Privacy Policy
Effective 27 October 2026. BharatApp Chat ("we") is operated by Kalisi Media Private Limited, Bengaluru, Karnataka, India. This policy covers the BharatApp Chat Android app and bharatapp.chat.
1. What we collect and why
| Data | Why | How long |
|---|---|---|
| Gmail address | Verify sign-up and log-ins with a one-time code. Never shown to other users. | Until you delete your account |
| @username, display name, profile photo | So people can find and recognise you. Visible to people you connect with. | Until you delete your account |
| Password check value and salt | Confirm your password when you log in. We never receive your password itself. | Until you delete your account |
| Public encryption key | Lets others send you encrypted messages. | Until you delete your account |
| Connections and blocks | Who you have accepted or blocked. | Until you delete your account |
| Encrypted messages in transit | We relay them; we cannot read them. Each copy is deleted the moment the device collects it. | Until delivered (at most 30 days) |
| Status posts (text, photo, voice, video) | Shown to your contacts. Status posts are not end-to-end encrypted. | 24 hours |
| Fingerprints of forwarded messages | When you forward a message the app sends a one-way fingerprint (SHA-256) of it — never the content — and who it came from. Used only to answer a lawful order under Indian law to identify the first originator of a message. Ordinary messages are never fingerprinted. | 180 days |
| Device push token | To deliver notifications (via Google Firebase Cloud Messaging). | While you use the app |
| Logged-in devices, last seen | Keep you logged in on each device; show "last seen" if you allow it. | Until you log out or delete your account |
| IP address | Limit how often codes can be requested, to stop abuse. | 1 day |
We do not access your phone contacts, SMS, location or phone number.
2. Google Drive backup
The Android app can keep an automatic backup of your chats in your own Google Drive, in a private app folder that only BharatApp Chat can see and that doesn't touch your other files. The backup is encrypted on your phone with a key that comes from your password before it is uploaded — neither Google nor BharatApp Chat can read it. You can turn it off in Settings, and remove it from Google Drive → Settings → Manage apps.
3. Who we share data with
- Hosting: our servers are hosted by Hostinger.
- Notifications: Google Firebase Cloud Messaging receives your device token and a generic alert ("@name sent you a message"), never message content.
- Email: verification codes are sent from our own mail server.
- Law enforcement: only when required by a valid legal order under Indian law. Because messages are end-to-end encrypted, we cannot disclose their content.
We never sell your data and do not use it for advertising.
4. Your choices and rights
- Change your name, photo and privacy settings in the app.
- Log out of any device, or delete your account at any time.
- Ask us for a copy of the data we hold about you, or to correct it, at support@bharatapp.chat.
5. Security
Messages use end-to-end encryption (ECDH P-256 and AES-256-GCM). Connections to our servers use HTTPS. Your password never leaves your device; the server keeps only a slow, salted check value.
6. Children
BharatApp Chat is not meant for children under 13. If you believe a child has created an account, contact us and we will delete it.
7. Grievance Officer
Under the Information Technology Act, 2000 and the rules made under it, you can contact our Grievance Officer at support@bharatapp.chat, Kalisi Media Private Limited, Bengaluru, Karnataka, India. We acknowledge complaints within 24 hours and resolve them within 15 days.
8. Changes
If we change this policy we will update this page and the date at the top, and tell you in the app for significant changes.
Privacy Policy · Terms of Use · Delete your account