Privacy Policy
NaachiChat privacy policy
Last updated: 27/06/2026
1. Who we are
This privacy policy explains how we collect, use, share, and protect information when you use NaachiChat, our messaging application, and related websites and services (together, the “Service”).
NaachiChat is operated by Naachi Research and Innovation Foundation (“we”, “us”, “our”), with its registered office at:
22C Saravana Nagar, 2nd Street, Koundampalayam, Coimbatore 641030, Tamil Nadu, India.
The Service is currently offered in the United Kingdom on a prototype basis. We do not yet operate a separate United Kingdom entity. Until we establish one, Naachi Research and Innovation Foundation is the data controller for all users, including users in the United Kingdom.
For the purposes of applicable data-protection law, including India’s Digital Personal Data Protection Act, 2023 and, for users in the United Kingdom, the UK General Data Protection Regulation and the Data Protection Act 2018, we act as the data controller (data fiduciary) for the personal data described in this policy.
2. Information we collect
2.1 Information you give us
-
Account information: your mobile phone number, the name you choose to display, and your unique username.
-
Age confirmation: a confirmation, given by ticking a checkbox at sign-up, that you are 18 years of age or older.
-
Verification information: information used to confirm you are a real person or a genuine institution, such as a peer verification, a QR code scan, mutual connections, or confirmation by a partnered institution.
-
Profile information: any additional details you choose to add to your profile.
-
Content you share: messages, voice notes, photos, files, and other content you send or receive through the Service.
-
Support information: information you provide when you contact us, for example by email.
2.2 Information we collect automatically
-
Device and technical information, such as device type, operating system, and app version.
-
Usage information, such as how you interact with features and when you use the Service.
-
Log information, such as the date and time of activity, needed to operate and secure the Service.
2.3 Information from others
If another user invites you, verifies you, or adds you to a community, we may receive information about that connection. If a partnered institution sets up access for you, we may receive information from that institution.
3. Phone numbers and hidden contact details
NaachiChat is built around username-based identity. You connect with others using your username, and your mobile phone number is not shown to other users by default. We use your phone number to create and secure your account and to verify it. Verification messages, such as one-time passwords, are sent through our SMS delivery provider.
4. How we use your information
We use personal data to:
-
Create, operate, maintain, and secure your account and the Service.
-
Confirm that users are 18 or older, verify identities, and operate the invite-only, consent-based access model.
-
Deliver messages and content between you and the people and communities you choose.
-
Operate community and institution features, including departments, roles, announcements, and grievance or reporting workflows.
-
Respond to your requests and provide support.
-
Detect, prevent, and address spam, abuse, fraud, security issues, and violations of our terms.
-
Comply with legal obligations and enforce our agreements.
4.1 Legal bases (UK users)
For users in the United Kingdom, we rely on the following legal bases: performance of a contract with you (to provide the Service); our legitimate interests (to secure and improve the Service and prevent abuse); compliance with legal obligations; and your consent where required. Where we rely on consent, you may withdraw it at any time.
5. How we share information
We do not sell your personal data. We share information only as described here:
-
With other users and communities, as needed to deliver the messages and content you choose to send.
-
With administrators of communities or institutions you join, who may see information relevant to their role, such as membership and reports routed to them.
-
With service providers who help us run the Service, under contracts that require them to protect your information. These providers support cloud hosting and infrastructure, database storage, and the delivery of SMS and one-time-password messages.
-
For legal reasons, where we believe in good faith that disclosure is required by law or necessary to protect rights, safety, or the integrity of the Service.
-
In connection with a reorganisation or transfer of our operations, subject to applicable law.
6. Where your data is stored and international transfers
Your information, including your account details and the content you share, is stored in our databases hosted on third-party cloud infrastructure. We rely on the data-protection and security frameworks made available by our infrastructure providers, including measures intended to support compliance with the UK General Data Protection Regulation for United Kingdom users.
Because we serve users in India, the United Kingdom, and elsewhere, your information may be processed in countries other than the one in which you live. Where we transfer personal data across borders, we rely on the safeguards offered by our infrastructure providers and take steps required by applicable law to protect it.
7. How long we keep information
We keep personal data for as long as needed to provide the Service and for the purposes described in this policy, and then for any period required to meet legal, accounting, or security obligations.
If you ask us to permanently delete your data, we remove it from our active databases within 45 days of your verified request, subject to any limited retention required by law.
8. Your rights and choices
Depending on where you live, you may have rights over your personal data, including the right to access, correct, update, or delete it, to object to or restrict certain processing, to withdraw consent, and to ask for a copy of your data. Users in the United Kingdom have rights under the UK GDPR, and users in India have rights under the Digital Personal Data Protection Act, 2023, including the right to access, correction, and erasure, and the right to grievance redressal.
To request permanent deletion of your data, email us at support@naachichat.com. We will action verified deletion requests within 45 days, subject to any limited retention required by law.
9. Security
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, and alteration, including the security features provided by our infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We work to identify and address security issues on an ongoing basis.
10. Age requirement
The Service is intended for people who are 18 years of age or older. When you create an account, you must confirm, by ticking a checkbox, that you are 18 or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected personal data from a person under 18 without a lawful basis, we will take steps to delete it.
11. Communities and institutions
If you join a community or an institution on NaachiChat, the organisation that runs it may act as an administrator. Administrators can manage membership, assign roles, send announcements, and handle reports or grievances routed to them. Information you share within a community may be visible to that community’s members and administrators in line with their role.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated policy.
13. Contact us and grievances
If you have questions about this policy, wish to exercise your rights, or want to raise a grievance about how we handle your information, you can contact:
Mr Karthikeyan S, Grievance Officer
karthikeyansukumaran@naachichat.com
Naachi Research and Innovation Foundation, 22C Saravana Nagar, 2nd Street, Koundampalayam, Coimbatore 641030, Tamil Nadu, India.
For permanent deletion of your data, email support@naachichat.com.
