Privacy Policy

Effective Date: March 4, 2026
Last Updated: March 4, 2026

1. Scope of This Policy

This Privacy Policy applies to:

• The Bouge mobile application
• Related APIs and backend infrastructure
• Official websites operated by Tydon Technologies Private Limited
• Customer support communications

This Policy does not apply to third-party services that may be linked within the Service.

2. Information We Collect

We collect information necessary to operate, secure, and improve the Service.

A. Information You Provide

• Phone number (required for account registration)
• Profile name
• Profile image (if uploaded)
• Group participation data
• Messages and content you send
• Poll responses and interactions
• Support communications

B. Automatically Collected Information

• Device type
• OS version
• App version
• IP address
• Approximate location (derived from IP)
• Usage activity
• Log files
• Crash reports
• Session identifiers

C. Authentication Information

• OTP verification status
• Authentication tokens
• Session timestamps

D. Analytics Data

We collect usage metrics for:

• Performance optimization
• Feature usage analysis
• Security monitoring
• Abuse detection

Analytics may include event logs, timestamps, device metadata, and interaction metrics.

3. Anonymous Messaging ("Ghost Mode")

4. How We Use Information

We process information for legitimate business purposes, including:

• Account creation and authentication
• Delivering messaging services
• Group management functionality
• Fraud prevention
• Abuse detection and moderation
• Security monitoring
• Legal compliance
• Analytics and product improvement
• Enforcing our Terms of Service

5. Legal Basis for Processing

Where required by applicable law (e.g., GDPR), we rely on:

• Performance of a contract (providing the Service)
• Legitimate interests (security, fraud prevention, analytics)
• Legal obligations
• User consent (where required)

6. Data Sharing and Disclosure

We do not sell personal data.

A. Service Providers

We may share data with:

• Cloud hosting providers
• Database providers
• Real-time messaging infrastructure providers
• SMS/OTP authentication providers
• Analytics providers
• Security and monitoring services

These providers are contractually bound to process data solely on our behalf.

B. Legal Requirements

We may disclose information if required to:

• Comply with applicable law
• Respond to subpoenas or court orders
• Protect rights, property, or safety
• Prevent fraud or abuse

C. Business Transfers

In case of merger, acquisition, restructuring, or sale of assets, user data may be transferred.

7. Data Retention

We retain data only as long as necessary for legitimate business or legal purposes.

• Active accounts: retained while account remains active
• Deleted accounts: personal identifiers are removed within 30 days, unless required for legal or fraud prevention purposes
• Security logs: retained for operational security
• Backup data: may persist temporarily in encrypted backups

We may retain limited information to:

• Prevent fraud
• Enforce Terms
• Comply with legal obligations

8. Account Deletion

Users may delete their account directly within the application.

Upon deletion:

• Profile information is removed
• Authentication tokens are invalidated
• Personal identifiers are deleted or anonymized
• Messages may remain visible to other participants but disassociated from personal identifiers, unless otherwise required by law

Deletion requests may take up to 30 days to complete.

9. Security Measures

We implement reasonable administrative, technical, and physical safeguards including:

• Encryption in transit (TLS)
• Encrypted storage where applicable
• Access controls
• Role-based internal access
• Infrastructure monitoring
• Abuse detection systems

No system is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for users under 13 years of age (or higher age where required by local law).

We do not knowingly collect personal data from children.

If we become aware that we have collected data from a minor in violation of applicable law, we will take appropriate steps to delete such information.

11. International Data Transfers

Data may be processed in countries outside your jurisdiction, including countries that may have different data protection laws.

By using the Service, you consent to such transfers where legally permitted.

12. User Rights

Depending on your jurisdiction, you may have rights to:

• Access your data
• Correct inaccuracies
• Request deletion
• Restrict processing
• Object to processing
• Request data portability

To exercise these rights, contact:

📧 privacy@tydontech.com

We may verify your identity before responding.

13. Data Safety and Encryption

• We use encryption in transit and apply appropriate safeguards to protect user data
• We do not knowingly sell user data
• We do not share personal data for advertising purposes without consent

14. Changes to This Policy

We may update this Privacy Policy periodically.

We will update the "Last Updated" date and, where required, notify users within the app.

Continued use of the Service after updates constitutes acceptance.

15. Contact Information

Tydon Technologies Private Limited
Mumbai, India

Privacy inquiries:
📧 privacy@tydontech.com