Fidha — Privacy Policy

Application	Fidha
Android package	fidha.app.com
Provider	Fidha Technologies Private Limited
Website	fidhatechnologiesprivatelimited.in
Contact	support@fidhatechnologiesprivatelimited.in
Effective date	13 September 2026
Last updated	13 September 2026

Introduction

This Privacy Policy explains what personal information Fidha Technologies Private Limited (“Fidha”, “we”, “us”, “our”) collects through the Fidha mobile application (the “App”), why we collect it, who we share it with, how long we keep it, and the choices and rights you have.

It applies to everyone who uses the App, whether as a User (a person who buys coins and places calls) or as a Host / Partner (a person who receives calls through the App).

By creating an account or using the App, you agree to this Policy. If you do not agree, please do not use the App.

Age restriction The App is intended only for people aged 18 years or older. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a person under 18, we delete the account and the associated data promptly. If you believe a minor is using the App, contact us at the address in Section 14.

1. Summary of what we collect

Category	Examples	Why we collect it	Who it is shared with
Account & profile	Name, mobile number, date of birth, gender, profile photo or selected avatar, account role (User or Host).	Create and secure your account, verify you are 18 or older, and show your profile to other users.	Profile details are visible in-app; stored with our hosting and storage providers.
Host verification media	Voice introduction recording, profile and intro media submitted by Hosts.	Verify Hosts and let Users preview a Host before calling.	Shown in-app; stored with our storage provider.
Audio & video during calls	Live microphone and camera streams.	Deliver the voice or video call you initiate.	Transmitted through ZEGOCLOUD to the other participant. Not recorded or stored by us.
Call & usage records	Call time, duration, participants, call type, coins spent, in-app call history.	Billing, coin deduction, customer support, fraud and abuse prevention.	Our servers only, plus the service providers listed in Section 8.
Purchases & wallet	Coin packages purchased, amount, currency, order ID, payment status, wallet/coin balance.	Process payments, maintain your coin balance, and keep tax and accounting records.	Razorpay processes the payment. We never receive your full card or UPI credentials.
Device & technical data	Device model, OS version, app version and build, language, IP address, network type, crash and diagnostic logs.	Run the App, fix bugs, enforce minimum supported app versions, and maintain security.	Google Firebase.
Push notification token	Firebase Cloud Messaging (FCM) registration token.	Deliver incoming-call alerts and service notices.	Google Firebase.
Analytics & advertising identifiers	Android Advertising ID, app events (app open, sign-up, purchase), screen views, approximate region derived from IP address.	Understand feature usage, measure our advertising, prevent fraud.	Google Firebase Analytics, Meta (Facebook) SDK.

2. Information you give us

2.1 Registration and profile

Mobile number — used as your login identifier and verified by a one-time password (OTP).
Name, date of birth and gender — date of birth is used to confirm you meet the 18+ requirement and to display an age-appropriate profile.
Profile picture — either an avatar you choose from our built-in set, or a photo you take with the camera or select from your device gallery.

2.2 Host onboarding

If you register as a Host, you may additionally submit a voice introduction recording and other profile media as part of verification. These are reviewed by our team and may be shown to Users who browse your profile. You can ask us to remove or replace them at any time.

2.3 Support and communications

If you contact support or report another user, we collect the content of your message and any information you choose to include, so that we can investigate and reply.

3. Information collected automatically

Device and diagnostic information — device model, Android version, installed app version and build, locale, network state and connection type, and crash/error logs.
IP address — collected when your device contacts our servers; used for security, abuse prevention and approximate region.
Usage events — screens viewed, calls started and ended, purchases completed, and similar in-app actions.
Advertising identifier — the App uses the Meta (Facebook) SDK with advertiser-ID collection enabled, and Firebase Analytics. These may collect your Android Advertising ID for analytics, attribution and advertising measurement. You can reset or delete this identifier in Android Settings > Privacy > Ads.
Push token — a Firebase Cloud Messaging token that identifies your app installation so we can deliver incoming-call notifications.

We do not collect your precise GPS location, your contacts, your SMS messages, your call log, or files on your device other than the image you deliberately choose to upload.

4. Device permissions and why we request them

RECORD_AUDIO (Microphone)

Purpose: Carry your voice during voice and video calls; record a voice introduction if you are a Host.
Optional: Yes — required only to make or receive calls.

