Privacy Policy

1. Scope and Overview

This Privacy Policy explains how Let's Talk - Connect Your Voice collects, processes, uses, stores, and protects personal data when you use our mobile application and related web signaling services ("Service"). By downloading, installing, or using Let's Talk, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

We collect information to provide, maintain, and optimize real-time audio and video voice matching, peer-to-peer calling, and encrypted friend messaging services:

A. Account & Registration Data

• Phone Number: Collected for user authentication and account verification via Firebase Phone Authentication or Truecaller SDK.
• Profile Information: Nickname/Display Name, Gender, Preferred Match Gender, and Preferred Communication Language selected during onboarding.
• User Identifier: Unique User ID generated upon account creation.

B. Real-Time Voice & Video Communication Data

• WebRTC Session Data: Technical signaling data (SDP session descriptions, IP addresses, and ICE candidates) required solely to establish real-time peer-to-peer (P2P) audio and video connections via WebRTC.
• Zero Audio/Video Recording: Voice and video streams are transmitted directly between calling peers in real-time. We do NOT record, monitor, listen to, or store any voice or video calls on our servers under any circumstances.

C. Messaging & Social Feature Data

• Friend Interactions: Friend list records, pending friend requests, favorites, and blocked user lists.
• Chat Messages: Messages and text chats exchanged between connected friends are stored locally on your device and securely synchronized via Google Firebase Firestore.
• Call History Logs: Local records of call timestamps, duration, and caller IDs saved on your local device.

D. Device & Technical Data

• Device Information: Device model, operating system version, screen resolution, and unique device identifiers.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens required to deliver real-time incoming call alerts and chat notifications.
• Network & Connection Metrics: IP address, connection quality indicators, and error logs for diagnostic support.

E. Advertising & Third-Party Analytics

• Google Mobile Ads (AdMob): Anonymous Advertising IDs (such as Google Advertising ID / AAID) collected by Google AdMob to deliver non-intrusive sponsored content.

3. Legal Basis & Purpose of Data Processing

In compliance with Section 4 of the Digital Personal Data Protection Act, 2023 (DPDP Act), we process personal data for specified, lawful purposes based on your explicit consent:

• To authenticate your identity and secure your account access.
• To execute preference-based matching algorithm ("Ready to Match") according to your chosen gender and language preferences.
• To facilitate seamless peer-to-peer (P2P) audio and video voice calls.
• To deliver real-time push notifications for incoming call alerts.
• To enforce our Terms of Service, prevent fraud, harassment, and unauthorized access.
• To comply with statutory legal obligations under Indian cyber laws.

4. Data Storage, Encryption & Security

We implement industry-standard administrative, physical, and technical security safeguards:

• P2P Encryption: All WebRTC audio/video streams use Datagram Transport Layer Security (DTLS) and Secure Real-time Transport Protocol (SRTP) for end-to-end stream security.
• Transport Layer Security: All API and signaling communications between your device and server utilize HTTPS and WebSockets Secure (WSS) protocol.
• Data Isolation: Sensitive preferences and call history logs remain stored on your local device.

5. Third-Party Data Disclosures & Integrations

We do NOT sell, rent, or trade your personal information to third parties. We share limited technical data only with trusted infrastructure providers:

• Google Firebase (Alphabet Inc.): Authentication, Cloud Firestore database, and FCM push notifications.
• Truecaller SDK (True Software Scandinavia AB): Instant phone verification service.
• Google AdMob: Privacy-compliant ad serving.
• Statutory Authorities: Disclosure may occur if strictly mandated by valid legal process, judicial order, or statutory directive under Section 69 of the Information Technology Act, 2000 of India.

6. User Rights Under DPDP Act 2023

As a Data Principal under Indian law, you possess the following statutory rights regarding your personal data:

• Right to Access & Review: You may review your personal profile data within the app settings.
• Right to Correction & Erasure: You can edit your nickname/preferences anytime or request complete deletion of your account and data.
• Right to Withdraw Consent: You may revoke app permissions (Microphone, Notifications, Camera) at any time via device settings or uninstall the app to cease data collection.
• Right of Grievance Redressal: You have the right to seek redressal of grievances through our appointed Grievance Officer.

7. Children's Privacy

Let's Talk is strictly intended for individuals who are 18 years of age or older (or the legal age of majority in your jurisdiction). We do not knowingly collect personal data from minors under 18 years of age. If we discover that a minor has registered an account, we will take immediate steps to terminate the account and purge associated data.

8. Data Retention Policy

Account profile data is retained as long as your account remains active. Local data (call history logs and local chats) can be wiped by clearing app data or uninstalling the app. Signaling metadata is ephemeral and discarded automatically after WebRTC session termination.

9. Updates to Privacy Policy

We reserve the right to amend this Privacy Policy from time to time to reflect changes in legal regulations, security practices, or app features. Material modifications will be notified via in-app alerts. Continued usage after updates constitutes your agreement to the revised terms.

10. Grievance Redressal Officer (Indian IT Rules & DPDP Act Compliance)

In accordance with the Information Technology Act, 2000, Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the contact details of the designated Grievance Officer are provided below: