Privacy Policy

In this Privacy Policy:

• Personal information or personal data means information that identifies you or can reasonably be linked to you.
• User content means profile information, portfolio media, messages, reports, and other material you submit to the Service.
• Processing means any operation performed on personal information, including collection, storage, use, disclosure, and deletion.
• Service providers or processors means third parties that process personal information on our behalf to help operate the Service.

We collect information in three main ways: information you provide, information generated through your use of the Service, and limited technical information from your device.

Information you provide

• Mobile phone number for OTP sign-in and account recovery
• Display name, role (artist or producer), and account preferences
• Email address if you add one, including for web admin access
• Artist profile details such as stage name, bio, tagline, skills, languages, city, height, and age if you choose to provide them
• Photos, videos, audio samples, captions, and other portfolio media
• External links you add, such as Instagram, YouTube, IMDb, or a personal website
• Messages, reveal requests, reports, and support communications you send us

Information generated through use

• Conversation history and moderated messaging activity
• Verification and moderation status, review notes, and enforcement actions tied to your account
• Shortlists, saved searches, and in-app actions needed to operate discovery features
• Payment status, plan tier, purchase history, and transaction references

Technical and device information

• A random device identifier stored locally for guest browsing and session continuity before sign-in
• User ID and authentication tokens managed through our auth provider
• Push notification token if you enable alerts
• Device model, operating system version, app version, and language settings
• Crash logs, error reports, and performance diagnostics when crash reporting is enabled
• Optional usage events such as screen views or onboarding steps only if you leave analytics enabled in Settings → Privacy

We collect personal information:

• Directly from you when you register, create a profile, upload media, send messages, make purchases, contact support, or change settings
• Automatically when you use the app or website, including through logs, cookies or similar technologies on the web, and diagnostic tools
• From service providers such as Apple, Google, Razorpay, and Supabase when needed to authenticate users, deliver notifications, process payments, or maintain infrastructure
• From other users when they message you, report content, or interact with your profile through permitted Service features

We do not buy personal information from data brokers for advertising purposes.

The app requests device permissions only when a feature requires them.

We may request access to:

• Camera — to capture photos or videos for your portfolio
• Photo library — to upload existing media to your portfolio
• Microphone — to record voice samples where supported
• Notifications — to alert you about messages, verification updates, or other account activity

We do not request access to your contacts, calendar, reminders, files outside the media you choose, or precise device location for core Service functionality. Mobile operating systems may display permission strings for APIs that are not actively used by a given feature; we aim to request only what is necessary.

This section summarizes the data categories we disclose in App Privacy and Data safety forms.

Contact information — Phone number and optional email are linked to your account and used for authentication, account management, and support.

User content — Profile text, photos, videos, audio, and messages are linked to you and used to provide core Service functionality.

Identifiers — User ID, device ID, and push token are linked to you and used for sign-in, account integrity, and notifications.

Purchases — Plan tier, payment status, and transaction identifiers are linked to you and used to deliver paid portfolio features.

Diagnostics — Crash and error data may be linked to you and are used to improve stability and fix bugs.

Usage data — Optional product analytics may be collected only when enabled. You can opt out in Settings → Privacy.

Tracking — We do not sell personal information. We do not use personal information for cross-app advertising tracking.

Children — The Service is not directed to children under 13, or under 16 where applicable under local law.

We use personal information to operate, secure, and improve the Service. Depending on the activity, we rely on one or more of the following bases: your consent, performance of our contract with you, compliance with law, and our legitimate interests in running a safe and functional platform.

We use information to:

• Create, authenticate, and maintain your account
• Display artist profiles in Discover, search, and producer tools
• Enable moderated messaging, reveal flows, shortlists, and related features
• Review profiles and messages for quality, verification, fraud prevention, and policy enforcement
• Process payments, unlock portfolio entitlements, and handle refund requests
• Send service-related push notifications, SMS OTP messages, and support responses
• Monitor, investigate, and respond to reports, abuse, and security incidents
• Analyze reliability through crash reporting and optional product analytics
• Develop new features, fix bugs, and understand how the Service is used
• Comply with legal obligations and respond to lawful requests from authorities

We do not use your private messages for advertising profiling.

Mukha Chitram is a professional discovery platform, so certain information is visible to other users by design.

Artist profiles — After review or publication, profile information and portfolio media you choose to include may be visible to producers and other permitted users through Discover, search, and profile views.

Producers — Your producer account details may be visible in moderated conversations and related flows where needed for trust and safety.

Hidden by default — Your direct phone number, email, and other contact details remain hidden until both parties in a conversation mutually agree to identity reveal.

