Privacy Policy
Effective date: 28 October 2026
1. Who we are and what this covers
This Privacy Policy explains what personal data Focused User Technology Utility Resources Experts Private Limited ("T2F", "we", "us") collects when you use the T2F (Talk to Friend) mobile app on Android and iOS (the "App") and our websites, including talktofriend.in and its subdomains (the "Website"). Together these are the "Platform". "You" means anyone who visits or uses the Platform.
We are the Data Fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and its rules. This policy is our notice to you under those laws. It should be read with our Terms of Service. Where the two conflict on how we handle personal data, this policy wins.
This version replaces the policy dated 26 August 2026.
You must be 18 or older to use T2F. We do not knowingly allow anyone under 18 to create an account (see section 9).
Summary in plain words
- We collect what we need to run calls, chats, posts, rooms, wallets and payments, and to keep the Platform safe.
- We do not sell your personal data.
- Analytics, session replay, marketing and personalisation each need your separate consent, and you can withdraw any of them at any time.
- You can delete your account from inside the App. Your name, number and photos are removed straight away and the rest of your profile data within 30 days; payment records are kept for 8 years because the law requires it.
- Questions or complaints go to our Grievance Officer (section 11).
2. Information we collect
We collect data you give us, data created when you use the Platform, and a small amount from partners. The table lists each type.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Mobile number, one-time passwords (OTP) used to sign in, user ID, sign-in sessions and tokens | You, at sign-up and sign-in |
| Profile | Name, username, profile photo, date of birth or birth year, gender, bio, interests, languages, city | You |
| Selfie verification (where offered) | A live selfie and a match score against your profile photo, used to confirm you are a real person | You, with consent |
| Content | Posts, Sneaks (short videos), stories and status updates, comments, likes, room and chat messages, voice notes, photos and videos you upload | You |
| Calls, live and rooms | Who you called and when, call length, coins spent, room membership. Audio and video travel through our calling providers in real time. We do not record calls. | Created when you use the feature |
| Wallet and payments | Coin balance, purchases, gifts sent and received, transaction IDs and status from the payment provider or app store | You, Cashfree, Apple, Google |
| Payouts and KYC (creators only) | PAN number, name as verified, bank account details for withdrawals | You, when you request a payout |
| Location | Approximate location (city level) while you use the App, and a location estimated from your IP address | Your device, with permission |
| Device and log data | Device model, operating system, app version, language, IP address, device and advertising identifiers, push notification token, crash logs, performance traces | Your device |
| Usage | Screens viewed, features used, taps and session events, search queries, content you watch and how long | Your device |
| Support and safety | Messages to our support team, reports you file, reports filed about you, blocks | You and other users |
What we do not collect. We do not read your phone contacts, SMS or call log. We do not collect your precise GPS location or track you in the background. We do not store your full card or UPI details; the payment provider handles them.
3. How we use your information
We use personal data only for the purposes below. You agree to each consent-based purpose separately in the App, and you can switch it off later in Settings.
| Purpose | Examples | Basis |
|---|---|---|
| Run the Platform | Create your account, sign you in by OTP, show your profile, connect calls, deliver messages and notifications | Your consent to use the service, and performance of our Terms |
| Payments and wallet | Sell coins, record gifts and call charges, pay out creators, issue invoices, handle refunds | Consent, contract, and legal duties under tax and payment rules |
| Safety and trust | Verify age and identity, scan uploads for nudity and other prohibited content, review reports, stop spam, fraud and abuse, enforce our Terms | Legitimate uses under the DPDP Act and legal duties |
| Analytics | Understand which features are used, fix crashes, measure performance | Your separate consent ("analytics") |
| Session replay | Record anonymised screen interactions to find confusing screens and bugs | Your separate consent ("session replay") |
| Personalisation | Rank your feed and suggest people, rooms and posts in your city or language | Your separate consent ("personalisation") |
| Marketing | Measure ad campaigns, send offers by push, SMS, WhatsApp or email | Your separate consent ("marketing") |
| Legal | Respond to lawful requests from courts and government, keep records the law requires | Legal duty |
Automated decisions. Photos and videos you upload are checked automatically by an image-analysis service. Content flagged as explicit may be hidden or rejected before a person reviews it. Selfie verification compares your selfie to your profile photo automatically. If you think an automated decision is wrong, contact us (section 11) and a person will review it.
4. Who we share it with
We do not sell your personal data. We share it only in the cases below.
Other users. Your name, username, photo, age, gender, city, bio and public posts are visible to other users. People in a call, live stream or room see and hear what you share there. You control who can follow you, and you can block or report anyone.
Service providers (Data Processors). These companies process data for us under contract and only on our instructions.
| Provider | What they do for us | Data involved |
|---|---|---|
| Amazon Web Services (Mumbai region) | Servers, database, file storage, email, content moderation and selfie matching (Rekognition), recommendations (Personalize) | All Platform data |
| VideoSDK, LiveKit, Agora | Real-time audio and video for calls, live streams and audio rooms | Audio and video streams, user ID, call metadata |
| Cashfree Payments | Coin purchases and creator payouts on the Website and Android | Payment status, amount, order ID; card or UPI details stay with Cashfree |
| Apple App Store, Google Play | In-app purchases on iOS and Android | Purchase receipts |
| Google Firebase | Push notifications and crash reports | Push token, device data, crash logs |
| Redis Cloud | Fast caching of sessions and online status | User ID, session data |
| SMS and WhatsApp providers (Edumarc, WATI) | Send OTPs and, with consent, messages | Mobile number, message text |
| Mixpanel, Microsoft Clarity | Product analytics and session replay (only with consent) | Usage events, device data, pseudonymous user ID |
| AppsFlyer, Meta (Facebook) | Install attribution and ad measurement (only with consent) | Advertising ID, install and purchase events |
| Sentry, New Relic | Error and performance monitoring | Crash logs, device data, IP address |
Legal and safety.We disclose data when required by law, a court order or a lawful request from a government agency, or when needed to protect a user's safety, prevent fraud, or defend our rights.
