← Back to NXTT
Privacy Policy
Last updated: March 15, 2026
NXTT ("we", "us", "our") operates the NXTT mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app. We are committed to protecting your privacy and complying with the Digital Personal Data Protection Act, 2023 (DPDPA) of India.
1. Information We Collect
Information You Provide
| Data Type | Purpose | Required |
|---|
| Phone number | Account creation & verification | Yes |
| Display name | Profile identity | Yes |
| Date of birth | Age verification (18+ only) | Yes |
| Gender | Matching preferences | Yes |
| Photos | Profile display to potential matches | Yes (min 1) |
| Voice recording | Voice intro for matching | No |
| Bio & interests | Profile personalization | No |
| Location | Distance-based matching | Yes |
Information Collected Automatically
- Device information (model, OS version, app version)
- Usage data (screens visited, features used, app interactions)
- Crash reports and error logs
- IP address (for security and approximate geolocation)
2. How We Use Your Information
- To create and manage your account
- To show you potential matches based on your preferences and location
- To facilitate messaging between matched users
- To operate Vibe Rooms (live audio feature)
- To process payments for premium subscriptions
- To detect and prevent fraud, abuse, and policy violations
- To improve our services through anonymized analytics
- To send important notifications (matches, messages, safety alerts)
3. Data Retention
- Messages: Automatically deleted after 24 hours (or extended period if purchased). We cannot access encrypted message content.
- Profile data: Retained while your account is active. Deleted within 30 days of account deletion.
- Voice recordings: Retained while your account is active. Deleted with account.
- Photos: Retained while your account is active. Deleted from storage within 30 days of removal or account deletion.
- Analytics data: Anonymized and retained for up to 12 months.
- Payment records: Retained for 7 years as required by Indian tax regulations.
4. Data Sharing
We do NOT sell your personal data. We share data only with:
- Other users: Your profile (name, photos, bio, interests, voice intro, approximate distance) is shown to potential matches.
- Service providers: Supabase (database), AWS S3 (file storage), Razorpay (payments), Firebase (push notifications), Agora (audio streaming), Sentry (error tracking), PostHog (analytics).
- Law enforcement: When required by valid legal process under Indian law.
5. Your Rights (under DPDPA)
As a Data Principal under the DPDPA, you have the right to:
- Access: Request a copy of all your personal data (Settings → Export Data)
- Correction: Update your profile information at any time
- Erasure: Delete your account and all associated data (Settings → Delete Account)
- Grievance redressal: Contact our Data Protection Officer
6. Data Security
- All data transmitted via TLS/SSL encryption
- Messages encrypted end-to-end (we cannot read them)
- Passwords hashed with bcrypt
- Database hosted on Supabase with encryption at rest
- Files stored on AWS S3 with server-side encryption
- Regular security audits planned
7. Children's Privacy
NXTT is strictly for users aged 18 and above. We do not knowingly collect data from anyone under 18. If we discover a user is underage, we will immediately delete their account and all associated data.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via in-app notification. Continued use after changes constitutes acceptance.
9. Contact Us
For privacy-related questions or to exercise your rights:
Data Protection Officer: [Name to be appointed]
Address: [Registered business address]