You control much of what appears on your profile by editing or removing content in the app. Removing content from your profile does not automatically delete copies already downloaded or saved by other users outside our systems.

We do not sell your personal information. We share information only as described below.

With other users — Profile content and messages are shared with other users according to Service functionality, moderation rules, and reveal settings.

With service providers — We use trusted providers to help run the Service, including:

• Supabase — database, authentication, and file storage
• Razorpay — payment processing in India
• Apple App Store and Google Play — in-app purchases and subscription management
• Sentry — crash and error reporting
• Expo, Apple, and Google — push notification delivery

These providers process information on our instructions and for the purposes described in this policy. They may also process information under their own terms and privacy policies.

For legal and safety reasons — We may disclose information if we believe in good faith that disclosure is necessary to comply with law, respond to valid legal process, protect the rights, safety, and security of users or Mukha Chitram, investigate fraud or abuse, or enforce our Terms.

Business transfers — If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction with notice where required by law.

When you make a purchase:

• Apple or Google processes App Store and Google Play payments under their own privacy policies. We receive purchase confirmation, product identifiers, and transaction references needed to unlock features.
• Razorpay processes certain web or fallback checkout payments. We may receive order amount, payment status, payment IDs, and limited billing metadata. We do not store full card numbers, CVV, or complete UPI credentials on our servers.

Keep payment credentials secure on your device and with your app store or payment provider.

On our website, we may use cookies, local storage, and similar technologies to:

• Keep you signed in where applicable
• Remember preferences
• Measure site performance and diagnose errors
• Protect against abuse

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

We retain personal information for as long as reasonably necessary to provide the Service, comply with law, resolve disputes, enforce agreements, and maintain security.

In general:

• Account and profile data is kept while your account is active
• Messages and moderation records may be retained while relevant to active conversations, safety reviews, or legal obligations
• Payment and transaction records may be retained as required by tax, accounting, or payment regulations
• Crash logs and diagnostics are retained for a limited period needed for debugging and trend analysis

When you delete your account from Settings → Delete account, we begin deleting or anonymizing profile fields, messages tied to your account, and sign-in credentials, subject to backup cycles and legal retention requirements.

You can control your information through the Service and your device:

• Access and update — Edit your profile and account details in the app
• Delete account — Permanently delete your account from Settings → Delete account while signed in
• Notifications — Disable push alerts in Settings → Notifications or through your device OS
• Analytics — Opt out of optional usage analytics in Settings → Privacy
• Permissions — Revoke camera, photo, microphone, or notification permissions in your device settings
• Marketing — We do not send promotional SMS without consent

Deleting your account may not remove information already visible to other users prior to deletion, information retained in backups for a limited time, or information we must keep by law.

Depending on your location and applicable law, including India's Digital Personal Data Protection Act, 2023 where applicable, you may have the right to:

• Confirm whether we process your personal information
• Access and receive a copy of certain personal information
• Request correction of inaccurate or incomplete information
• Request deletion or withdrawal of consent where processing is consent-based
• Object to or restrict certain processing
• Nominate another person to exercise rights on your behalf in permitted circumstances

To exercise these rights, email support@mukhachitram.com. We may need to verify your identity before responding. We will respond within a reasonable period and as required by applicable law.

We use administrative, technical, and organizational measures designed to protect personal information, including:

• Encryption in transit using TLS
• Access controls and authenticated infrastructure
• Row-level security and permission policies on our database where applicable
• Moderation and reporting tools for user safety
• Monitoring for abuse, fraud, and suspicious activity

No method of transmission or electronic storage is completely secure. You are responsible for keeping your phone, OTP messages, and device passcode secure.

We are based in Hyderabad, Telangana, India. Our service providers may process personal information in India, the United States, the European Union, or other countries where they or their subprocessors operate.

Where required by applicable law, we take reasonable steps to ensure appropriate safeguards for cross-border transfers.

The Service is intended for adults and is not directed to children under 13 years of age, or under 16 where applicable under local law.

We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact support@mukhachitram.com and we will take appropriate steps to delete it.

We do not sell or rent your personal information to third parties for their independent marketing purposes.

We do not use your personal information for cross-app advertising tracking. Third-party payment, analytics, and infrastructure providers may process limited data under their own policies when you interact with their services through Mukha Chitram.

We may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, or our data practices. When we do, we will post the updated version at mukhachitram.com/privacy.

If changes are material, we may also provide notice through the app, website, or other reasonable means. Your continued use of the Service after the updated policy becomes effective means you accept the revised policy.

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, contact us:

Mukha Chitram

Email: support@mukhachitram.com

Website: https://mukhachitram.com/privacy

Location: Hyderabad, Telangana, India

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction, where applicable law provides that right.