Chapters | Ardifai
top of page

PRIVACY POLICY

Last Updated: August 5, 2026
This Privacy Policy describes how Ardifai Products and Services LLP ("Company," "we," "us," or "our") collects, processes, stores, discloses, and protects information when you access, download, or use our mobile application, web platform, application programming interfaces (APIs), and related interactive services (collectively, the "Platform").
By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy and our Terms of Service.


1. Information We Collect
A. Information Provided Directly by User

  • Account Registration & Identity Data: Legal name, display name, username, email address, mobile phone number, password (stored via secure cryptographic hashes), profile picture, date of birth, bio, and identity verification credentials (where required by applicable law or security checks).

  • User-Generated Content (UGC): Text, posts, audio recordings, video files, photographs, graphic media, metadata embedded within media files (EXIF data), direct/group communications, status updates, tags, ratings, and comments submitted to or transmitted via the Platform.

  • Communications & Inquiries: Any records, messages, feedback, support tickets, or regulatory notices sent directly to the Company.

B. Data Collected Automatically & Technical Telemetry

  • Device Identifiers & Hardware Attributes: Hardware model, unique device identifiers (e.g., IMEI, Android ID, GAID, IDFA), operating system name and version, CPU architecture, screen resolution, system language, and network connection parameters.

  • Network & Security Logs: IP addresses (IPv4/IPv6), Internet Service Provider (ISP), domain servers, access timestamps, HTTP request headers, user-agent strings, referring URLs, error logs, and session tokens.

  • Behavioral & Usage Telemetry: Platform interaction events, feature utilization, scroll depth, clickstream data, search queries, interface responsiveness, performance metrics, and application crash reports.

  • Location Data: Precise geographical location (GPS, Wi-Fi access points, cell tower data) where explicit device permissions are granted, or approximate location derived from IP addresses.

  • Tracking Technologies: Cookies, local browser storage, web beacons, Software Development Kits (SDKs), and session tokens utilized to manage authentication, fraud prevention, and system diagnostics.
     

2. Legal Basis and Purposes of Data Processing
We process personal data strictly under valid legal bases—including performance of a contract, compliance with legal obligations, legitimate business interests, and explicit consent—for the following exhaustive purposes:

  • Platform Operations: Authenticating accounts, facilitating connections, rendering User-Generated Content, enabling real-time messaging, and processing transactions.

  • Security, Integrity & Anti-Abuse: Implementing defensive security mechanisms, preventing brute-force attacks, detecting illegal activities, mitigating spam, identifying unauthorized bot activity, and preventing system exploit/intrusion.

  • Automated & Manual UGC Moderation: Scanning, analyzing, and filtering public and private communications (where permitted by law) for illicit media, hate speech, malware distribution, harassment, impersonation, or intellectual property theft.

  • Analytics & Performance Optimization: Monitoring infrastructure load, identifying software bugs, analyzing latency, and optimizing platform performance.

  • Regulatory Compliance & Enforcement: Responding to lawful subpoenas, warrants, court orders, and governmental inquiries; maintaining accounting records; and enforcing our Terms of Service.
     

3. Mandatory User Disclaimers & Disclaimers of Liability
A. User-Generated Content (UGC) Disclaimer & Indemnification
To the maximum extent permitted by applicable law:

  1. No Endorsement or Ownership: The Company does not endorse, verify, control, monitor for truthfulness, or assume any legal liability or responsibility for any User-Generated Content (UGC) posted, stored, or transmitted by users or third parties on the Platform.

  2. Third-Party Conduct: The Company accepts zero liability for any defamatory, illegal, infringing, fraudulent, tortious, or offensive conduct or content originating from users, unauthorized third parties, or malicious actors.

  3. User Sole Responsibility: Users remain solely, fully, and legally responsible for all content published, transmitted, or distributed under their account credentials.

B. Limitation of Liability for Cybersecurity Incidents & Hackers
While the Company implements commercial-grade administrative, technical, and physical safeguards designed to protect personal information, no security architecture, database, or network transmission is completely impenetrable or immune to breach.

  1. No Guarantee of Absolute Security: THE COMPANY DOES NOT WARRANT OR GUARANTEE THAT THE PLATFORM, DATABASE, OR USER DATA WILL BE 100% SECURE FROM UNAUTHORIZED ACCESS, EXPLOITATION, MALWARE, RANSOMWARE, ZERO-DAY ATTACKS, PHISHING, HARDWARE FAILURE, OR OTHER MALICIOUS ACTS EXECUTED BY THIRD PARTIES ("HACKERS").

  2. Disclaimer of Consequential Damages: TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY, ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AND LICENSORS SHALL NOT BE HELD LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES—INCLUDING BUT NOT LIMITED TO LOSS OF DATA, UNAUTHORIZED DATA EXFILTRATION, ACCOUNT COMPROMISE, FINANCIAL LOSS, REPUTATIONAL DAMAGE, OR SYSTEM DOWNTIME—ARISING FROM OR RELATED TO SECURITY BREACHES OR UNAUTHORIZED ACCESS BY THIRD PARTIES.

  3. Assumption of Risk: YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT YOU TRANSMIT DATA ACROSS PUBLIC NETWORKS AND USE THE PLATFORM AT YOUR OWN SOLE RISK.
     

