Privacy Policy

Chaiverse is committed to protecting your privacy and ensuring data sovereignty.

End-to-end encryption. 1:1 chats, group chats, and shared media are end-to-end encrypted between participating devices using modern, peer-reviewed cryptography that is considered industry best practice for secure messaging, including post-quantum protection on supported devices. Chaiverse's servers handle only encrypted ciphertext for these messages and have no technical ability to read them.

Keys stay on your device. Your private cryptographic keys are generated on your device, never leave it, and are not accessible to Chaiverse, our staff, our hosting providers, or any third party. We cannot decrypt your messages even if compelled to.

Forward secrecy. Message keys rotate continuously so that a key compromised today cannot decrypt past messages.

Specific algorithm and protocol choices may evolve over time as the security landscape changes. We will update materially-relevant aspects of this section when they do.

We collect the minimum data needed to operate the service. The full list:

Required, server-stored:

• Username / handle
• Display name
• Mobile number — used to sign you in and so people who already have your number can find you in Contacts. It is stored on our servers, and it is never shown in Social: not in username search, profiles or Social chats
• Device public-key bundles for end-to-end encryption (identity key, signed prekey, one-time prekeys — all public-key material only)
• Device identifiers (a per-device ID linked to your account so messages can route to your specific devices)
• Push-notification token (so we can deliver "new message" alerts via APNs/FCM)
• Authentication session state (encrypted tokens; expiry timestamps)
• Account creation and last-active timestamps

Optional, opt-in:

• Profile photo, bio, location text, website link (whatever you fill into your profile)
• Contacts — used only to find which of your contacts already use Chaiverse. Lookups are limited per account and your address book is not stored. Contacts you choose to save in Chaiverse are stored encrypted with a key that stays on your devices
• Payment receipts (subscription, founding member purchase) — handled by Razorpay; we retain the transaction ID and amount for tax and audit compliance

Operational logs (not user-controlled):

• HTTP request logs (IP address, user-agent, request path, timestamp) retained for up to 30 days for security and debugging
• Crash reports via Sentry (no message content; stack trace and device class only)

What we never collect: the plaintext content of your messages, your social-graph behaviour for ad targeting, your physical location (we never request GPS), microphone or camera input except when you explicitly start a recording, browsing history outside the app.

All data is stored on secure servers located in India, ensuring compliance with Indian data protection laws (Digital Personal Data Protection Act, 2023).

• Media files are securely stored
• Deleted or expired based on user settings
• EXIF/location metadata is removed during upload

The Health hub (Body & goal, Eaten vs burned, Nutrition, Steps, Workouts, Sleep, Cycle, Vitals, Reports, Hospital stays, and Watches, rings & scales) keeps health data on your phone. It is built so that our servers never receive it.

