Privacy Policy

Introduction

Kitty Party Club ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Kitty Party Club mobile application and services (the "Service").

Information We Collect

• Account Information: phone number, display name, avatar choice, optional birthday.
• Device & App Data: app version, device identifiers, crash logs, and diagnostics (via Firebase).
• Approximate Location & Time Zone: with your permission, to show correct local event times and improve scheduling.
• Usage Data: interactions with screens, features, and notifications (via Firebase Analytics and PostHog, linked to your account), including recordings of how you move through the app's screens with personal details such as phone numbers and one-time codes hidden, and the times of day you use the app, so we can improve the Service and send notifications at a time that suits you.
• Phone Contacts: only if you tap Sync contacts while inviting friends, and only after you allow access. We check the phone numbers in your contacts against Kitty Party accounts to show which friends already play. Your contacts are not saved on our servers or shared with anyone, and you can say no and invite friends on WhatsApp instead.
• Website Visits: on kittyparty.club we use Google Analytics and Vercel Analytics to count visits and see which pages are useful. Google Analytics uses cookies, which you can block in your browser settings.
• Digital Gold Transaction Data: purchase and sale amounts, transaction history, gold balance, and invoices.
• Payment Details: when you buy gold, our payment partner Razorpay tells us the UPI ID you paid from. We never receive or store your UPI PIN, card numbers, or bank login details.
• Identity (KYC) Details: only when your gold holdings reach the legal limits described in "Digital Gold: KYC and Payout Details" below.

Digital Gold: KYC and Payout Details

Our gold partner SafeGold must verify your identity once your gold holdings go above 30 grams (Aadhaar or PAN, your choice) and above 50 grams (PAN). Here is exactly what we collect for this, and why:

• PAN: your PAN number, your name as printed on the PAN, and your date of birth. These are checked against official PAN records through our verification partner Sandbox (sandbox.co.in).
• Aadhaar: with your consent, your Aadhaar number is used only to request a one-time password (OTP) from UIDAI through our verification partner. Once you enter the OTP, we keep only a masked Aadhaar number (last 4 digits) and the details UIDAI returns: your name, date of birth, gender, address, pincode, and photo. We do not keep your full Aadhaar number after verification.
• UPI IDs you paid from: used only to send you money when you sell gold. Sale money always goes back to a UPI ID you paid from, so no one else can redirect it.
• What we share with SafeGold: only your masked Aadhaar number and/or your masked PAN number (to meet its KYC requirement), and the UPI ID needed to pay you. Your Aadhaar address, photo, and date of birth are never shared with SafeGold.
• What the app shows you: your name and pincode for Aadhaar, and your name for PAN. Nothing else from your KYC is shown in the app.

How We Use Your Information

• Provide and maintain the Service, including authentication and profile features.
• Show accurate local times for upcoming housie games using time zone and approximate location.
• Send notifications for reminders, updates, and offers (with your consent).
• Personalize your experience (e.g., avatar, nickname).
• Monitor and enhance performance, security, and reliability.

Legal Bases for Processing

We process your data based on your consent (e.g., notifications, location), performance of a contract (providing the Service), and legitimate interests (app security, analytics, product improvement).

Sharing Your Information

• Service Providers: Firebase (hosting, analytics, crash reporting, authentication), PostHog (product analytics and in-app screen recordings), MSG91 (SMS/OTP), WhatsApp by Meta (login codes and updates on WhatsApp), SafeGold (Digital Gold purchase, sale, storage, and payouts), Sandbox (PAN and Aadhaar verification), Razorpay (payments).
• Compliance & Safety: when required by law or to protect rights, property, or safety.
• Business Transfers: in connection with a merger, acquisition, or asset sale, subject to applicable privacy safeguards.

Data Retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we take steps to delete or anonymize data.

KYC and gold transaction records are kept while your gold account is active, and afterwards only for as long as the law requires (for example, anti-money-laundering record keeping). They are then deleted.

Security

We use reasonable technical and organizational measures to protect your information. All your data moves between the app, our servers, and our service providers over encrypted (HTTPS) connections, and our database (Google Firebase) encrypts it when it is stored. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

How we protect your KYC details:

• Encrypted before saving: your Aadhaar address, photo, and date of birth, your PAN date of birth, and your Aadhaar number during the few minutes a verification is in progress are encrypted with AES-256 before they are stored.
• Key kept separately: the encryption key is held in Google Cloud Secret Manager, apart from the data, and only our secure servers can use it.
• Locked storage: these details sit in a restricted area of our database that the app cannot read. They are never shown in the app or in our internal admin tools.
• Encrypted in transit: all data moves between the app, our servers, and our partners over encrypted (HTTPS) connections.
• Used only for what it is collected for: KYC details are used only to meet gold KYC requirements. They are never sold or used for marketing.

Your Choices & Rights

• Access & Correction: update profile details in the app; contact us for additional requests.
• Deletion: request account deletion from Profile > Delete account. Some records may be kept as required by law.
• Location: toggle access in Profile or your device settings. Without location, some time-based features may be less accurate.
• Notifications: toggle notifications in Profile or your device settings.
• Opt-Out of Marketing: you can opt out of promotional notifications at any time.

Children's Privacy

The Service is not directed to children under 13. If you believe a child provided personal information without consent, contact us and we will take appropriate steps.

International Transfers

Your information may be processed and stored in countries other than your own. We take steps to ensure appropriate safeguards consistent with applicable laws.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified in-app or by other reasonable means. Continued use after changes indicates acceptance.

Contact Us

Kitty Party Club. kitty@kittyparty.club | +91 83490 09800