Privacy Policy

1. Introduction

Welcome to Funtoosh. We are an anonymous Q&A, confession, chat and calling platform made in India, built on the principle that privacy is a human right. This Privacy Policy describes how Bhavyahaan Technology ("Funtoosh," "we," "us," or "our") handles information when you use our website, progressive web app, and related services (collectively, the "Platform").

We have designed Funtoosh to minimise data collection by default. Our architecture prioritises pseudonymity between users, encryption in transit and for designated sensitive records, and user control. Funtoosh is not end-to-end encrypted. This policy is structured to be transparent and compliant with the Digital Personal Data Protection Act, 2023 (India), Information Technology Act, 2000, and general international privacy practices including principles from GDPR and CCPA, without claiming certification where none exists.

2. Definitions

• Personal Data: Information that relates to an identified or identifiable individual, even if we do not collect it by design.
• Anonymous Data: Data that cannot be used to identify an individual, including aggregated usage metrics.
• Encryption: Content is protected by HTTPS/TLS while it travels, and designated sensitive records use application-level encryption. Funtoosh is not end-to-end encrypted and can read content where a report, an investigation or the law requires it.
• Wallet Data: Your wallet balances, transaction history, KYC documents (only if you submit them) and withdrawal details, kept for fraud prevention and regulatory compliance.
• Essential Cookies: Small storage items required for theme, language, and secure session functionality.

3. Privacy Principles

1. Data Minimization: We collect only what is essential to provide anonymous Q&A, confessions, chat and calls, sign-in, the wallet, Funtoosh Plus, ads and the shop.
2. Purpose Limitation: Any data we process is used solely for providing, securing, and improving the Platform.
3. Storage Limitation: We retain data only as long as necessary for stated purposes.
4. Security by Design: Encryption, secure headers, and privacy-preserving architecture are default.
5. User Control: You control your profile visibility, blocking, reporting, and account deletion.

4. Data We Collect

4.1 Account & Profile

• Email address and a password hash (bcrypt) — or your Google account email and name if you sign in with Google
• Name, unique username, avatar, bio, date of birth (to confirm you are 18+), gender and city, as you fill them in
• Optional two-factor secret (authenticator app) and one-time backup codes, stored hashed
• Notification and discovery preferences, blocked users, reports you file

4.2 Content

• Questions, answers, Results, confessions, suggestions, chat messages, images you upload, and Golden Card / Cross Finger requests
• Call metadata (who called whom, duration, billed minutes). Call audio and video are relayed in real time and are not recorded by Funtoosh

4.3 Wallet, Payments & Shop

• Wallet balances, every credit and debit, invoices and GST records
• KYC documents (PAN, Aadhaar, selfie) only if you apply for withdrawals; bank account or UPI ID used for withdrawals
• Payment gateway references (order and payment IDs). Card numbers, CVV and OTPs never reach Funtoosh — wallet top-ups are handled by PayGlocal
• Shop orders: delivery name, phone number and address, order and shipment history

4.4 Technical & Security

• IP address, device and browser type, and timestamps in security and rate-limit logs
• Push notification tokens for devices where you enable notifications
• Aggregated, de-identified usage counts (for example the public member/question totals on the home page)

5. What We Do Not Collect

• Phone number or SIM verification (not required)
• Precise GPS location, contacts upload, or address book access (city is only what you type in; the shop delivery address is only what you enter for an order)
• Call recordings — audio and video calls are not recorded
• Behavioral profiling, advertising trackers, or third-party analytics cookies
• Government ID for using the platform — ID documents are collected only for wallet KYC when you choose to withdraw earnings

6. Encryption & Security

6.1 Content & Anonymity

All traffic is protected with HTTPS/TLS in transit, and designated sensitive records use application-level encryption. Chat text is end-to-end encrypted as it rolls out: the key is derived on your device, it is not sent to us, and we store only ciphertext. Chat photos and videos, calls, questions, answers, Results, and the system cards we generate are not end-to-end encrypted, and we can read them where a report, an investigation or the law requires it.