Business transfers. If T2F is merged, acquired or sells its assets, your data may move to the new owner under this policy. We will tell you before that happens.
Transfers outside India. Some providers above store or process data outside India, mainly in the United States and the European Union. We transfer data only to countries not restricted by the Government of India under the DPDP Act, and our contracts require the same level of protection.
5. App permissions, cookies and tracking
The App asks for a permission only when you first use the feature that needs it. You can turn any permission off in your phone's settings; only that feature stops working.
| Permission | Why we ask |
|---|---|
| Camera | Video calls, live streams, Sneaks, status, profile photo, selfie verification |
| Microphone | Audio and video calls, rooms, voice notes, videos with sound |
| Photos and videos | Choose media to post or set as your profile photo |
| Approximate location (while using the App) | Show people, posts and Sneaks from your city |
| Notifications | Incoming calls, messages, follow requests and updates |
| Phone and call features (Android) | Show incoming T2F calls on your lock screen and keep calls running in the background |
| Local network (iOS) | Route call audio and video for better quality |
| App Tracking Transparency (iOS) | Ad measurement; saying no does not change how T2F works for you |
Cookies on the Website. We use cookies and similar storage to keep you signed in, remember your settings, and keep the site secure. These are always on. With your consent, we also use analytics and advertising cookies to measure traffic and campaigns. You can change your choice through the cookie banner or your browser settings.
Do Not Track.We honour your consent choices in the App and on the Website; browser "Do Not Track" signals are not used as a separate setting.
6. How long we keep it, deletion and security
We keep data only as long as we need it for the purpose it was collected or as the law requires.
| Data | How long we keep it after you delete your account |
|---|---|
| Profile data, photos, preferences | Name, mobile number, username and profile photos are removed straight away; the rest is deleted within 30 days |
| Messages, posts and other content | Deleted or anonymised within 90 days |
| Backups | Up to 90 days, then overwritten |
| Security, access and audit logs | 1 year |
| Fraud investigation records | Up to 3 years, or longer under a legal hold |
| Payment, wallet and tax records, KYC | 8 years, as required by Indian tax and company law |
Deleting your account.You can delete your account from inside the App, in Settings. You can also request deletion by writing to us (section 11). Deletion takes effect straight away and cannot be undone. If you sign up again with the same number, you get a new, empty account. Deleting your account does not delete messages you sent that are already on another user's device, or content others have saved or shared.
Where we store it. Your data is stored mainly on Amazon Web Services servers in Mumbai, India.
Security. We encrypt data in transit (HTTPS/TLS), store passwords and secrets in hashed or encrypted form, give media files time-limited signed links, limit staff access to what their job needs, and log admin actions. No system is fully secure. If a breach affects your data, we will inform you and the Data Protection Board of India as the DPDP Act requires.
7. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how we use it, and the names of those we shared it with.
- Correct and update inaccurate or incomplete data. Most profile fields can be edited in the App.
- Erase your data by deleting your account (section 6).
- Withdraw consent for analytics, session replay, personalisation or marketing at any time in Settings. Withdrawal does not affect processing already done. Withdrawing consent needed to run the service itself means closing your account.
- Nominate another person to exercise your rights if you die or become unable to.
- Raise a grievance with us, and if not resolved, complain to the Data Protection Board of India.
To use any right, write to the Grievance Officer (section 11) from your registered mobile number or account. We may verify your identity first. We reply within 30 days.
8. Communications
We send service messages (OTP, security alerts, payment receipts, changes to this policy) that you cannot opt out of while you have an account. Promotional push notifications, SMS, WhatsApp and email need your marketing consent and include a way to stop them.
9. Children
T2F is only for people aged 18 and over. We check age at sign-up and block accounts with a date of birth under 18. If we learn that a user is under 18, we delete the account. If you believe a child is using T2F, report it in the App or write to us.
10. Links and third-party services
The Platform may link to other websites or let you share to other apps such as WhatsApp or Instagram. Their own privacy policies apply once you leave T2F.
11. Grievance Officer and contact
In line with the DPDP Act and the IT Rules, 2021, our Grievance Officer is:
- Name: Kaushal Kumar Kanodia
- Email: kaushal.kanodia@focusedusertech.com
- Phone: +91 91879 16080
- Address: Focused User Technology Utility Resources Experts Private Limited, BHIVE Platinum Plus, Phoenix Asia Towers Hebbal, Phoenix Asia Tower - 2, Byatarayanapura Village, Yelahanka Hobli, Yelahanka Taluk, Byatarayanapura, Bangalore North, Bangalore, Karnataka 560092, India
We acknowledge complaints within 24 hours and resolve them within 15 days. General support: support@talktofriend.in.
12. Changes to this policy
We will update this policy when our practices change and show the new effective date at the top. For material changes, we will notify you in the App or by message and, where the law requires, ask for your consent again.