We collect the minimum personal data needed to provide the service: your phone number for OTP login (stored as a SHA-256 hash plus last-4 digits; the full number lives in an encrypted vault accessible only to finance/admin roles), an anonymous handle, your language preference, and optional concern tags.
Voice and video are streamed via Agora.io and not persisted by us. Moderation snippets are retained for 90 days for safety review.
You can download your data or delete your account at any time from Settings.
The full DPDP-compliant Privacy Policy is reviewed by counsel before launch. See /docs/compliance/dpdp.md in the repo for the engineering control map.Last updated: 2026-05-17. Versioned at docs/legal/privacy/v1.md in the repo.