When you report an encrypted message, up to ten messages before and after it are decrypted on your device, re-encrypted to a moderation key whose private half is held offline by Funtoosh, and stored for 90 days for review. We ask for your consent first, and the default is Cancel. You can delete your own copy of a chat at any time, but that does not delete the other person's copy.

• Answers, confessions and anonymous chats hide your identity from other users; the Golden Card reveal happens only when both people accept
• Messages do not expire automatically and there is no screenshot detection — do not share anything you would not want kept

6.2 Account Protection

• Password sign-in (bcrypt-hashed, rate-limited) or Google sign-in; password-reset codes expire after 10 minutes
• Optional two-factor authentication with an authenticator app; wallet protected by a separate PIN (and biometric unlock on supported Android devices)
• Secure cookies: HttpOnly, SameSite=Lax, Secure on HTTPS
• Security monitoring for abuse detection and spam detection
• Blocking users and reporting users features to enhance privacy protection

7. Cookies & Local Storage

Essential Cookies Only

• funtoosh_server_session cookie: secure sign-in session (HttpOnly, server-signed), up to 30 days
• funtoosh_lang cookie: your language choice (EN/HI), 1 year
• funtoosh_wallet_unlock cookie: proof you entered your wallet PIN recently, 15 minutes; funtoosh_app_lock cookie if you enable the app lock
• Local storage on your device: theme, language (EN/HI), the policy version you last accepted, and your display name/avatar for instant paint — never an auth token

No tracking cookies. No Google Analytics or advertising pixels. Local storage holds your theme/language choice, the session mirror the app reads on start, message drafts (local only) and the service worker cache for offline support.

8. Data Retention & Deletion

Under the Digital Personal Data Protection Act, 2023 (India), you have the right to erase your personal data. You can request account deletion at any time under Settings → Account → Delete Account.

8.1 30-Day Statutory Grace Period & Day 1 Invisibility

• Immediate Platform Invisibility (Day 1): The instant deletion is confirmed by typing DELETE, your account is immediately hidden across Funtoosh. Your public profile (/u/[username]), posts, answers, and discovery listings become completely inaccessible to other users (returning 404). Any revealed names or photos on answers or confessions are suppressed immediately. You will no longer receive notifications, calls, messages, or marketing communications.
• Cancellation & Exact Restoration: You may cancel the pending deletion at any point during the 30-day countdown by logging into Funtoosh and selecting "Cancel Deletion". Cancellation immediately restores your account, profile, content, discover visibility, and settings to their exact pre-deletion state.
• Permanent Irrevocable Finalisation (Day 30): Once the 30-day grace period elapses, the deletion is permanent and irreversible. Your profile, authentication credentials, and personal data are permanently erased from active systems.

8.2 Statutory Compliance & Retention Schedule

• Compliance Audit Trail (DPDP Rule 4(4)): When an account deletion is requested, cancelled, or finalised, an automated immutable compliance entry is recorded in our audit log solely to demonstrate adherence to statutory erasure obligations under the DPDP Act. This entry contains zero plaintext personal data: all subject references are pseudonymised using cryptographic one-way hashes (HMAC-SHA256). These compliance records are retained for strictly 365 days and then permanently destroyed.
• Financial & Tax Records: Invoice and tax records are retained for 8 years from the end of the financial year, as mandated by Section 44AA of the Income Tax Act, 1961, Rule 6F of the Income Tax Rules, and applicable anti-fraud laws.
• Chat Conversations: Upon account finalisation, your user identifier is removed from conversation threads (set to null). The counterparty retains access to the conversation history, with your identity permanently masked as "Funtoosh User".
• Active Sessions & Push Tokens: All device push tokens and active login sessions are revoked and purged immediately upon deletion request.

