Privacy Policy for NiChat

1. Overview & Developer Identity

This Privacy Policy describes how 14 DIST IT SOLUTIONS PRIVATE LIMITED (referred to as "Company", "we", "us", or "our") collects, uses, protects, and discloses personal data when you access or use the NiChat mobile application (the "App") and its associated services, backend APIs, and web endpoints hosted under https://nichat.cogfocus.com.

NiChat is committed to safeguarding your privacy and ensuring transparency in all our data handling practices in compliance with the Information Technology Act, 2000 (India), the Digital Personal Data Protection (DPDP) Act, and the Google Play Developer Policy on User Data.

2. Information We Collect

We collect only the information strictly necessary to provide real-time messaging, audio/video calling, and super app functionalities:

A. Account & Profile Information

• Phone Number: Used as your primary account identifier and verified securely via SMS One-Time Password (OTP).
• Profile Data: Display name, optional profile picture (avatar), status/about message, and user preferences.

B. Messages & Communications Content

• Chat Messages & Media: Text messages, photos, videos, voice recordings, document files, and 24-hour visual stories shared by you. Messages in transit are encrypted via Transport Layer Security (TLS 1.3). Media files uploaded to chats are securely stored and accessible solely by intended conversation participants.
• Call Signaling Data: Real-time call establishment tokens for audio and video calls powered by peer WebRTC and LiveKit server signaling. Call content is peer-to-peer or media-routed without server eavesdropping.

C. Device & Technical Telemetry

• Device Information: Device model, operating system version, unique device identifier (UUID), and FCM push notification tokens to deliver incoming messages and call rings.
• Network & Log Data: Internet Protocol (IP) address, connection timestamps, and anonymous crash telemetry used strictly for troubleshooting and anti-abuse defense.

3. Sensitive Android Device Permissions

NiChat requests Android runtime permissions only when directly needed to fulfill features you explicitly choose to use. In accordance with Google Play's Dangerous & Sensitive Permissions Policy, the table below provides complete disclosures:

4. How We Use Your Information

We process your personal information strictly for the following legitimate purposes:

• To authenticate your identity and safeguard your account via real SMS OTP verification.
• To transmit and deliver messages, audio/video streams, stories, and service notifications.
• To provide contact discovery so you can easily chat and call your friends and colleagues.
• To detect, prevent, and remediate fraud, unauthorized access, and malicious activities.
• To provide dedicated customer support and address technical inquiries.

5. Data Encryption & Security Measures

We enforce robust technical and organizational security controls designed to prevent unauthorized access, loss, or disclosure of your personal data:

• Encryption in Transit: All communications between the NiChat mobile app, website, and backend servers are strictly encrypted using TLS 1.3 / HTTPS and WSS (WebSocket Secure).
• Database Security: Backend databases are isolated inside a private network, and passwords/sensitive tokens are hashed with PBKDF2/SHA-256.
• WebRTC Media Security: LiveKit audio and video calls employ DTLS (Datagram Transport Layer Security) and SRTP (Secure Real-time Transport Protocol).

6. Third-Party Service Providers

NiChat collaborates with reputable third-party infrastructure providers that process limited data solely on our instructions under confidentiality obligations:

• MSG91 (14 DIST IT SOLUTIONS PRIVATE LIMITED DLT): Used as our official SMS gateway provider to deliver 6-digit One-Time Passwords (OTP) for user registration and login. MSG91 receives the phone number solely to transmit the SMS.
• Firebase Cloud Messaging (Google LLC): Used to deliver push notifications when new messages or calls arrive. FCM receives an anonymous device registration token.
• LiveKit Cloud / WebRTC: Used for real-time video/audio call media transport.

7. User Rights, Account & Data Deletion Policy

In full accordance with Google Play's Account Deletion Requirement, NiChat provides users with straightforward, permanent account and data deletion mechanisms.

How to Delete Your NiChat Account and All Data:

• Direct In-App Deletion: Open NiChat > Settings > Account & Privacy > Tap Delete My Account > Confirm with OTP.
• Web / Email Request: If you are unable to access the app, you may email our Data Protection team at privacy@cogfocus.com or support@cogfocus.com with the subject "Account Deletion Request" and your registered phone number.

8. Children's Privacy

NiChat does not knowingly collect or solicit personal data from children under the age of 13 (or under 16 in certain jurisdictions). If we learn that we have collected personal data from a child without verified parental consent, we will immediately take steps to permanently delete that information from our records.

9. Contact Information & Grievance Officer

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our designated Grievance & Privacy team: