Privacy Policy

1. Who We Are

GORLA MOUNIKA, India, operates the My Love app and website mylove.fit and is the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for the personal data described here. This policy also follows the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the IT Intermediary Rules, 2021. By using the Platform you consent to the practices below. If you do not agree, please do not use the Platform.

2. Personal Data We Collect

• Account data: mobile number (for OTP login), nickname, age/date of birth, gender, language preference, profile picture or avatar, and your registered email if you provide one.
• Host verification (KYC) data: government ID details, a live selfie and bank account or UPI details for payouts. Collected only from hosts and used to prevent impersonation, underage use and fraud.
• Transaction data: coin purchases, order IDs, payment status and references, gifts sent or received, call duration and coin ledger. Card numbers, CVV, UPI PIN and bank credentials are handled only by the payment gateway and are never seen or stored by us.
• Device and usage data: device model, OS version, app version, IP address, device identifiers, crash logs and in-app activity, used for security and performance.
• Communications: messages you send to us, complaints, reports and data requests. Calls and video streams are not recorded (see section 5).
• Permissions: the app may request microphone, camera, notifications and storage/photos access only to provide calls, video and profile features. You can withdraw permissions in your device settings.

3. Why We Use Your Data

• To create and secure your account, verify your age, and run OTP authentication.
• To connect callers with hosts, deliver calls, chat and gifts, and keep coin and payout ledgers.
• To process payments, prevent fraud, and issue refunds or payouts.
• To moderate content, enforce our Terms, handle reports and respond to grievances.
• To send service messages (OTP, receipts, security alerts) and, with your consent, offers. You can opt out of promotional messages at any time.
• To comply with Indian law, court orders and lawful requests from government agencies.

We process data only with your consent or for "certain legitimate uses" recognised under Section 7 of the DPDP Act, and only for the purposes above. We do not sell your personal data.

4. Consent

We ask for your consent at registration and when new permissions are needed. The request is in clear language and you may withdraw consent at any time as easily as you gave it, by writing to us or using the Data Deletion page. Withdrawal does not affect processing already done, and may mean we can no longer provide the service to you.

5. Calls, Media and Number Masking

Your mobile number is not shown to other users. Audio and video calls are carried through encrypted real-time connections. We do not record or store the audio or video content of your calls. We ask that users do not record calls either; the Android app uses screen-capture protection where the device supports it.

6. Who We Share Data With

• Service providers (data processors) acting on our instructions: payment gateways and banks, SMS/OTP providers, cloud hosting, analytics and crash reporting, and identity verification partners.
• Other users: only your nickname, avatar, gender, language and similar profile details you choose to display.
• Authorities: where required by law, court order, or to investigate fraud, abuse or offences, including on request of a government agency under the IT Act, 2000.
• Business transfers: if the business is transferred, your data may move to the new owner under this policy.

Your data may be stored on servers located in India or in other countries permitted under the DPDP Act, with appropriate safeguards.

7. Retention

We keep personal data only as long as needed for the purposes above or as required by law. When you delete your account, we erase or anonymise your data except what we must retain by law, such as: transaction and invoice records under tax and accounting laws; registration information for 180 days after account cancellation as required by the IT Intermediary Rules, 2021; and data needed to resolve disputes, prevent fraud or comply with a legal obligation. Retained data is kept restricted and deleted when the reason for retention ends.

8. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• obtain a summary of your personal data we process and the processing activities;
• request correction, completion and updating of your data;
• request erasure of your data when it is no longer needed or when you withdraw consent;
• have your grievance readily addressed;
• nominate another person to exercise your rights in case of your death or incapacity.

To exercise any right, write to the contact in section 12, or for deletion use our Data Deletion Request page. We may verify your identity before acting. We aim to respond within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is constituted and operational.

9. Security

We follow reasonable security practices, including encryption in transit, access controls and restricted storage of KYC data. No system is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required by law.

10. Children

The Platform is for persons aged 18 and above only. We do not knowingly collect personal data of children (under 18), and do not track, monitor behaviour of or target advertising at children. If you believe a minor is using the Platform, please contact us and we will delete the account and data.

11. Cookies and Similar Technologies

Our website may use essential cookies and local storage to work properly, and basic analytics to understand traffic. You can disable cookies in your browser settings, though some features may not work.

12. Contact and Grievance Officer

Complaints are acknowledged within 24 hours and resolved within 15 days.

13. Changes to This Policy

We may update this policy from time to time. The latest version will be posted on this page with the "last updated" date. For material changes we will notify you in the app or by other suitable means.