గోప్యతా విధానం

Everyone with an account:

• Account: your email address, your name, your User ID and account type. If you use Google sign-in, Google gives us your name, email and a link to your profile picture. If Viaraa support set up a password for you, it is stored only in scrambled form (we can never read it).
• Coins: the packs you buy, the amount, the UTR of each UPI payment, the payment screenshot if you upload one, the game passes you buy, and your coin balance and history.
• Calls: who you called (or who called you), when, how long, the minutes and coins charged, gifts sent and star ratings.
• Chats: the messages, photos and voice messages you send and receive, and when they were seen. Phone numbers, UPI IDs, email addresses, social media handles and links are hidden automatically before a message is saved.
• Games: your Game ID, the games you play and with whom, every move and dice roll, results, trophies, streaks and the friendly challenges you pick.
• Groups: the groups you make or join (their name and icon), who invited whom, and the group chat messages and reactions you send. Phone numbers, UPI IDs, email addresses, social media handles and links are hidden automatically before a message is saved.
• Safety: reports you send or receive (the reason and what you wrote), blocks, warnings and suspensions.
• Safety clips and screenshots: if the automatic nudity check detects nudity at any point in a call, a short video clip with sound of each person's camera (about 10 to 20 seconds, from just before that moment) and one screenshot of each camera from that moment.
• Alerts: if you turn on phone alerts, the address your browser gives us for sending them.
• Technical: IP address (we keep it only as a scrambled code to stop abuse), browser and device type, the login cookie, crash reports, and for hosts, whether they're online.
• Your approximate state: our hosting provider works it out from your IP address, and we use it only to show game names the way they're known where you are, like “Ludo (Thaayam)” in Tamil Nadu. It is not stored.
• Analytics and ads, only if you allow them on viaraa.in: the cookie IDs Google and Meta set there, and for Meta a scrambled code of your account's email and ID. See “Cookies, analytics and ads” below.

Hosts, as well:

• Date of birth, languages, the “about you” text and profile photos.
• A short live selfie video, used only to check you're a woman aged 18+ and the person in the photos.
• Your UPI ID, earnings, and payout records with their UTRs.

What we don't collect: calls are not recorded, and we don't keep their video or sound. They travel through our video provider only to connect the call. The nudity check runs on your own phone: while a call is on, your phone keeps only the last few seconds of both cameras in its memory, always replacing them, and nothing leaves your phone for the check. Only if it detects nudity are the short clips and screenshots above saved, for our safety team only. Payments happen in your own UPI app, so we never see your UPI PIN, bank account or card details. The app loads no advertising or analytics trackers. What our website and our server tell Google and Meta, and only with your consent, is explained under Cookies, analytics and ads.

• To create your account, sign you in and keep it secure.
• To connect calls, charge each minute, send gifts and keep your coin history.
• To deliver chat messages and keep each chat for the two people in it.
• To run games and groups: invites, turns, results, trophies, group chat and alerts.
• To check UPI payments and add coins, and to pay hosts every week.
• To verify that every host is a woman aged 18+.
• To keep people safe: check calls for nudity, handle reports and blocks, stop fraud and enforce our Terms.
• To send the phone alerts you turned on (incoming calls, coins added, payouts).
• To answer your questions and complaints.
• To meet legal duties, such as tax and accounting records and lawful requests from authorities.
• To find and fix errors so Viaraa works reliably.
• To see which ads and pages bring people to Viaraa, only if you allow analytics or marketing cookies on viaraa.in.

We use your data because you agree to it when you create an account, and for the other lawful uses the Digital Personal Data Protection Act, 2023 allows, such as following the law and court orders. We only collect what we need for these purposes.

• Callers see a host's display name, age (not date of birth), languages, about, approved photos and whether she's online. Never her email, date of birth, selfie or UPI ID.
• Hosts see a caller's display name and the details of calls with them.
• A chat can be read only by the two people in it. “Clear chat” removes the messages from your own view; the other person keeps their copy. If either person reports the chat, our safety team reads its recent messages, and every such opening is logged.
• Your Game ID is public, so friends can invite you: anyone who knows it can send you an invite, which you can accept or decline, and you can block anyone. It is not your login username, which stays private. The players in a game see each other's Game ID (a host is shown by her display name), the moves and the result, and your friends see your wins this week. In a game during a call, both people see each other's names as in the call.
• A group shows its members by Game ID only. Everyone in it reads the group chat from the moment they joined, and can watch the group's games. If someone reports a group, our safety team reads its recent messages, and every such opening is logged. Hosts are never in groups.
• Viaraa admins, a small team, see account and payment details so they can check payments, verify hosts, pay hosts and handle reports. Every admin action is recorded in a log that can't be edited.