CAMERA

Purpose: Carry your video during video calls; take a profile photo.
Optional: Yes — required only for video calls and camera photos.

POST_NOTIFICATIONS

Purpose: Show incoming-call alerts and service messages.
Optional: Yes — calls may be missed if denied.

USE_FULL_SCREEN_INTENT

Purpose: Display the full-screen incoming-call screen when the phone is locked.
Optional: Yes.

FOREGROUND_SERVICE, FOREGROUND_SERVICE_MICROPHONE, FOREGROUND_SERVICE_CAMERA

Purpose: Keep an active call running, with a persistent notification, when the App is in the background.
Optional: Runs only while a call is in progress.

INTERNET, ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE

Purpose: Connect to our servers and adapt call quality to your connection.
Optional: No — required for the App to function.

MODIFY_AUDIO_SETTINGS, BLUETOOTH

Purpose: Route call audio to the earpiece, speaker, wired headset or a connected Bluetooth device.
Optional: No — used only during calls.

READ_PHONE_STATE

Purpose: Detect an incoming or ongoing cellular phone call so an in-app call can be paused or ended gracefully.
Optional: Yes — no phone numbers from your device are read or uploaded.

VIBRATE, WAKE_LOCK

Purpose: Ring or vibrate for incoming calls and keep the screen awake during a call.
Optional: No — used only for calls.

PHOTOS / MEDIA SELECTION

Purpose: Let you pick an existing image as your profile picture.
Optional: Yes — only the image you select is read.

Microphone and camera are used only while a call or recording is active, or while you are taking a profile photo. The App does not access them in the background outside those moments.

5. How we use your information

To create, authenticate and secure your account (including OTP verification and session tokens).
To operate the core service: listing Hosts, placing and receiving calls, and delivering call notifications.
To process coin purchases, deduct coins per call, and maintain your wallet and transaction history.
To confirm eligibility (18+) and to verify Hosts.
To provide customer support and respond to reports and complaints.
To detect, investigate and prevent fraud, abuse, harassment, spam and violations of our Terms.
To measure app performance, diagnose crashes, and enforce minimum supported app versions.
To measure and improve our marketing campaigns using aggregated and identifier-based analytics.
To comply with applicable law, including tax, accounting and lawful requests from authorities.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing.

6. Legal bases (where GDPR or similar laws apply)

Performance of a contract — account creation, calls, purchases, wallet and support.
Legitimate interests — security, fraud prevention, service improvement and product analytics.
Consent — microphone, camera, photo access, notifications, and advertising/marketing analytics. You may withdraw consent at any time in your device settings.
Legal obligation — retention of financial records and responses to lawful requests.

7. Calls: what is and is not stored

Voice and video during a call are transmitted in real time through our real-time communication provider, ZEGOCLOUD.

Fidha does not record, store or listen to the content of your calls.

We retain only call metadata — who called whom, the start time, the duration, the call type and the coins charged — which is needed for billing, dispute resolution and abuse investigation.

Please note that we cannot control whether the other participant records a call using tools outside the App. Do not share information during a call that you would not want recorded by the other person.

8. Service providers we share data with

Provider	Purpose	Data	Privacy policy
Google Firebase	Push notifications, analytics, diagnostics.	Push token, device and app identifiers, advertising ID, usage events.	firebase.google.com/support/privacy
ZEGOCLOUD	Real-time voice and video calling.	Room identifier, in-call audio/video streams, connection diagnostics.	zegocloud.com/policy/privacy
Razorpay Software Private Limited	Payment processing for coin purchases.	Order ID, amount, currency, payment status, and payment credentials you enter directly with Razorpay.	razorpay.com/privacy
Meta Platforms (Facebook SDK)	App-event and advertising measurement.	App events, device identifiers, advertising ID.	facebook.com/privacy/policy
Amazon Web Services (India region)	Hosting of our backend and storage of profile and media files.	All data described in this Policy, at rest and in transit.	aws.amazon.com/privacy

Provider

Purpose

Data

Google Firebase

Push notifications, analytics, diagnostics.

Push token, device and app identifiers, advertising ID, usage events.

firebase.google.com/support/privacy

ZEGOCLOUD

Real-time voice and video calling.

