Privacy Policy

Last updated: May 2025

This Privacy Policy explains how Megayo Technologies Private Limited ("Megayo", "we", "us", "our") collects, uses, stores, and protects your personal data when you use the Duvvo mobile application ("Platform"). It also explains your rights under applicable law.

This Privacy Policy should be read together with our Terms of Use and Community Guidelines. By using Duvvo, you agree to the collection and use of your data as described in this Policy.

Duvvo is designed with privacy as a core value. We collect the minimum data required to operate the Platform and we never sell your data to any third party.

1. WHAT Duvvo IS DESIGNED NOT TO COLLECT

We want to be clear about what we deliberately do not collect, because this is central to how Duvvo works:

Your real name - not required, not collected
Your photograph or face data - Duvvo has no photo upload feature
Your location - we do not collect or store GPS or location data
Your government ID or Aadhaar number
Your voice call content - Duvvo does not record or store any voice calls
Your call transcripts - we do not transcribe or analyse call content
Your card number, UPI ID, or bank account details - handled entirely by our payment gateway partner

Duvvo DOES NOT RECORD, STORE, OR LISTEN TO ANY VOICE CALL MADE ON THE PLATFORM. EVER.

2. WHAT WE DO COLLECT

At Registration

Mobile phone number - used for OTP verification and account identification
Gender - used for platform matching and profile display
Age confirmation - to verify you are 18 or older
Chosen username - your display identity on the Platform

During Platform Use

Call metadata - duration of call, time of call, which listener was called. Not the content of the call.
Coin transaction history - amount purchased, date, transaction reference from payment gateway
Reports submitted by you - to action safety concerns
Reports made against you - for moderation review
Device ID and app version - for fraud prevention and technical troubleshooting

Automatically Collected

IP address - for security and fraud detection
App usage data - screens visited, features used, session duration
Crash reports and error logs - for improving app stability

3. HOW WE USE YOUR DATA

We use the data we collect only for the following purposes:

To verify your identity at registration via OTP
To operate and display your profile on the Platform
To process Coin purchases and maintain your Coin balance
To enable voice calls between users
To enforce our Terms of Use and Community Guidelines
To investigate and action safety reports
To improve the technical performance of the Platform
To comply with applicable Indian law and respond to lawful government requests

We do not use your data for advertising profiling. We do not share your data with advertisers. We do not build behavioural profiles for third-party marketing.

4. HOW WE HANDLE PAYMENTS

Coin purchases on Duvvo are processed by a third-party payment gateway partner. We do not collect, store, or have access to your card number, UPI ID, net banking credentials, or any other payment instrument details.

When a Coin purchase is completed, we receive only:

Confirmation that the transaction was successful
The amount paid
A transaction reference number from the payment gateway

Your full payment data remains with the payment gateway and is governed by their privacy policy. We will disclose the name of our payment gateway partner within the Platform.

5. WHO WE SHARE YOUR DATA WITH

We share your personal data only in the following limited circumstances:

Payment Gateway

We share your phone number and transaction amount with our payment gateway partner for processing Coin purchases. No other data is shared.

Law Enforcement and Government Authorities

We will share data with law enforcement agencies, courts, or government authorities when we are legally required to do so under Indian law, including in response to court orders, subpoenas, or directions from competent authorities. We will notify you of such requests where we are legally permitted to do so.

Safety and Child Protection

In cases involving potential child exploitation or serious threat to safety, we will share relevant data with the National Crime Records Bureau (NCRB), Interpol, or other law enforcement agencies without waiting for a formal court order.

Business Transfer

If Megayo Technologies Private Limited is acquired by or merges with another entity, your data may be transferred as part of that transaction. We will notify you in advance and your data will continue to be governed by a privacy policy of equivalent or greater protection.

WE NEVER SELL YOUR PERSONAL DATA TO ANY THIRD PARTY. EVER.

6. DATA RETENTION

We retain your data only for as long as necessary:

Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
Call metadata (duration, time, listener called): Retained for 90 days for safety review, then permanently deleted. Call content is never recorded.
Coin transaction history: Retained for 2 years to comply with financial record-keeping requirements under Indian law.
Safety reports and moderation records: Retained for 3 years to enable pattern detection and legal compliance.
Device ID and fraud signals: Retained for up to 1 year after account deletion for fraud prevention.

7. YOUR RIGHTS UNDER DPDP ACT 2023

Under India's Digital Personal Data Protection Act, 2023, you have the following rights:

Right to access: You may request a summary of the personal data we hold about you.
Right to correction: You may request correction of inaccurate personal data.
Right to erasure: You may request deletion of your personal data. We will comply within 30 days except where retention is required by law.
Right to grievance redressal: You may raise a complaint with our Grievance Officer if you believe your data rights have been violated.

To exercise any of these rights, write to: grievance.officer@duvvo.app

8. COOKIES AND TRACKING

Duvvo is a mobile application. We do not use browser cookies. We use the following on-device identifiers:

Device ID: For fraud prevention and to enforce account suspensions
App session token: To keep you logged in securely

We do not use cross-app tracking or third-party advertising SDKs.

9. SECURITY

We implement industry-standard technical and organisational security measures to protect your personal data, including:

Encrypted data transmission (TLS/HTTPS) for all network communication
Encrypted storage for sensitive account data
Access controls limiting employee access to personal data
Regular security reviews and vulnerability assessments

No platform can guarantee absolute security. If we become aware of a data breach that affects your personal data, we will notify you as required under applicable Indian law.

10. CHILDREN'S PRIVACY

Duvvo is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. If we discover or are informed that a user is under 18, we will immediately terminate that account and delete all associated personal data.

If you believe a minor is using Duvvo, please report it immediately to: safety@duvvo.app

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification. Your continued use of Duvvo after any update constitutes your acceptance of the revised Privacy Policy.

12. CONTACT AND GRIEVANCE

For any privacy-related question, concern, or request, contact our Grievance Officer:

Name: Jay Yadav
Email: grievance.officer@duvvo.app
Address: Megayo Technologies Private Limited, Bengaluru, Karnataka, India
Office Hours: 10:00 AM to 6:00 PM, Monday to Saturday

We will acknowledge your request within 24 hours and resolve it within 15 working days in accordance with the IT Rules, 2021 and DPDP Act, 2023.

Megayo Technologies Private Limited | Bengaluru, Karnataka, India
grievance.officer@duvvo.app | safety@duvvo.app