• Food diary, body details, goal, weigh-ins, recipes and workout log — the food you log; your age, sex, height, weight, activity level and goal; the weights, body-fat and waist measurements you enter; the recipes you save and the foods you add from pack labels; and the workouts, sets and reps you record are stored only on your device, encrypted (AES-GCM under your app vault key). They are not uploaded, synced or backed up to Chaiverse servers. Because of this, reinstalling the app or moving to a new phone does not bring them with you.
• Vitals — the blood pressure, heart rate or pulse, blood oxygen (SpO₂), blood sugar, temperature and breathing rate you record, with when they were taken and any note you add. They are typed in by you or saved from a Bluetooth device you connect, kept on your phone, encrypted, for as long as you keep them, and never sent anywhere. What a reading means is worked out on your phone from published guidelines.
• Sleep, menstrual cycle, hospital stays and medical reports — the nights you log, your period days, symptoms and mood, your hospital stays, and the reports you scan or add (photos and PDFs of lab tests, scans, prescriptions, discharge summaries and bills) are stored only on your device, encrypted. Each report page is encrypted with AES-256-GCM under its own key, and those keys are kept in your encrypted vault; a photo taken to scan a report is re-encoded (which removes its location and other metadata) and deleted once sealed. A report is decrypted only on your phone, only while you view it. A private hash chain on your phone records each report added, changed or deleted, so you can check that nothing was altered — nothing is written to any public blockchain. None of this is uploaded, synced or backed up to our servers, and no one at Chaiverse or on Chaiverse can see it. Sleep and cycle data are never read from Apple Health or Health Connect. The optional wind-down reminder is scheduled by your phone itself and carries no health data. Deleting a report erases its pages and destroys the key that could read them.
• Apple Health (iPhone) and Health Connect (Android) — if you choose to connect, Chaiverse asks to read your step count, your workouts, and the weight, body fat and height that a smart scale or health app records (on Android, the READ_STEPS, READ_EXERCISE, READ_WEIGHT, READ_BODY_FAT and READ_HEIGHT permissions). They are read on your phone when you open the Health screens, used to show your trends and calculate calories burned, and not stored by us or sent anywhere — not to Chaiverse servers and not to anyone else. The one exception is a scale reading you tap to keep as your weight, which is then saved on your phone, encrypted, like the rest of your body details. We never write to Apple Health or Health Connect.
• Watches, rings and smart scales — Chaiverse never connects to the company that makes a wearable: there is no Fitbit, Garmin, Zepp, Oura or other account sign-in, and we never contact their servers. If your device's own app shares to Apple Health or Health Connect, we read that data there, on your phone, exactly as described above. The list of apps we can see sending workouts or weigh-ins is worked out on your phone each time you open the screen and is not stored.
• Devices you connect directly over Bluetooth — with “Connect directly”, Chaiverse can talk straight to a heart-rate strap, a watch broadcasting heart rate, or a scale, blood-pressure monitor, pulse oximeter or thermometer that uses the standard Bluetooth health profiles. Bluetooth is used only when you tap Scan or Connect, the scan looks only for those health devices, and Chaiverse only listens for their readings — it never changes a device's settings. Readings are shown on your phone and discarded unless you tap Save; saved readings, and the names of devices you connected, are kept on your phone, encrypted, and are never sent anywhere. On Android 11 and older, Android files every Bluetooth scan under the location permission, so it asks for that permission there; Chaiverse never reads your location.
• Calculations happen on your phone — BMI, body-fat estimates, calories burned, and the targets that follow from your goal are worked out on your device from published formulas. No health data is sent anywhere to compute them.
• Your choice, at any time — connecting is optional, and you can withdraw access whenever you like in Apple Health (Profile › Apps › Chaiverse) or Health Connect (App permissions › Chaiverse). Bluetooth access can be turned off in your phone's settings, and a connected device can be forgotten from the Connect directly screen.
• Never for ads or anything else — health and fitness data is not used for advertising, marketing, profiling or AI training, and is never sold, rented or shared. Our use of data from Health Connect complies with the Health Connect Permissions policy, including its Limited Use requirements.
• What the server does see — only whether your plan includes the Health hub, and when your free trial of it began and how long it lasts (a user ID, a timestamp and a number of days). The trial begins when you first save your Body & goal details; that tells the server only that the trial started — your height, weight, goal and every other detail stay on your phone. Nothing about your health is ever sent.

Chaiverse does not sell or share user data with third parties.

• User content is never used for AI training
• We explicitly forbid use of user data for model training

Users have the right to:

• Access their data
• Request correction of inaccurate data
• Request deletion of their account/data
• Withdraw consent at any time
• Nominate (in case of death or incapacity)

Requests can be made via [email protected].

We retain data only as long as necessary to provide services or comply with legal obligations.

We implement industry-standard safeguards including:

• Encryption
• Secure authentication
• Access controls

Grievance Officer: Rishav Singh

Email: [email protected]

Response Time: Within 48 hours

We may update this policy. Users will be notified of significant changes.