4. Disclosure & Sharing of Information
The Company does not monetize or sell your personal data. Disclosures occur strictly under the following mandatory conditions:
A. Third-Party Service Providers & Infrastructure Operators
We share limited data with authorized service providers under data processing agreements requiring strict compliance with confidentiality and security standards. Categories include:

  • Cloud hosting and server infrastructure providers.

  • Database management and Content Delivery Networks (CDNs).

  • Automated content safety, anti-abuse, and moderation APIs.

  • Analytics, crash reporting, and diagnostic tools.

B. Mandatory Legal Disclosures & Emergency Requests
The Company reserves the right to disclose personal data, logs, IP histories, and communication records without prior notice to law enforcement agencies, judicial bodies, regulatory entities, or authorized third parties if we determine in good faith that such disclosure is reasonably necessary to:

  • Comply with valid legal process, court orders, warrants, or regulatory mandates.

  • Detect, prevent, or address fraud, security breaches, technical vulnerabilities, or cyberattacks.

  • Investigate violations of our Terms of Service or Privacy Policy.

  • Protect against imminent harm to the safety, property, or legal rights of the Company, its users, or the general public.

C. Corporate Mergers, Acquisitions & Asset Sales
In the event of a merger, acquisition, reorganization, bankruptcy, receivership, or sale of company assets, user databases and collected information may be transferred or assigned to the acquiring corporate entity as a business asset.
5. Account Deletion Rights & Data Retention
In accordance with Google Play Store policies and global regulatory frameworks, users maintain complete control over account deletion:
A. Mechanisms for Account Deletion

  • In-App Account Deletion: Access Settings > Account > Delete Account within the mobile application and complete the identity confirmation steps.

  • Web-Based Deletion Portal: Submit a formal account deletion request online via our dedicated web portal located at https://[yourdomain.com]/delete-account.

B. Data Retention & Archival Policy

  • Immediate Removal: Upon confirmation of an account deletion request, user profiles, public posts, friend connections, and active database entries will be deactivated immediately and purged from production systems within thirty (30) days.

  • Backup Disposals: Copies stored in disaster-recovery backups are permanently overwritten in accordance with standard data retention schedules (not to exceed ninety (90) days).

  • Mandatory Legal Preservation: Notwithstanding account deletion, the Company explicitly retains the legal right to preserve specific transactional records, system logs, IP access data, and account details for extended periods if required by tax laws, active law enforcement investigations, legal holds, or fraud prevention requirements.
     

6. Global Privacy Rights (GDPR, CCPA, & Applicable Regulations)
Depending on your geographic location and local privacy laws, you may exercise the following statutory rights regarding your personal information:

  • Right of Access / Disclosure: Request detailed documentation regarding the categories and specific pieces of personal data collected, stored, or processed.

  • Right to Rectification: Request corrections to inaccurate, incomplete, or outdated personal data.

  • Right to Erasure ("Right to be Forgotten"): Request permanent deletion of personal data, subject to legal retention exceptions.

  • Right to Restriction & Object: Object to or restrict specific data processing operations, including automated profiling or targeted communication.

  • Right to Data Portability: Obtain a structured, machine-readable export of personal data submitted directly to the Platform.

To submit a verified data subject request, contact our Data Protection Officer at privacy@[yourdomain.com].
7. Device Permissions
To deliver full social platform features, the Platform may request hardware-level device permissions:

  • Camera & Microphone: To record video, take photographs, stream live content, and enable audio/video communication features.

  • Photo Library & File Storage: To upload, edit, and share media files stored on your local hardware.

  • Contacts: (Optional) To scan contacts and recommend social connections within the Platform.

  • Location Services: (Optional) To enable localized discovery, attach location data to posts, and enhance security detection.

Permissions can be granted or revoked at any time via your device's operating system settings.
8. Children's Privacy (COPPA & International Protections)
The Platform is not directed to or intended for individuals under the age of thirteen (13) (or under sixteen (16) in certain legal jurisdictions, such as the European Union). We do not knowingly collect, solicit, or maintain personal information from children. If we discover that personal data of a minor has been collected without verified parental consent, we will immediately purge such data and terminate the associated account.
9. Security Architecture & Incident Notification
We employ industry-standard technical measures including TLS/SSL encryption for data in transit, AES-256 bit encryption for sensitive data at rest, role-based access controls, and network firewalls.
In the event of a confirmed security incident or data breach impacting your personal information, the Company will notify affected users and regulatory authorities in strict compliance with applicable statutory breach notification laws.
10. Policy Modifications
The Company reserves the right to amend, update, or replace this Privacy Policy at any time at its sole discretion. Material changes will be communicated by updating the "Last Updated" date at the top of this page, issuing an in-app notice, or sending an electronic notification to your registered email address. Continued use of the Platform following published revisions constitutes full acceptance of the revised terms.
11. Contact Information & Legal Inquiries
For questions, statutory data inquiries, security notifications, or regulatory correspondence, please contact:

  • Legal Entity Name: Ardifai Products and Services LLP

  • Attn: Privacy & Data Protection Officer

  • Email Address: info@ardifai.com

  • Physical Address: Kalyan, India

bottom of page