Privacy Policy

1. Introduction

This Privacy Policy explains how Arus Innovation Private Limited ("Company", "We", "Us", "Our") collects, uses, stores, and protects your personal data when you use the Live@Humini mobile application ("App" or "Service").

By accessing or using Live@Humini, You agree to the collection and use of information in accordance with this Privacy Policy.

2. Interpretation and Definitions

Capitalized terms used in this Privacy Policy have the following meanings:

• Account: A registered profile created to access the Service.
• App: The Live@Humini mobile application.
• Device: Any device used to access the Service.
• Personal Data: Any information that relates to an identified or identifiable individual.
• Service: The Live@Humini application and related services.
• Service Provider: Third-party entities that process data on behalf of the Company.
• Usage Data: Automatically collected data generated through use of the Service.
• Moments: Time-bound user-generated events or posts created within the App.
• Group: A private, invite-only circle of people known to one another, created within the App. Membership is by admin invitation only; there is no public directory or search.
• Heart: The emotional register a Moment carries, either Joy (celebrating with someone) or Care (standing with someone through a hard time).
• Video Byte: A short video (up to approximately 60 seconds) recorded in response to a Moment and assembled into a private playlist for that Moment's recipient.
• Invitation: A pre-authorisation entry an admin creates, using a mobile number, to admit a person to a Group.
• You / User: The individual using the Service.

3. Information We Collect

We collect the following categories of information:

A. User Account Data

• Name
• Mobile number (the only identifier, used for OTP login)
• OTP verification status
• Language preferences
• Profile completion status
• Account creation and login timestamps
• Activity status (e.g., last login)

B. Group and Invitation Data

Humini Live is organised into private, invite-only Groups. When You create, join, or are invited to a Group, we collect and store:

• Group name
• The role You hold in a Group (creator, admin, or member)
• Your Group memberships
• Invitations issued to You, bound to Your verified mobile number

When an admin invites people to a Group by mobile number, those numbers are stored only as hashes, so we can match them if and when the invited person signs up. We do not build a profile from an invited identifier, and we do not reveal to the admin whether an invited person is already a Humini user. Invitations that are never matched to a sign-up are purged when the invitation expires. There is no public directory and no search for people or Groups.

C. User-Generated Content (Moments)

When You create a Moment, we collect and store:

• Creator user ID
• The Heart chosen for the Moment (Joy or Care)
• Title and text content
• Assigned recipient, where the Moment is created for another member
• Language selection
• Schedule type (immediate or scheduled) and scheduled time (if applicable)
• Active duration and expiry timestamp
• Status (active, expired, etc.)
• Engagement metrics (Supports, call count), visible only to the Moment owner
• Availability status and active call state (if applicable)

D. Video Bytes

Members can respond to a Moment with a Video Byte (a short video, up to approximately 60 seconds). Video Bytes are assembled into a private playlist for the Moment's recipient. We store:

• The video content
• Creator user ID and the associated Moment
• Creation timestamp
• Viewed / unviewed status

Video Bytes are stored to deliver them to their intended recipient and to allow moderation. Their retention is described in Section 7.

E. Engagement Data

We may collect interaction-based data including:

• Support (hearts given and received)
• Call counts
• Usage patterns and activity signals

F. OTP and Authentication Data

For secure login, we collect:

• Mobile number
• OTP codes
• OTP expiry timestamps
• Attempt count
• OTP usage status
• Creation and update timestamps

One-time passcodes are delivered to Your mobile number by SMS or WhatsApp. This data is used strictly for authentication and fraud prevention.

G. Call Data (Audio/Video Communications)

When You use the calling feature:

• Audio and video streams may be temporarily stored in real time to enable moderation.
• Calls are temporarily stored for up to 24 hours for safety and abuse prevention.
• If a call is reported, it may be retained for up to 90 days for moderation review and investigation.
• Unreported calls are automatically deleted after the retention period.
• Calls are only accessed for safety, moderation, and policy enforcement purposes.

