Privacy Policy

KandyTalk  |  Last updated: April 2025

1. Introduction

KandyTalk ("we", "our", or "us") operates a social networking and e-commerce platform available as a web app and mobile application. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

• Account data: Name, email address, phone number, profile photo, and user ID
• Messages: In-app chat messages, voice messages, media, and shared files
• Content: Photos, videos, stories, and reels you upload
• Contacts: Phone contacts (optional) used to suggest friends
• Location: Approximate location (used for geo-commerce rules, not stored)
• Payment info: Payment details processed via Razorpay and PayPal (not stored on our servers)
• Purchase history: Order records for your transactions
• Device IDs: For push notifications
• App activity: Interactions, search history, and user-generated content
• Crash logs: For diagnosing technical issues

3. How We Use Your Data

• To provide and operate KandyTalk's features (messaging, commerce, discovery)
• To authenticate your identity via OTP (email or phone)
• To process orders and payments through Razorpay (India) and PayPal (international)
• To send push notifications and service communications
• To personalise your content feed and friend suggestions
• To detect and prevent fraud and policy violations
• To improve app performance and fix bugs

4. Data Sharing

We do not sell your personal data. We share data only with:

• Razorpay / PayPal – for payment processing
• Resend / Fast2SMS / Twilio – for OTP delivery
• Google Cloud – for file storage and infrastructure
• Legal authorities – when required by applicable law

5. Data Retention

Your data is retained while your account is active. Transaction records are kept for up to 7 years as required by law. All other data is permanently deleted within 30 days of an account deletion request.

6. Your Rights

• Access, correct, or export your personal data via app Settings
• Delete your account and all associated data (see Data Deletion)
• Opt out of non-essential notifications
• Withdraw contact access permission at any time from device Settings

7. Security

We use HTTPS encryption, OTP-based authentication, and role-based access controls to protect your data. End-to-end encryption indicators are shown in private chats.

8. Children

KandyTalk is intended for users aged 13 and above. We do not knowingly collect data from children under 13.

9. Changes to this Policy

We may update this Privacy Policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy questions or data requests, contact us at:
privacy@kandytalk.com