Privacy Policy

Effective date: 21 May 2026
Last updated: 21 May 2026

This Privacy Policy explains how Mitraa Technologies Pvt. Ltd (“Mitraa”, “we”, “us”) collects, uses, shares, and safeguards information when you use the Mitraa mobile application, our website at mitraa.shop and its subdomains, and any related services (collectively, the “Service”).

This policy is published in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as well as the Digital Personal Data Protection Act, 2023 (when in force).

1. Who we are

Mitraa is operated by Mitraa Technologies Pvt. Ltd, a company organised under the laws of India, with registered office at 312, World Tech Park, Gurgaon, Haryana. Our Grievance Officer can be contacted at grievance@mitraa.shop.

2. Information we collect

2.1 Information you provide

• Account information — your phone number (verified via one-time password), display name, profile photo, gender, date of birth, language preference, and bio.
• Host application data (only if you apply to become a host) — additional profile photos, an introduction video, languages spoken, tags describing your interests, your per-minute call rate, and government-issued identification we may request for verification.
• Payment information — for coin purchases, payment is processed by Razorpay. We receive transaction references but do not store your full card number, UPI PIN, or net-banking credentials.
• Payout information (hosts only) — UPI ID or bank account details for receiving withdrawals.
• Content you share — chat messages, gifts, and any media you upload.
• Reports and feedback — content you submit when reporting another user.

2.2 Information collected automatically

• Device information — device model, operating system version, application version, language and region settings, mobile network and carrier, and a generated installation identifier.
• Usage information — screens viewed, features used, call duration, time and date of activity, error and crash logs.
• Network information — IP address, approximate location derived from IP, and connection type.
• Push notification token — provided by Firebase Cloud Messaging so we can send you alerts.

2.3 Information we do not collect

• We do not record voice or video calls. Calls are real-time only, transported by Agora.
• We do not access your precise GPS location.
• We do not read your contacts, SMS, or call logs.

3. Permissions we request on your device

• Phone state / SMS — only to auto-fill the OTP during sign-in (optional).
• Microphone — required for voice and video calls.
• Camera — required for video calls and to capture profile / host photos.
• Photo library — to upload profile pictures and chat media.
• Notifications — to alert you about incoming calls, messages, and account events.

You can revoke any of these at any time from your device settings. Some features depending on a revoked permission will stop working.

4. How we use your information

We process your data to:

• create and operate your account, authenticate you via OTP, and keep your session secure;
• connect you with hosts and other users for voice / video calls and chat;
• process coin purchases and manage your wallet balance;
• process host payouts subject to applicable taxes (including TDS where required);
• moderate the platform, review reports, and enforce our Terms of Service;
• send transactional notifications (OTP, recharge success, missed calls, gift received, withdrawal status);
• improve product quality and diagnose errors;
• comply with applicable law, court orders, and lawful government requests.

5. Legal bases for processing

Where applicable data-protection law requires us to have a legal basis, we rely on: (a) the contract between you and us to provide the Service; (b) your consent for optional features such as push notifications; (c) our legitimate interest in operating, securing, and improving the Service; and (d) compliance with our legal obligations.

6. Sharing of information

We share data only with the parties below and only as needed.

• Other users — your display name, avatar, host profile fields, and the gifts and messages you send are visible to the people you communicate with.
• Service providers
  • Firebase (Google) — phone OTP verification, push notifications, crash analytics.
  • Agora — real-time voice and video transport (we do not record calls).
  • Razorpay — payment processing for coin purchases.
  • Amazon Web Services — hosting of our servers and storage of profile / chat media in India region (ap-south-1).
  • SMS providers used by Firebase for OTP delivery.
  Each processor handles your data only on our instructions and under written contracts.
• Law enforcement and authorities — when required by a valid legal request under Indian law, after appropriate review.
• In a corporate transaction — if Mitraa is acquired, merged, or its assets are transferred, your data may be transferred to the successor entity, subject to this Policy.

We do not sell your personal information.

7. International transfers

Our primary infrastructure is in India (AWS Mumbai, ap-south-1). Some service providers (Google, Agora) may process limited data outside India. When this happens, we ensure appropriate contractual safeguards.

8. Data retention

• Account data: kept while your account is active and for up to 180 days after deletion, unless a longer period is required by law (for example, tax records are kept for 7 years).
• Transaction records: 7 years (as required under the Income Tax Act).
• Chat messages: retained on your device and on our servers as long as either party has not deleted them; the platform may purge messages older than 12 months.
• Call records: metadata (caller, host, duration, charges) retained for 3 years; call audio/video is never recorded.
• Logs and analytics: aggregated and de-identified after 90 days.

9. Your rights

Subject to applicable law, you may:

• access the personal information we hold about you;
• correct inaccurate information through the in-app profile screens;
• request deletion of your account and associated data;
• object to or restrict certain processing;
• withdraw consent (for example, by disabling notifications);
• port your information to another service where technically feasible.

To exercise these rights, email privacy@mitraa.shop. We will respond within 30 days.

10. Account deletion

You can request account deletion from Settings → Account → Delete account in the app, or by emailing privacy@mitraa.shop. On deletion we permanently remove your profile and content within 30 days, except for records we are legally required to retain.

11. Children

Mitraa is intended for users aged 18 years and above. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please report it to grievance@mitraa.shop and we will remove it.

12. Security

We use industry-standard safeguards including TLS for data in transit, encryption at rest for sensitive fields, hashed passwords (bcrypt) for any admin accounts, restricted access for staff, audit logging, and regular dependency updates. No system is fully secure; please use a strong, unique authentication method on your device.

13. Cookies and similar technologies

Our website uses only essential cookies to remember your preferences. We do not use third-party advertising cookies. The mobile app does not use browser cookies; it does use a local cache stored on your device.

14. Third-party links

Our Service may contain links to third-party websites. We are not responsible for their content or privacy practices. Please review their policies before sharing your information with them.

15. Changes to this policy

We may update this Policy from time to time. The latest version will always be available on this page, with the “Last updated” date refreshed. We will notify you of material changes through the app or by email.

16. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of our Grievance Officer are:

Name: Kuldeep Sahani
Email: grievance@mitraa.shop
Address: 312, World Tech Park, Gurgaon, Haryana
Time: Mon to Fri, 10:00 AM to 6:00 PM IST (excluding public holidays)

If anything in this Policy is unclear, please contact us before using the Service.