Privacy Policy

1. Scope and who is responsible

This Policy applies to nammachat.com, NammaChat mobile applications, regional group chats, private chats, profiles, support, reports, purchases, and related services (the “Service”). The operator of NammaChat determines why and how personal data is processed for the Service.

By creating an account or using the Service, you acknowledge this Policy. Where consent is required, we will request it through the app or another clear notice. NammaChat is intended only for people aged 18 or older.

2. Personal data we collect

Account and profile data

• Username, email address, password hash, display name, gender, age, location, and biography.
• Current profile photo and profile-photo history, including upload date and original file name.
• Account status, lock reason, blocked-user list, joined regions, and group memberships.
• Your confirmation that you are at least 18 and the date and versions of the Terms and Privacy Policy you accepted.

Device, network, and login data

• Device type and details, app-scoped device ID, operating platform, user-agent, and push-notification token.
• Registration and login IP addresses, login dates and times, last-login information, and session or socket status.
• Password-reset request data, including a temporary hashed verification code and expiry time.

Support, moderation, and transaction data

• Contact requests, subject, message, account details, and submission time.
• User reports, reporter and reported-account details, reason, comments, message reference, status, and admin remarks.
• Ad-free purchase date, amount, currency, status, platform, payment reference, and expiry date.
• Administrative and moderation records needed to investigate misuse, enforce restrictions, and answer requests.

Data collected automatically

We may collect app configuration requests, feature interactions, error information, and basic technical data needed to deliver, secure, diagnose, and improve the Service. The mobile app also stores selected account information, preferences, and recent chat data on your device.

3. Chats, local storage, and safety detection

Group and private messages include message text, sender, recipient or region, conversation ID, message type, time, and seen status. The server is designed to retain the latest 50 messages for each conversation. Sent and received messages may also be cached locally on your device to support the conversation experience.

For user safety and moderation, message text may be automatically scanned for categories such as phone numbers, email addresses, social-media details, external links, passwords, verification codes, financial details, government IDs, addresses, precise locations, dates of birth, and similar sensitive information. When detected, a safety log may include:

• User and conversation identifiers, chat type, date and time, and IP address.
• Detected content categories, risk level and reasons, and country signals inferred from details such as dialling codes, keywords, or domain suffixes.
• A short sample of the relevant message, currently limited to the first 180 characters, for authorised admin review.

These logs are used to identify risks, investigate reports, protect users, enforce the Terms, and respond to lawful requests. Avoid posting sensitive data even in private chats.

4. Why we use personal data

We process personal data for the following purposes:

• Create and authenticate accounts, reset passwords, maintain sessions, and prevent unauthorised access.
• Display profiles, joined regions, online membership, group chats, private chats, seen status, and notifications.
• Operate blocks, reports, contact requests, community alerts, app updates, and support.
• Detect spam, fraud, impersonation, abuse, dangerous information sharing, and violations of our Terms.
• Investigate incidents, enforce account restrictions, preserve evidence, and comply with applicable law.
• Configure and measure advertisements, administer ad-free purchases, and maintain transaction records.
• Debug, secure, maintain, and improve NammaChat.

Depending on the context, processing is based on your consent, steps requested by you to provide the Service, compliance with legal obligations, and other uses permitted by applicable law.

5. When personal data is shared

We may share personal data only as reasonably necessary with:

• Other users, when you publish profile information or send messages. Email addresses are not intended to appear in member lists or public profiles.
• Hosting, database, notification, email, security, analytics, moderation, and technical service providers acting for NammaChat.
• Google, Meta, Apple, app stores, and payment providers where their advertising, notification, distribution, or purchase services are enabled.
• Professional advisers, auditors, insurers, or a successor organisation in connection with a lawful business transaction.
• Courts, police, cybercrime authorities, regulators, or other authorised agencies when disclosure is required or permitted by applicable law or valid legal process.
• Persons necessary to prevent serious harm, fraud, security incidents, or illegal activity.

NammaChat does not sell personal data for money. Third-party providers may process data under their own privacy policies where they act independently.

6. Advertisements, notifications, and purchases

Where enabled, Google AdMob and Meta Audience Network may receive device, app, advertising, interaction, and approximate network information to provide or measure ads according to their policies and your device choices. You may purchase a time-limited ad-free plan through Google Play or Apple. App stores process payment credentials; NammaChat stores purchase status and references needed to activate and verify the plan.

Push notifications may use a device notification token through the applicable platform or notification provider. You can control notification and advertising permissions through your device settings, subject to platform availability.

7. Data retention and deletion

We retain personal data only for as long as reasonably needed for the purposes described in this Policy, account operation, safety, dispute resolution, fraud prevention, backups, and legal compliance. Different records have different retention periods.

• Recent server chat history is designed to be limited to the latest 50 messages per conversation.
• Local chat data remains on your device until removed by app controls, logout cleanup, app-data clearing, or uninstalling, depending on implementation and platform behaviour.
• Temporary password-reset codes expire after a short period and are cleared after successful use or too many failed attempts.
• Safety, report, login, purchase, and legal records may be kept longer where needed to protect users, establish claims, prevent repeat abuse, or comply with law.

When data is no longer needed, we take reasonable steps to delete or anonymise it, subject to backup cycles and lawful retention requirements.

8. Your choices and privacy rights

Subject to applicable law and verification of your request, you may ask to access a summary of personal data processed about you, correct or update inaccurate data, erase data that is no longer required, withdraw consent where processing depends on consent, and obtain grievance redressal. Applicable law may also allow you to nominate another individual to exercise certain rights in the event of death or incapacity.

You can update supported profile information in the app. For another privacy request, email admin@nammachat.com from your registered email and include your username and request type. We may request reasonable verification. We may retain or decline to erase information where retention is required by law or remains necessary for security, fraud prevention, legal claims, or another permitted purpose.

If you have a complaint, contact our grievance channel first at admin@nammachat.com. This does not limit any right to approach a competent authority when available under applicable law.

9. Security and international processing

We use reasonable technical and organisational safeguards intended to protect personal data, including password hashing, authenticated API access, time-limited sessions, access controls, and restricted administrative tools. No system, transmission, or storage method is completely secure, so we cannot guarantee absolute security.

Service providers may process data in India or another country where they operate. Where required, we take reasonable steps to use lawful arrangements and comply with restrictions applicable to processing outside India.

10. Adults-only service

NammaChat is not intended for anyone under 18. We require an 18+ confirmation before the registration screen is opened. We do not knowingly permit children to create accounts. If you believe a person under 18 has provided personal data, contact admin@nammachat.com so we can investigate and take appropriate action.

11. Changes to this Policy

We may update this Policy to reflect changes in the Service, data practices, providers, or law. The updated date appears at the top. We will provide additional notice or request new consent where required. Materially different processing will not be applied retroactively where prohibited by law.

12. Contact and grievance redressal