We use these service providers to run Viaraa. They may only use your data to provide their service to us:

• Supabase: database, sign-in and file storage (servers in Mumbai, India).
• Vercel: hosts the website and the app's servers (servers in Mumbai, India).
• Cloudflare: carries the secure connection between your browser and our database.
• Agora: connects video calls in real time.
• Google: only if you choose “Continue with Google”.
• Google Analytics and Meta (Facebook and Instagram ads): only if you allow them on viaraa.in, as explained under “Cookies, analytics and ads”.
• Our email provider: sends your login codes.
• Your browser's alert service (Google, Apple or Mozilla): delivers the phone alerts you turned on. What they carry is encrypted.
• Telegram (and CallMeBot, for WhatsApp): deliver alerts to our own team about new sign-ups, payments to check, host applications and safety reports. These carry a display name, User ID, amount and payment reference (UTR), never email addresses, phone numbers or bank details.

The nudity check uses an open-source model that runs on your phone, so no outside company sees your video for it. Some providers also handle data outside India. We only use well-known providers that protect it, and we follow Indian rules on sending data abroad.

We share information with the police, courts or government when the law requires it, or when it's needed to protect someone's safety. We never sell your personal data.

• Host selfie videos are deleted as soon as our team has made its decision (a daily check catches any that were missed).
• Safety clips and screenshots are deleted after 30 days, or straight away if our team finds it was a false alarm. Those saved later in a call, when the call wasn't ended, are evidence and are kept for 180 days, as the IT Rules allow for investigations. Any of them is kept longer only when it's needed for a police investigation.
• Account details are kept while your account is open. When it's closed we delete or anonymise them, apart from the records below.
• Chats (including photos and voice messages) are kept while both accounts are open, so each person keeps their history and reports can be checked.
• Games, their moves and results are kept while your account is open, so results, trophies and reports can be checked.
• Group chats are kept while the group is open, so members keep their history and reports can be checked. Messages our team hides stay in our records as evidence.
• Coin, call, earnings and payout records are financial records, so we keep them as long as tax and accounting laws require (generally up to 8 years). Payment screenshots are kept with the payment they prove.
• Reports, suspensions and registration details are kept for at least 180 days after an account is closed, as the IT Rules require, and longer if needed for an investigation or legal claim.
• Crash reports are deleted after 30 days, and anti-abuse counters after a day.

Everything is sent over encrypted (HTTPS) connections. Database rules make sure each person can only read their own data. Coins and earnings can only change through checked server functions. Selfies, payment screenshots and safety clips and screenshots are kept in private storage; only admins can open them, through links that expire within minutes, and every opening of a safety clip or screenshot is logged. Right after they're saved, our server records a fingerprint (SHA-256) of each safety file, so it can be shown later that it hasn't been changed. Chat photos and voice messages are private files too: only the two people in the chat can open them (and admins, for a report), through links that expire.

No system is perfectly secure. If a data breach affects you, we'll tell you and the Data Protection Board of India as the law requires.

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we have about you and who we've shared it with;
• ask us to correct, complete or update it;
• ask us to delete it by closing your account (we keep only what the law requires);
• withdraw your consent at any time: for analytics and ads with “Cookie choices” at the bottom of viaraa.in, and for everything else by closing your account. Anything done before you withdraw stays lawful;
• nominate someone to use these rights for you if you die or can't act yourself;
• complain to us, and if you're not satisfied, to the Data Protection Board of India.

To use any of these, email uidesigner.premkumar@gmail.com from the email on your account, with your User ID (it's on your Profile). We may ask you to confirm it's you. We reply within 30 days at most.

The app uses one essential cookie to keep you signed in, and your browser's storage for small settings. It never loads advertising or analytics scripts. If you choose Google sign-in, Google may set its own cookies.

Our website, viaraa.in, asks first. Only if you accept does it load Google Analytics (to count visits) and the Meta Pixel (to measure our Facebook and Instagram ads). Each sets a cookie with a random ID.

With that same consent, our server tells Google and Meta when you create an account, send a host application or send a coin request. Google is told only if you accepted analytics, and Meta only if you accepted marketing. If you didn't accept on viaraa.in, nothing is sent. Each message carries:

• the random cookie IDs Google and Meta set on viaraa.in;
• your IP address and browser type;
• for a coin request, its amount in rupees;
• for Meta only: your account's email address and account ID, each turned into a scrambled code (a SHA-256 hash) before it leaves our server. Meta compares that code with the codes of the emails it already knows, to see whether one of our Facebook or Instagram ads brought you.

Your email itself never leaves our server, and Google never gets it, even scrambled. They never get your chats, calls, photos or payment details, and never your name, phone number or UPI ID.

To change your choice, open Cookie choices at the bottom of any page on viaraa.in. Nothing more is sent from then on. What Google and Meta already received stays with them under their own privacy policies.

Viaraa is only for adults. We don't knowingly collect data from anyone under 18. If we find out someone under 18 has an account, we close it and delete their data, apart from anything the law requires us to keep.

If we change this policy, we'll post the new version here with a new date, and tell you in the app about important changes before they apply.

Questions or complaints about your data go to our Grievance Officer, Prem Kumar, at uidesigner.premkumar@gmail.com. All our contact details are on the Contact page.