Privacy Policy

This policy explains what Baartalaap collects, why, and how it's protected. It applies to all users of baartalaap.in.

What we collect

Account basics (full name, username, email, optional mobile number and date of birth); content you choose to send (messages, media, voice notes) which is end-to-end encrypted in eligible private conversations, so our servers store ciphertext, not plaintext; device and session metadata (IP address, device type, login times) used for security and fraud prevention; and, only if you opt in, a government identity document for optional verification.

Why we collect it

To operate your account, deliver messages, protect against abuse and fraud, and — only where you explicitly request it — verify your identity for the trust badge on your profile.

How it's protected

Passwords are hashed, never stored in plaintext. Private messages are end-to-end encrypted; Baartalaap's own staff cannot read them. Identity documents are stored in private, non-public storage, viewable only by authorized Verification Admins through an access-logged interface — never by ordinary staff, and never exposed as a public URL.

How long we keep it

Account data is kept while your account is active. Identity documents follow a configurable retention/deletion policy and are removed once verification is complete unless law requires otherwise. Deleted accounts enter a 1-hour cancellation window, after which profile data, sessions, and associated content are removed or anonymized per this policy; some information may persist in backups for a limited period before full deletion.

What administrators can see

Support and moderation staff can see account metadata needed to handle reports and abuse — never the plaintext of your private end-to-end encrypted conversations.

Your choices

You control who sees your online status, whether your profile shows identity verification, and can request account deletion at any time from Settings.

Contact

Questions about this policy: privacy@baartalaap.in.