• Right to Grievance Redressal: Contact our Grievance Officer if you have any complaint about how your data is handled.

To use any of these rights (including nomination or data access), email us at support@apnachat.in from your registered email address or with your registered mobile number.

10. Children’s Privacy (Strictly 18+)

ApnaChat is strictly for adults aged 18 years and older. Persons under 18 are not permitted to create an account or use the Service. We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we will immediately terminate the account and delete all associated personal data. If you believe a minor has signed up on ApnaChat, please report it immediately to support@apnachat.in.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our app features or legal requirements. When we make important changes, we will update the "Last updated" date at the top of this page and notify you through the app or website.