Effective Date: October 2026 | Compliance: Digital Personal Data Protection Act (DPDPA), 2023 & IT (Reasonable Security Practices) Rules, 2011.
1. Privacy by Default (Total Anonymity Architecture)
KhulkeBolo is engineered with privacy as a foundational principle. Our system architecture enforces strict segregation between authentication identifiers and public activity:
- Zero Identity Leakage: Your real name, phone number, and email are never displayed on public feeds, speech bubbles, support comments, or follower lists.
- Ghost Personas: Every account functions under a pseudonym (Ghost Name) paired with an abstract cartoon avatar to completely decouple your public thoughts from your social identity.
- No Real-Profile Tracking: We do not ask for, display, or store personal portraits, gender certificates, government documents, or geographical markers.
2. Information Collected & Processing Purpose
We process only minimal, essential technical data necessary to deliver secure services:
- Account Credentials: Private email address or 10-digit mobile number, protected via irreversible salted cryptographic hashing (Bcrypt). These are used solely for account recovery and login validation.
- User-Generated Burdens: Text confessions, mood tags, support messages, reaction tallies, and self-selected auto-burn expiration timers.
- Technical Logs: IP address, browser User-Agent strings, and timestamp markers recorded in transient security tables solely for preventing DDoS attacks, bot spam, and brute-force intrusion.
3. Data Non-Disclosure & Anti-Monetization Pledge
We respect the sacred nature of emotional vulnerability. Under no circumstances does KhulkeBolo:
- Sell, lease, trade, or monetize personal user data, phone numbers, or email addresses to commercial brokers or third-party advertisers.
- Deploy cross-site behavioural tracking pixels, commercial ad network tracking, or third-party biometric profilers.
- Expose user credentials to administrators, moderators, or general community members.
4. Security Safeguards & Encryption Standards
In accordance with reasonable security practices under Indian law, we employ multiple defense layers:
- HTTPS with TLS 1.3 encryption across all network transmissions.
- Strict parameterized SQL queries to eradicate SQL injection vulnerabilities.
- CSRF security tokens paired with automated rate limiters on all submission portals.
- Cryptographic session fingerprints preventing session hijacking and credential interception.
5. Auto-Burn Timers & Data Erasure Rights (DPDPA 2023)
In accordance with the Digital Personal Data Protection Act, 2023, users maintain rights regarding their digital presence:
- Auto-Burn Functionality: Users can configure confessions to burn away permanently after 24 hours or after receiving 15 reads.
- Voluntary Erasure: Users may request permanent deletion of their account records, credentials, and confession history at any time through our Contact Us portal.
6. Statutory Grievance Redressal Mechanism
Under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, any privacy concerns or grievances may be addressed to our designated Grievance Officer:
- Grievance Desk: Support & Privacy Redressal, KhulkeBolo Platform.
- Official Communication: Contact via our encrypted Contact Us Support Portal.
- Resolution Window: Grievance inquiries are acknowledged within 24 hours and addressed within 15 working days.
