Who we are
Indrava is operated by Indrava, registered at Complex No. 47, Old Calcutta Road, Kharadah, West Bengal 700119, India. Under the DPDP Act we are the Data Fiduciary for your personal data — meaning we decide why and how it is processed, and we are accountable for it.
What we collect
You give us
- Age verification (video KYC) — a short live video of you, and a government-issued photo ID showing your date of birth. Collected once, before your account is activated, for the single purpose of proving you are 18 or older. See section 05 for how long we keep it.
- Account — email address and password (the password is handled by Firebase Authentication; we never see it).
- Profile — display name, handle, bio, profile photo.
- Creator application — chosen handle, category, and your confirmation that you are 18 or older.
- Content — photos, videos, captions, and comments you post.
- Support and grievances — what you write to us, so we can answer it.
Created as you use Indrava
- Activity — likes, saves, comments, follows, and which posts you were shown. We record that a post was shown to you so we can rank the feed; we do not build an advertising profile from it.
- Technical — IP address, device type, and app version, kept for security and to diagnose faults.
We do not collect
- Your card or bank details. Payments go directly to our payment provider.
- Your precise location.
- Your contacts, photo library, or microphone — beyond the single photo or video you choose to upload.
Why we use it, and on what basis
Under the DPDP Act we process your data on the basis of the consent you give when you create an account and post content, and for legitimate uses permitted by the Act, such as complying with a legal obligation.
- To prove you are 18+
- Check your video and ID against each other, and check the date of birth. This is how we keep minors out of an adults-only community.
- To run your account
- Sign you in, show your profile, keep your posts.
- To rank the feed
- Decide what to show you, using engagement and what you have already seen.
- To keep the community safe
- Moderate content, act on reports, enforce bans.
- To take payment
- Give our payment provider what they need to charge you.
- To answer you
- Respond to support requests and grievances.
- To meet the law
- Retain records and respond to lawful requests.
Who we share it with
We do not sell your personal data. We share it only with the providers who make Indrava work:
- Google Firebase
- Authentication. Holds your email and password credential.
- Bunny.net
- Media delivery. Stores and serves your photos and videos.
- Contabo
- Hosting. Our servers and database.
- PAYMENT_PROVIDER
- Payments. Handles your card details directly; we never see them.
- KYC_PROVIDER
- Age verification. Processes your video and ID to confirm you are 18 or older.
Some of these providers process data outside India. We only use providers who commit to protecting your data to the standard the DPDP Act requires.
We also disclose data where we are legally required to — for example, to a court, or to law enforcement acting under a valid order.
How long we keep it
We keep the result of the check — verified, with your date of birth — for as long as your account exists, because we must be able to show that every member was verified. The video and the ID image are deleted within 90 days of a successful check. They are never shown to other members, never used for anything but age verification, and never used to train anything.
- Your account
- Until you delete it.
- Your posts
- Until you delete them, or your account.
- After you delete
- Removed from Indrava immediately. Backups are overwritten within 30 days.
- Moderation records
- Kept for 24 months where we have removed content or banned an account, so we can enforce the ban and answer any challenge to it.
- Payment records
- Kept as long as tax law requires.
Where the DPDP Act says we must erase data once its purpose is served, we do.
Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you, and who we have shared it with.
- Correct data that is wrong, incomplete, or out of date.
- Erase your data, where we no longer need it for the purpose you gave it for.
- Withdraw consent at any time. This does not undo processing already done lawfully.
- Nominate another person to exercise these rights for you if you die or become incapacitated.
- Complain to us, and — if we do not resolve it — to the Data Protection Board of India.
Delete your account yourself in Settings → Delete account. For anything else, write to our Grievance Officer at indravaaspire@gmail.com. We acknowledge within 24 hours and resolve within 15 days.
Children
Indrava is for adults. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete the account and its data.
If you believe a child is using Indrava, tell our Grievance Officer at once.
Security
We protect your data with encryption in transit (HTTPS), access controls on our servers, and a password system we never see the contents of.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India, as the DPDP Act requires.
Changes
If we change this policy materially, we will tell you in the app before the change takes effect.
Contact
- Data Fiduciary
- Indrava
- Address
- Complex No. 47, Old Calcutta Road, Kharadah, West Bengal 700119, India
- Privacy contact
- indravaaspire@gmail.com
- Escalation
- Data Protection Board of India