Room identifier, in-call audio/video streams, connection diagnostics.

zegocloud.com/policy/privacy

Razorpay Software Private Limited

Payment processing for coin purchases.

Order ID, amount, currency, payment status, and payment credentials you enter directly with Razorpay.

razorpay.com/privacy

Meta Platforms (Facebook SDK)

App-event and advertising measurement.

App events, device identifiers, advertising ID.

facebook.com/privacy/policy

Amazon Web Services (India region)

Hosting of our backend and storage of profile and media files.

All data described in this Policy, at rest and in transit.

aws.amazon.com/privacy

These providers act on our instructions under contract and may process data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

We may also disclose information:

to comply with law, a court order or a valid government request;
to enforce our Terms or investigate suspected fraud or abuse;
to protect the rights, safety or property of Fidha, our users or the public; and
to a successor entity in connection with a merger, acquisition or sale of assets, subject to this Policy.

9. Payments

Coin purchases are processed by Razorpay. Your card number, CVV, UPI PIN, net-banking credentials and similar payment secrets are entered into Razorpay’s interface and are never collected, seen or stored by Fidha. We receive only the order identifier, amount, currency and success/failure status, which we record against your wallet.

Coins are a prepaid in-app balance used to pay for calls. Refunds and cancellations are governed by our Terms of Service.

10. Data security

All traffic between the App and our servers uses HTTPS/TLS encryption.
Authentication tokens are stored on your device using Android Keystore-backed encrypted storage.
Access to production data is restricted to authorised personnel on a need-to-know basis.
Call media is encrypted in transit by our real-time communication provider.

No method of transmission or storage is completely secure. If a breach affects your personal information, we will notify you and the relevant authorities as required by applicable law.

11. Data retention

Data	Retention period
Account and profile data	While your account is active; deleted or anonymised within 30 days of account deletion.
Call metadata and wallet/coin history	Up to 24 months for support and abuse investigation.
Payment and invoice records	As long as required by Indian tax and accounting law (currently up to 8 years).
Diagnostic and analytics data	Up to 14 months, or as set by the provider’s default retention.
Reports, blocks and safety records	Up to 24 months after resolution, to prevent repeat abuse.

Data

Retention period

Account and profile data

While your account is active; deleted or anonymised within 30 days of account deletion.

Call metadata and wallet/coin history

Up to 24 months for support and abuse investigation.

Payment and invoice records

As long as required by Indian tax and accounting law (currently up to 8 years).

Diagnostic and analytics data

Up to 14 months, or as set by the provider’s default retention.

Reports, blocks and safety records

Up to 24 months after resolution, to prevent repeat abuse.

12. Your rights and choices

12.1 Delete your account and data

You can delete your account directly in the App: Profile > Delete Account

Deletion removes your profile, profile media, avatar and login credentials, and disassociates your usage history. Records we are legally obliged to keep (for example, payment invoices) are retained for the periods in Section 11 and are not used for any other purpose.

You may also request deletion by emailing support@fidhatechnologiesprivatelimited.in from the address associated with your registered mobile number, or by writing to the address in Section 14. We respond within 30 days.

12.2 Other rights

Access and portability — request a copy of the personal data we hold about you.
Correction — edit your name, photo and profile details in the App, or ask us to correct other data.
Withdraw consent — revoke microphone, camera, photo or notification permissions in Android Settings > Apps > Fidha > Permissions. Some features will stop working.
Opt out of ad personalisation — reset or delete your Advertising ID in Android Settings > Privacy > Ads.
Object or restrict — where applicable law provides these rights, ask us to stop or limit certain processing.
Complain — lodge a complaint with your local data protection authority.

We do not discriminate against you for exercising any of these rights.

13. Children’s privacy

The App is rated and intended for adults aged 18 and over. We do not knowingly collect data from children. Parents or guardians who believe a minor has provided us with personal information should contact us at the address below so we can delete it.

14. Contact us

Fidha Technologies Private Limited
Grievance / Data Protection Contact

Email	support@fidhatechnologiesprivatelimited.in
Website	https://fidhatechnologiesprivatelimited.in
Address	Insert full registered office address, city, state, PIN, India
Phone	Insert contact number

We aim to acknowledge every privacy request within 7 days and resolve it within 30 days.

15. Changes to this policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, notify you in the App or by push notification before the change takes effect. Continued use of the App after the effective date means you accept the updated Policy.