Privacy Policy
This policy explains what information the IndieChat app and indiechat.in collect, why, and the choices you have. “IndieChat”, “we” and “us” mean the team that runs IndieChat.
The short version
- Your chats are end-to-end encrypted. We can’t read them.
- Snaps and stories are not end-to-end encrypted. We store them only for a limited time so they can be delivered and viewed.
- We don’t sell your personal information.
What we collect
Your account
Your mobile number, which you use to sign in with a one-time code sent by SMS. Your name, username and profile photo, if you add them.
Your contacts, if you allow it
To show which of your contacts use IndieChat, the app sends SHA-256 hashes of the phone numbers in your address book, not the numbers or names themselves. We use them only to find matches, and limit how many lookups an account can make each day. You can turn off contacts access in your phone’s settings at any time.
Chats and calls
Messages in chats, including photos, voice notes and locations you choose to share, are end-to-end encrypted, so only the people in the chat can read them. To deliver messages, our servers process information such as who sent a message to whom and when. Calls connect directly between phones where possible, or through our relay server when a direct connection isn’t possible. We don’t record calls.
Snaps and stories
Snaps and stories are not end-to-end encrypted. They are stored on our servers so they can be delivered and viewed. Stories are removed when they expire. A snap can be replayed for up to 24 hours after it’s opened, and snaps are deleted from our servers after 30 days at most. Snaps you save to Memories are kept until you delete them.
Channels, communities and Business mode
Channel posts are public to anyone who views the channel. If you switch on Business mode, your business profile and catalogue are visible to people who look at your business, and we keep the business details and customer tools you set up. If you apply for business verification, we keep the details you submit for it.
Purchases
If you buy IndieChat Plus or add money to a Business wallet, we keep a record of the purchase, such as the amount, date and invoice. Your card, UPI or bank details are handled by the payment provider, such as Google Play, and are not stored by us.
Ads
IndieChat shows ads. We choose them using the state or region in your profile. We can’t read your chats, so their content is never used for ads, and we don’t give advertisers your phone number. In the app you can see why an ad was shown and hide ads from an advertiser.
Device and technical information
A push token so we can send you notifications, and technical information such as IP address, app version and times of requests, which we use to keep the service working and secure.
How we use information
- To sign you in, deliver messages, snaps, stories and calls, and run the features you use.
- To keep IndieChat safe: preventing spam and fake accounts, and acting on reports and blocks.
- To show ads and to process purchases.
- To meet our legal obligations.
Who we share information with
- SMS provider: your mobile number and sign-in code go to our SMS gateway so it can text you the code.
- Payment providers: such as Google Play, when you make a purchase.
- Notifications: on Android, push notifications may be delivered through Google Firebase Cloud Messaging.
- Service providers: who host our servers on our behalf.
- Authorities: when Indian law requires it. Because chats are end-to-end encrypted, we can’t share their content.
How long we keep information
We keep your account information while your account exists. Snaps, stories and other media are kept only for the times described above. Technical logs are kept for a limited period for security.
Deleting your account
To delete your account and the information linked to it, email support@indiechat.in from any address and include the mobile number of the account. We’ll confirm the request with that number and delete the account. Messages already delivered stay on the phones of the people you sent them to.
Your rights
Under India’s Digital Personal Data Protection Act, 2023, you can ask to access, correct or erase your personal data, and raise a grievance with us. You can edit your profile in the app at any time. For anything else, contact us at the address below.
Children
IndieChat is meant for people aged 18 and over, or younger people using it with the consent of a parent or guardian.
Security
Chats are end-to-end encrypted, and all traffic between the app and our servers is encrypted in transit. No system is perfectly secure, but we work to protect your information.
Changes to this policy
If we change this policy, we’ll update this page and the date at the top.
Contact
Questions, requests or grievances: support@indiechat.in