Privacy Policy

This policy explains how Talk Yaaro (“Talk Yaaro”, “we”, “us”) collects, uses, shares and protects personal data when you use the Talk Yaaro app (for callers, “users”), the Talk Yaaro Partner app (for listeners, “hosts”) and this website (together, the “Service”). For the purposes of India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), Talk Yaaro is the Data Fiduciary for this data.

1. The short version

• Call audio is never recorded. Calls and live audio rooms are streamed in real time through Agora's voice servers and are not stored or transcribed by us.
• Chat messages are stored so you and the host can see your conversation, and are automatically checked for phone numbers, links, social media IDs and abuse.
• Users log in with a mobile number (OTP) or as an anonymous guest. Hosts only see your nickname — never your phone number.
• Hosts complete identity and payout verification (KYC), so we hold more data about hosts than about users.
• We do not sell your personal data or use it for advertising.

2. Data we collect from users (callers)

• Account: your mobile number (used to send a login OTP) — or, if you continue as a guest, a randomly generated guest ID instead of a phone number; your nickname, emoji avatar and preferred languages.
• Coins & purchases: coin balance and a record of each purchase (store order/purchase ID, pack, amount, date). Card, UPI and bank details are handled by Google Play (or Razorpay for payments made on the web) — we never see or store them.
• Calls: call records — which host, when the call was requested, connected and ended, its duration and the coins charged — plus any rating, feedback tags and gifts you give. No call audio.
• Chats: the messages you send to and receive from hosts (including voice notes a host sends you), when they were sent, and the coins charged for each message you send.
• Live audio rooms: which rooms you join and when you join and leave, whether you raised your hand or were brought up to speak, whether a host removed you, and any gifts you send. No room audio.
• Safety: reports and blocks you make, and reports or blocks made about your account, including the reason given.
• Device & technical: a push-notification token (Firebase Cloud Messaging), crash and error reports (device model, OS and app version, error details), and server logs that record your IP address, device/browser type and account ID for each request.
• Support: anything you send us by WhatsApp or email.

3. Data we collect from hosts (partners)

• Account & profile: mobile number (for OTP login), name, profile photo, languages, bio, and any optional profile details you choose to add (for example education, marital status or religion).
• Verification (KYC): full legal name as on PAN, PAN, bank account number and IFSC, UPI ID for payouts, and a recorded voice audition (which also becomes the voice intro users can play on your profile).
• Partner agreement: your signed agreement, including your signature, the signed document, the date and time of signing, and the IP address and device/browser details used — kept as evidence that the agreement was signed.
• Activity & earnings: online status and availability settings, calls taken, ratings and feedback received, tier and per-minute rate, earnings (from calls, chat messages, gifts and bonuses), wallet balance and UPI payout history, including automatic payouts.
• Chats & live audio rooms: the chat messages you send and receive (including your voice notes), and the live audio rooms you host — title, language, start and end times, who joined, spoke or was removed, and gifts received. No room audio.
• Safety: the users you block (with the reason you select), and reports made about your account.
• Device & technical: push-notification and call-notification tokens, crash and error reports, and server logs (IP address, device type, account ID).

4. This website

The website does not use advertising or analytics cookies. We use Sentry to catch website errors (browser type, page and error details). If you join a “notify me” list, we store the email address you enter and which app it is for.

5. Why we use your data

• To create and secure your account and log you in (OTP).
• To connect calls, deliver chat messages and run live audio rooms; to charge coins per call minute, per chat message and per gift; to process purchases; and to pay hosts their earnings.
• To automatically block phone numbers, links, social media IDs and abusive language in chats and room titles, so conversations stay safe and on the platform.
• To verify hosts' identity and bank/UPI details, prevent fraud, and meet tax and accounting obligations.
• To keep the community safe — reviewing reports and blocks, and enforcing our Community Guidelines.
• To show ratings and the Top 5 ranking, which are calculated from call ratings.
• To send call and service notifications, and to answer support requests.
• To find and fix crashes and errors, and to protect our systems from abuse.
• To comply with Indian law and valid requests from government authorities.

We process your data on the basis of the consent you give when you sign up and use the Service, and for the “legitimate uses” the DPDP Act allows — such as meeting a legal obligation or responding to an emergency.

