Privacy Policy for Chautari
App: Chautari (Android package: com.chautari.app)
Developer and data controller: Hemraj Thapa
Privacy contact: support@thapahemraj.com.np
1. Scope and overview
This Privacy Policy explains how Chautari (“Chautari,” “we,” “our,” or “the app”) accesses, collects, uses, shares, protects, retains, and deletes user and device data. Chautari provides social profiles, public or audience-limited posts, direct messaging, media sharing, nearby-user discovery, notifications, and peer-to-peer audio/video calling.
2. Data we access or collect
| Data | When collected | Purpose |
|---|---|---|
| Account and identifiers: name, email address, Firebase user ID, username, profile image, and Google account identifier when Google Sign-In is used | Registration, sign-in, or profile editing | Authentication, account creation, profile display, security, and support |
| Optional profile/contact details, such as phone number, recovery email, biography, education, or work information | Only when a user chooses to provide them | Complete the user profile and support account recovery features |
| User content: posts, comments, reactions, direct messages, photos, videos, audio, and documents | When created, uploaded, or sent | Provide feed, messaging, and media-sharing features |
| Approximate or precise location | Only after location permission and while using location features | Show the user and nearby users on the map; location access can be denied or revoked |
| Camera and microphone data | Only after permission and when the user enables capture for a call or media feature | Audio/video calls and user-requested media capture. Live call media is transmitted to call participants through WebRTC and is not recorded by Chautari |
| Call and messaging metadata, such as participant IDs, chat ID, call type/status, timestamps, and delivery/read state | When chat or calling features are used | Connect calls, deliver messages, show call/message history, and prevent conflicting calls |
| Device and notification data, including Firebase Cloud Messaging token, app/platform information, and notification preferences | When notifications are enabled or the app registers with Firebase | Deliver incoming-call, message, and activity notifications |
| Diagnostics and security data, such as technical logs, error information, IP address or request metadata processed by hosting/service providers | During app/service operation | Reliability, troubleshooting, abuse prevention, and service security |
| Google Drive authorization information | Only if the user voluntarily connects Google Drive | Access files selected or created for Chautari using the limited Drive scope authorized by the user |
Chautari does not access phone contacts, SMS content, government identifiers, financial information, or health data as part of its described features. We do not sell personal data.
3. Permissions and user choice
- Camera and microphone: requested when the user activates the related call/media control. A call may connect without these permissions, but outgoing audio/video remains disabled.
- Location: requested for nearby-user/map functionality.
- Notifications: requested to deliver message, activity, and incoming-call alerts.
Permissions may be denied or revoked in Android or browser settings. Core features not requiring the denied permission remain available.
4. How data is used
- Provide, maintain, and personalize Chautari features.
- Authenticate users and protect accounts and the service.
- Deliver content to the audience or direct-message recipient selected by the user.
- Route WebRTC calls and send push notifications.
- Respond to support, privacy, and deletion requests.
- Diagnose failures, prevent fraud/abuse, and comply with applicable legal obligations.
5. Sharing and service providers
We share data only as needed to provide the service, at the user's direction, for safety/legal reasons, or with the following categories of recipients:
- Other Chautari users: profile details and posts according to their audience; messages and call media/metadata with the selected participants.
- Google Firebase/Google Cloud: authentication, database, file storage, and Firebase Cloud Messaging.
- Google Sign-In and Google Drive: only when the user chooses those integrations and authorizes their requested scopes.
- Hosting and map technology providers: infrastructure needed to serve the web/app experience and display maps.
- Authorities or advisers: only when reasonably necessary to comply with law, enforce rights, investigate abuse, or protect users and the public.
Service providers process data under their own terms and privacy commitments. Chautari does not sell or rent personal data and does not share it for cross-app behavioral advertising.
6. Security
Data is transmitted using HTTPS/TLS. Chautari uses Firebase Authentication, database/storage access controls, scoped authorization, and restricted administrative credentials. Access is limited to what is necessary to operate and support the service. No system is completely secure, so users should protect their credentials and report suspected unauthorized access.
7. Retention
Account/profile data and user content are generally retained while the account remains active or until the user deletes applicable content or requests account deletion. Notification tokens are retained while needed to deliver notifications and are replaced or removed when no longer valid. Short-lived call signaling records are used to establish/manage calls. Technical/security records may be retained only as reasonably necessary for troubleshooting, fraud prevention, disputes, legal compliance, and backup recovery.
8. Account and data deletion
In the app: open Settings → Account → Delete Account and follow the confirmation instructions.
Outside the app: use this section at Chautari Privacy Policy — Account and data deletion and email support@thapahemraj.com.np from the registered email address. Include the profile name and username and use the subject “Chautari Account Deletion Request.”
We may verify account ownership to prevent unauthorized deletion. After verification, we aim to complete the request within 30 days and permanently delete or anonymize the authentication account, profile, posts, comments, reactions, messages, uploaded account media, connections, saved location, notification tokens, and other data associated solely with the account. Temporary deactivation is not treated as deletion.
Data may be retained only where legitimately required for security, fraud prevention, dispute resolution, legal obligations, or time-limited backups. Content another user independently copied or lawfully retained may remain in that user's records. Backup copies are isolated from ordinary use and removed on the applicable backup cycle. Account deletion is irreversible.
9. Children's privacy
Chautari is not directed to children under 13. We do not knowingly collect personal data from children under 13. A parent or guardian who believes a child supplied data should contact us for review and deletion.
10. International processing
Service providers may process data in countries other than the user's country. We use provider security controls and applicable safeguards for such processing.
11. Changes to this policy
We may update this policy when Chautari's features or legal obligations change. The effective date above will be updated, and material changes may also be communicated in the app or service.
12. Contact
For privacy questions, access/correction requests, complaints, or deletion requests, contact:
Hemraj Thapa — Chautari
support@thapahemraj.com.np