Privacy Policy

This Privacy Policy explains how Twoosh (Yathaarth Innovations Pvt. Ltd.) collects, uses, shares, and protects personal data when you use our live audio and video platform (“Twoosh”, “we”, “us”, or “our”). We are committed to complying with the EU General Data Protection Regulation (GDPR) and applicable privacy laws.

1. Data Controller & Contact

Twoosh is the data controller for personal data processed in connection with the platform. You may contact our Data Protection Officer at privacy@twoosh.io or by mail to Yathaarth Innovations Pvt. Ltd., Bengaluru, Karnataka, India.

2. Data We Collect

• Account information: username, password (stored as a hashed value), contact identifiers (email or phone), age verification data, and profile details (DOB, gender, avatar, bio).
• Usage data: room participation, messages, posts, interactions, content you upload or stream, and feedback reports.
• Device & technical data: IP address, browser/device type, language, time zone, and connection diagnostics collected through cookies or similar technologies.
• Safety reports: records of policy violations, moderation outcomes, and communications with support.

3. How We Use Personal Data

• Authenticate and manage user accounts.
• Provide live audio/video rooms, chat, and other social features.
• Protect users by enforcing community standards, detecting harmful or illegal activity, and cooperating with law enforcement when required.
• Improve platform performance, recommend relevant rooms, and develop new features.
• Send transactional communications (e.g., account alerts, security notices). Marketing emails are sent only with consent, and you can opt out at any time.
• Comply with legal obligations, including data retention, accounting, and regulatory requests.

4. Legal Bases for Processing (GDPR)

Depending on the activity, we rely on the following legal bases:

• Contractual necessity: to deliver the Twoosh service you request.
• Legitimate interests: to keep the platform safe, prevent misuse, and improve features.
• Consent: for optional activities such as marketing communications or collecting sensitive information (e.g., gender) for personalization.
• Legal obligations: to comply with applicable laws, court orders, and regulatory requirements.

5. Sharing & Disclosure

We share personal data only as necessary:

• Service providers (hosting, analytics, communication tools) under strict data processing agreements.
• Law enforcement or regulators when required by law or to protect users.
• Corporate transactions such as mergers or acquisitions, with notice where appropriate.
• Other users: limited to information you choose to make public (e.g., profile details, live room participation).

Twoosh does not sell personal data to third parties.

6. International Transfers

Your information may be transferred to and processed in countries outside your residence. When we do, we rely on adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms. We maintain safeguards to ensure the protection of your data.

7. Data Retention

We keep personal data only as long as needed for the purposes described in this policy, to enforce our terms, and to meet legal obligations. When data is no longer needed, we securely delete or anonymize it. Your account and related data can be deleted upon request, subject to any legal retention requirements.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access to your personal data and information about how it’s processed.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”) under certain circumstances.
• Restriction or objection to processing, including for direct marketing.
• Portability of your data in a machine-readable format.
• Withdrawal of consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority (e.g., EU/UK data protection authorities) if you believe your rights were infringed.

Submit requests via privacy@twoosh.io. We will respond within the time required by law.

9. Security

We implement technical and organizational measures to protect personal data (encryption, access controls, auditing, staff training). Despite safeguards, no method of transmission or storage is completely secure; use the platform responsibly and report suspected security issues to security@twoosh.io.

10. Children’s Privacy

Twoosh is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided data without parental consent, contact us and we will remove the information.

11. Cookies & Similar Technologies

We use cookies, SDKs, and similar technologies to enable core functionality (session management, media streaming), remember preferences, and measure performance. You can adjust cookie preferences through browser settings or in-app controls where available. Some cookies are essential for operations and cannot be disabled.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the app, by email, or other appropriate means. Continued use of Twoosh after updates constitutes acceptance of the revised policy.

13. Contact

If you have questions or concerns about this Privacy Policy or our privacy practices, contact our Data Protection Officer at privacy@twoosh.io.