How we protect your data (DPDP Act 2023)

Hello Fraands follows India’s data protection law: the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025. This page explains, in simple words, what we keep and what you can do.

Your number and photos are protected

Your number is masked. The other person never sees your phone number. Both of you talk through a platform number.
Hosts use AI avatars. Hosts do not show their real photo. Callers see an AI avatar. A host can also record a short voice introduction in their own voice. Our team listens to it before it goes live, and it is labelled “Recorded by the host”. The person on the call is still a real, verified host.

What we collect from callers

To call a host, we keep:

your WhatsApp number (checked with a one-time code)
the number you receive calls on (it can be the same number)
your wallet top-ups by UPI
your call records: the time, how long, the price and how the call ended

We do not record calls. We keep no audio. Hosts never see your number. They see only your caller name.

Example: Rohan tops up Rs 100 and talks for 10 minutes. We keep the top-up, the time, the length and the price. We do not keep what he said.

What we collect from hosts

Hosts go through more checks, because they earn money and must be real adults. In short: a WhatsApp code, your Aadhaar with an OTP (or DigiLocker if OTP doesn’t work), a 10-second selfie video, and a check of your UPI and bank account. We never store your full Aadhaar number. We keep only the last 4 digits. Read all the details on how we verify hosts.

How we keep your data safe

We never sell your data. We never use it for advertising.
It is stored encrypted, in private storage.
Only a small, authorised team can open it, and every access is written in a log.
We share it only with the partners who help us run the service (for example the one that checks Aadhaar, and the one that pays hosts), or with a government authority when the law requires.

How long we keep it

Hosts: while you are a host, and for 1 year after you leave. Then we delete it.
Records the law asks us to keep: the law says some records and logs must be kept for at least 1 year. We keep those as long as the law needs, and no longer than necessary.

Your rights

You can ask us to:

See the data we hold about you
Correct anything that is wrong
Delete your account and data (except records the law says we must keep)
Withdraw your consent at any time
Nominate someone to use your rights for you if you cannot
Complain if you are unhappy

We reply as fast as we can, and always within the time the law allows. That is 90 days at most. If you are still not happy, you can go to the Data Protection Board of India.

Example: Priya is a caller and wants to leave. She taps Delete my account. We delete her data, but we keep the billing records the law needs for a while.

If something goes wrong

If a data breach ever affects you, we will tell you and the Data Protection Board of India, as the law requires.

How to reach us

Write to our Grievance Officer on the grievance page. To close your account, read Delete your account.

Do you sell my data?

Never. We follow India's DPDP Act 2023. We use your data only to run the service, pay hosts, keep people safe and meet the law.

Do you keep my full Aadhaar number?

No. Hosts' Aadhaar is checked with an OTP sent to the mobile linked to it (or through DigiLocker if the OTP doesn't work). The number is used only to request the OTP. We never store the full number. We keep only the last 4 digits.

Can I ask you to delete my data?

Yes. Choose Delete my account, or write to the Grievance Officer. We delete it, except records the law says we must keep.

Did this answer your question?Updated 9 Oct 2026