Privacy Notice
Draft for legal review. Highlighted items like [this] must be filled in before this notice is relied on.
In short
- No sign-up, phone number, email or real name. You get a random nickname.
- Calls are never recorded. Voice, chat, photos and GIFs go straight between the two phones and are never stored on our servers.
- The record of who talked to whom is deleted 10 minutes after a call ends, unless someone reports that call.
- We use one essential cookie and no advertising or tracking cookies. We never sell your data.
1. Who we are
iFreeTalk (ifreetalk.in) is an anonymous voice and text chat service for adults in India. It is operated by Sana, Bengaluru, Karnataka, India ("we", "us"). For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here.
2. What we collect
When you start
- An anonymous account: a random account number, a random nickname (which you may change), the date you confirmed you are 18 or older, and which version of the Terms you accepted.
- A device key: a random secret stored in a cookie on your browser, so the app can recognise this device. We store only a one-way scrambled form of it. We also store the browser platform (for example "iPhone") and a scrambled device signal used only to spot abuse, never to identify you.
- A bot check: Cloudflare Turnstile checks that you are a person, using your IP address and browser signals. See Cloudflare's privacy policy.
While you use the app
- Your choices: the language you want to talk in, and your friends, the people you blocked, and direct calls you declined.
- Your IP address, to limit how fast requests can be made, so the service cannot be flooded. It is scrambled before use and the counters expire within an hour. It is not stored with your account.
- Reports you make or that are made about you (see section 5).
We do not ask for or collect your name, phone number, email address, contacts, location or photos from your gallery.
3. Calls, chat and photos
- Voice is encrypted and sent through a relay server run by Cloudflare, so the other person never sees your IP address. The relay passes on encrypted audio it cannot listen to. Nobody records calls, including us.
- Chat messages go directly between the two phones over the same encrypted connection. They are never stored on our servers and are wiped from both phones when the call ends.
- Photos and GIFs you share travel the same way. They are kept only in each phone's memory and disappear 1 minute after being sent, or sooner if the call ends or the sender deletes them. Photos are shrunk before sending, which also removes location and camera details.
- The call record (which two accounts talked, when, for how long, and in which language) is kept in our short-term store during the call and deleted automatically 10 minutes after it ends, so that either person can report it in that time.
The other person can always take a screenshot or record their screen. We cannot prevent this, so do not share anything you would not want kept.
4. Why we use it
- To run the service: match you with someone, connect the call, deliver chat, and let you add friends and call them.
- To keep people safe: check you are a person, limit abuse, act on reports, and suspend accounts that break the rules.
- To keep the service working: count totals such as calls per day, which contain nothing about any individual.
We process your data on the basis of the consent you give when you start, and, for safety and legal duties, as permitted by law. You may withdraw consent at any time by stopping use and asking us to delete your account (section 8).
5. How long we keep it
| Data | Kept for |
|---|---|
| Voice, chat messages | Never stored |
| Photos and GIFs | Never stored on our servers; 1 minute on the phones |
| Call record (who, when, how long) | Deleted 10 minutes after the call, unless reported |
| Room codes (the code and which account made it) | Deleted when used or cancelled, or after 10 minutes |
| Rate-limit counters (scrambled IP) | Up to 1 hour |
| Reported call details, the report, and any photos attached to it | Until a moderator closes the report, then 180 days |
| Suspensions | 180 days after they end |
| Account, nickname, friends, blocks, declined calls | Until you ask us to delete the account, or 365 days after you last used the app |
7. On your device
-
One essential cookie,
gst_device, holding your device key. It lasts up to 400 days. Without it the app cannot recognise you. - Browser storage for your settings, the app language you chose, and your recent calls list, which deletes itself 10 minutes after each call.
Clearing your browser's data removes all of these and signs this device out.
8. Your rights
Under Indian law you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct or update it (you can change your nickname yourself in Options);
- delete your account and its data;
- name someone to act for you if you die or cannot act yourself.
Write to support@ifreetalk.in and include your nickname, which is shown in the app's Options. Because accounts are anonymous, we may ask you to confirm from the same device that the account is yours. We reply within 30 days.
9. Security
Everything travels encrypted. Device keys are stored only in scrambled form. Access to the database is limited to the people who run the service, and moderators sign in with a password and a one-time code. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.
10. Children
iFreeTalk is only for people aged 18 or older. We do not knowingly collect data from children. If you believe a child is using it, report the call in the app or write to us, and we will close the account.
11. Changes
If we change this notice in a way that matters, the app will ask you to accept the new version before you continue. The version and date are at the top of this page.
12. Contact and grievances
Complaints: grievance@ifreetalk.in
Address: Bengaluru, Karnataka, India
We acknowledge complaints within 24 hours and resolve them within 15 days, as the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require. If you are not satisfied, you may complain to the Data Protection Board of India.