H. Device and Technical Data

We may collect:

• IP address
• Device model and OS
• App usage logs
• Crash reports and diagnostics
• Network and performance data
• Camera and microphone access, used only while You are actively recording a Video Byte or on a call
• Push notification token, used to deliver the alerts You have enabled

I. Safety and Moderation Data

To keep the community safe and to enforce our Terms, we collect and store:

• Reports You make and reports made about You (the category, and the related Moment, Video Byte, or call)
• Your moderation score and any temporary or permanent ban status
• Users You have blocked, so we do not match You with them again

4. How We Use Your Information

We use collected data for the following purposes:

• To provide and operate the Service
• To create and manage user accounts
• To create and manage Groups and process invitations
• To enable communication and interaction between users
• To process and display Moments
• To deliver Video Bytes to their intended recipient
• To ensure platform safety and prevent abuse
• To moderate content and enforce policies
• To authenticate users and prevent fraud
• To improve performance and user experience
• To comply with legal obligations
• To analyze usage trends and service effectiveness

5. Legal Basis for Processing

We process personal data based on:

• Your consent
• Performance of a contract (providing the Service)
• Legal obligations under applicable law
• Legitimate interests including security, fraud prevention, and platform integrity

6. Data Sharing and Disclosure

We do not sell your personal data. We may share information only in the following cases:

• With trusted Service Providers (hosting, analytics, crash reporting)
• With messaging providers who deliver Your one-time passcode by SMS or WhatsApp
• To comply with legal or regulatory obligations
• To enforce our Terms of Service and protect users
• In connection with mergers, acquisitions, or business transfers
• To protect user safety, rights, or prevent harm
• With your explicit consent

All third-party providers are required to maintain confidentiality and data protection standards.

Where You receive a one-time passcode over WhatsApp, Your mobile number is shared with WhatsApp (Meta Platforms) only to deliver that code. We do not share Your content, Moments, Video Bytes, or contacts with WhatsApp. Meta processes this data outside India (see Section 10).

7. Data Retention

We retain data only as long as necessary:

• Account Data: on a deletion request the Account is deactivated immediately and permanently deleted after a 7-day cooling-off period, during which You can cancel by signing back in
• Group and Invitation Data: Group membership is retained while the Group exists; invited identifiers are stored as hashes and, if never matched to a sign-up, are purged when the invitation expires
• Moments Data: retained until deletion or expiry of the Moment
• Video Bytes: a Video Byte You have viewed is deleted within 48 hours after its Moment expires or is deleted; a Video Byte You have not yet viewed is retained until You view it, and is then deleted on the same basis
• Unreported Call Data: retained up to 24 hours
• Reported Call Data and reported Video Bytes: retained until the report is reviewed and concluded, up to a maximum of 90 days
• Safety and Moderation Data: report records are retained until the report is reviewed and concluded, up to 90 days; a moderation score and any ban status are retained while the Account is active or a ban is in effect
• Usage Data: retained up to 12 months in anonymized form

After retention periods, data is securely deleted or anonymized.

8. Data Security

We implement reasonable technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights (Under DPDP Act, 2023)

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent where applicable
• File grievances regarding data usage
• Nominate a representative to exercise rights

Requests can be made at: contact@humini.app. You can also request account and data deletion directly at live.humini.app/delete-account.

10. Data Transfers

Your information is primarily processed in India.

Some data is processed outside India by our service providers. In particular, where You receive a one-time passcode over WhatsApp, Your mobile number is processed by WhatsApp (Meta Platforms) outside India solely to deliver that code. Where data is transferred outside India, we ensure appropriate safeguards in accordance with applicable law.

11. Children's Privacy

Live@Humini is strictly intended for users aged 18 and above.

We do not knowingly collect personal data from individuals under 18. If we become aware of such data, it will be deleted promptly.

12. Disclosure of Data

We may disclose your personal data in the following situations:

• Business transactions (merger, acquisition, restructuring)
• Legal compliance or government requests
• Protection of rights, property, or safety of users or the Company
• Investigation of abuse, fraud, or violations

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Users will be notified of material changes by in-app notice.

Continued use of the Service after updates constitutes acceptance.

14. Contact Us