9. Your Rights

Under applicable laws, you have the right to:

• Access your account data (profile and wallet history JSON export)
• Correction of inaccurate name or email
• Deletion of account and associated data
• Opt-out of optional discovery, read receipts, typing indicators
• Withdraw consent at any time from Settings → Account → Manage consent, as easily as you gave it — no email round-trip. See section 9.1 for exactly what a withdrawal does and how to come back
• Complain to the Data Protection Board of India under Section 13(3) of the DPDP Act, 2023 if you are not satisfied with our response to a grievance

To exercise rights, contact [email protected] or the Grievance Officer at /grievance-redressal. We respond within 30 days; grievances are resolved within 15 days as required by the IT Rules 2021.

9.1 Withdrawing your consent

You can withdraw your consent to our processing of your data at any time. It is as easy as giving it: open Settings → Account → Manage consent and confirm the withdrawal, or email [email protected] and we will do it for you. When you withdraw your consent:

• Processing stops immediately. Funtoosh locks to a single consent screen. You can no longer browse, post, chat, or make or take calls.
• Nothing is deleted. Your profile, content, wallet, and messages stay exactly where they are. Withdrawing consent is a pause, not an erasure.
• You are hidden from other users. Your public profile returns 404, discovery and search stop showing you, and in existing conversations your name is shown as "Funtoosh User".
• Signing in again does not restore access. You land on the consent screen again. Only approving the policy there restores your account — and it restores everything exactly as it was.
• If you want to leave permanently instead, the consent screen offers "Delete my account instead", which starts the normal 30-day cancellable deletion described in section 8.

10. Children's Privacy

Funtoosh is for adults only — users aged 18 and over. Under the DPDP Act 2023 a person under 18 is a Child; we do not knowingly create, operate or process accounts for children, and we do not rely on parental consent for processing children's data. If you believe someone under 18 has created an account, contact [email protected] and we will remove it promptly.

11. Where Your Data Is Stored

Funtoosh runs on servers rented from Hetzner in Germany, managed by our team through Coolify, with a self-hosted Supabase/Postgres database on the same infrastructure. This means your data is stored outside India (in the European Union). Content is encrypted in transit, access is limited to the staff who need it, but it is readable by us. Payment details for wallet top-ups are processed by PayGlocal; Google sign-in data is processed by Google; push notifications are delivered through Firebase. We will update this section if the hosting location changes, and we do not transfer data to any country the Central Government restricts under Section 16 of the DPDP Act.

12. User Responsibilities

• Keep your email and password secure; never share one-time codes or your wallet PIN
• Do not share identifiable information if you wish to remain anonymous
• Respect others' privacy; do not attempt to de-anonymize, dox, or collect personal data of others
• Use blocking and reporting features for unwanted interactions
• Keep device OS and app updated

13. Platform Responsibilities

• Provide a privacy-preserving architecture with encryption in transit and for designated sensitive records, data minimisation, and limited internal access
• Implement content moderation for reported content, spam detection, and abuse prevention
• Maintain security monitoring, fraud prevention, and rate limiting
• Provide transparent policies and timely security updates
• Honor deletion and data rights requests within stated timelines

14. Changes to This Policy

We may update this policy to reflect Platform improvements, regulatory changes, or security enhancements. Material changes will be notified via in-app banner and posted at /privacy with a 30-day notice period where required. Version history will be maintained. When re-acceptance is required, you must affirmatively accept the updated policy in Funtoosh before continuing to use protected account features — continued use alone is never treated as consent. We also ask you to re-confirm the rules at least every 90 days.

15. Contact Information

For privacy inquiries, data rights requests, or grievances:

• Privacy Team: [email protected]
• Security Team: [email protected]
• Support: [email protected] — reply within 24 hours (Mon–Sat, 10 AM – 6 PM IST)
• Grievance Officer: [email protected] — Per IT Act and DPDP Act requirements, details at /grievance-redressal
• Postal: Funtoosh, Attn: Privacy, D 24/8, Himalay Bhawan, Shatabdi Nagar, Panki, Kanpur, Uttar Pradesh 208020, India — Contact via email preferred

Funtoosh is operated by Bhavyahaan Technology, Kanpur, Uttar Pradesh, India, and is offered to users in India.