Privacy Policy

IONICWEB CREATOR Private Limited runs BolYaar. This policy explains what personal data we collect, why, and the choices you have. We built BolYaar to share as little about you as possible: other users only ever see your nickname and avatar.

What we collect

• Account: your mobile number (to sign you in by OTP), nickname, avatar, and optionally gender and date of birth.
• Creators: profile details, photos and videos you publish, your call rates, a short KYC selfie video (seen only by our review team) and your payout details (UPI ID or bank account).
• Activity: call records (who, when, how long, coins charged), messages and voice notes you send, gifts, coin purchases and your coin ledger.
• Safety: reports you file or that are filed about you, and the people you block.
• Device: a push notification token, app version and your IP address (used to prevent abuse, such as limiting OTP requests).

We don't read your phone's contacts, photos or location.

Your calls stay private

• Calls are streamed live through our call provider (Agora). BolYaar never records, monitors or stores the audio or video of any call.
• The Android app blocks screenshots and screen recording, so captures of the app come out black. Recording or sharing someone's call or media without consent is prohibited by our Terms and can be a criminal offence.

Why we use it

• To run the service: sign-in, connecting calls, billing minutes, delivering messages and paying creators.
• To keep people safe: verifying creators, reviewing reports, enforcing blocks and our Community Guidelines, and preventing fraud.
• To meet legal obligations, such as keeping payment and tax records.

Who we share it with

• Other users see only your nickname, avatar and public BolYaar ID. Creators' public profiles are also shown on our website.
• Service providers that process data on our behalf: Google Firebase (phone sign-in and push notifications), Agora (real-time call audio and video), our payment partner, and our hosting provider.
• Authorities when the law requires it, or to protect someone from serious harm.

We never sell your personal data.

How long we keep it

We keep your data while your account is active. When you delete your account, it is deactivated immediately and your profile, photos, videos, voice notes and messages are erased after 7 days. Coin and payout records are kept, without your contact details, for as long as accounting and tax law requires.

Your rights and choices

• Edit your profile any time in the app.
• Block anyone, and unblock them from Profile → Privacy & Security → Blocked Users.
• Delete your account and data from Profile → Privacy & Security → Delete Account & Data.
• Ask us for a copy of your data or to correct it through Contact us.

Security

Data is encrypted in transit, KYC videos are only reachable by our review team, and access to personal data is limited to staff who need it. No system is perfectly secure, so please keep your phone and OTPs private.

Children

BolYaar is strictly for adults aged 18 or older. We don't knowingly collect data from anyone younger, and we delete accounts we find belong to a minor.

Our role

BolYaar acts as an intermediary under Section 79 of the Information Technology Act, 2000. We process your data to run the platform, but we don't control what users choose to say or share with each other in private.

Contact

Questions or complaints about privacy go to our Grievance Officer, Jakir Hussian via Contact us.