6. Calls, chats, rooms and staff access

• Calls are routed through Agora's real-time voice servers — they are not peer-to-peer. The audio is streamed live and is not recorded or stored by Talk Yaaro. We keep call metadata (times, duration, coins) for billing and dispute handling.
• Chats between a user and a host are stored on our servers so both of you can see the conversation. Each message is checked automatically before it is sent, and messages containing phone numbers, links, social media IDs or abusive language are blocked. Voice notes are kept in private storage and played back through short-lived links.
• Live audio rooms are routed through Agora like calls, and the audio is not recorded or stored by Talk Yaaro. Everyone in a room hears whoever is speaking, and people in the room see the nickname and avatar of anyone who raises their hand or speaks.
• Staff access: authorised Talk Yaaro administrators can see account, call, chat, room and report records to investigate reports, abuse and fraud. Access to users' phone numbers and hosts' KYC details is limited to senior administrators and every such access is logged.

7. Who we share data with

We share data only with service providers that process it on our behalf to run the Service, and only what each one needs:

• Agora — real-time voice for calls and live audio rooms.
• Google Play Billing — coin purchases in the Android app; Razorpay — payments made on the web.
• Payout providers (such as RazorpayX or Cashfree) — sending hosts' UPI payouts and withdrawals.
• An SMS provider — delivering login OTP codes to your phone.
• Google Firebase — push notifications (Cloud Messaging) and crash reports (Crashlytics).
• Sentry — error monitoring for the apps and website.
• Amazon Web Services (AWS) — hosting, database and file storage, in the Mumbai (ap-south-1) region.
• WhatsApp (Meta) — only if you contact our support on WhatsApp.

Hosts see a user's nickname, avatar and languages — not their phone number. Users see a host's profile (name, photo, languages, voice intro, rating and rate) — not their phone number or KYC details. We may also disclose data where Indian law requires it (for example, a court order or a lawful request from law enforcement), or to protect someone from serious harm. We do not sell personal data.

8. Where your data is stored

Our servers, database and file storage are hosted by AWS in Mumbai, India (ap-south-1). Some of the service providers listed above (such as Agora, Google Firebase and Sentry) may process limited data on servers outside India to provide their services, as permitted under Indian law.

9. How we protect it

• All app and website traffic is encrypted in transit (HTTPS/TLS).
• Hosts' PAN, bank account number and IFSC are encrypted in our database.
• Uploaded files (voice intros, chat voice notes, photos, signed agreements) are kept in private, encrypted storage — never on public links.
• Administrator accounts require multi-factor authentication, and access to phone numbers and KYC details is logged.

No system is perfectly secure, but we work hard to protect your data.

10. How long we keep data

• Call and room audio: never recorded, so never retained.
• Login OTP codes: expire after 5 minutes.
• Login sessions: expire automatically; a session unused for 30 days requires you to log in again.
• Account and profile data: until you delete your account — see Delete Account & Data for exactly what is erased.
• Chat messages: kept so both sides can see the conversation, and where needed to resolve billing disputes and safety reports.
• Call records, coin purchases and transactions: kept after account deletion for as long as Indian tax, accounting and consumer-protection laws require (generally up to 8 years).
• Host earnings and payout records, and the signed partner agreement: kept for as long as tax and contract law require (generally up to 8 years).
• Safety reports, blocks and bans: kept as long as needed to enforce them and protect other users.
• Server logs and crash reports: kept for a limited period for security and debugging, then deleted on a rolling basis.

11. Children

The Service is only for people aged 18 and over. We do not knowingly allow anyone under 18 to use it or collect their data. If we learn that an account belongs to someone under 18, we will close it and delete its data. If you believe a minor is using Talk Yaaro, please contact us.

12. Your rights under the DPDP Act, 2023

• Access: ask for a summary of the personal data we hold about you, how we process it, and who we have shared it with.
• Correction: ask us to correct, complete or update inaccurate data. Users can edit their nickname, avatar and languages in the app; hosts can update their profile in the Partner app and contact us to change KYC or bank details.
• Erasure: delete your account in the app at any time, or ask us to do it — see Delete Account & Data. Some records are kept where the law requires (section 10).
• Withdraw consent: you can withdraw consent at any time by deleting your account. This does not affect processing that happened before.
• Grievance redressal: complain to our Grievance Officer (below) about how we handle your data.
• Nominate: nominate another person to exercise these rights on your behalf if you die or become unable to do so.

How to exercise your rights: email privacy@talkyaaro.com with your request, the app you use (Talk Yaaro or Talk Yaaro Partner) and your registered mobile number (or, for a guest account, your guest nickname). We may reply to confirm the request comes from the account holder before acting on it. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

13. Grievance Officer

14. Changes to this policy

When we change this policy we will update the “Last updated” date above. For significant changes, we will give notice before they take effect.

15. Contact

• Privacy and data requests: privacy@talkyaaro.com
• General support: support@talkyaaro.com
• WhatsApp support: +91 98718 44100