BLRSocial Privacy Policy & Data Protection

1. Introduction & Overview

Welcome to BLRSocial ("we", "our", or "us"). We are committed to safeguarding your privacy and ensuring transparency in how personal data is collected, stored, and processed. This Privacy Policy applies to the BLRSocial mobile application and related online services operating primarily within the Bengaluru (Bangalore) metropolitan region, Karnataka, India.

Our practices comply with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Google Play Store Developer Distribution Agreement & User Data Policies.

2. Eligibility & Age Restriction (Strictly 18+)

BLRSocial is exclusively intended for adult users aged 18 years and above. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18. During account creation, date of birth verification is required. If we discover that an account has been registered by a minor, the account and associated data will be deleted immediately.

3. Information We Collect

We practice strict data minimization. We only collect data essential to providing hyperlocal connection and safety features:

• Account & Profile Information: Your name/pseudonym, email address, password hash (encrypted using Argon2id/Bcrypt), date of birth, bio, age, gender preference, and optional profile photos.
• Location Data (Hyperlocal Discovery): With your explicit consent, we access your device coordinates (latitude and longitude) to calculate approximate walking and driving distances to nearby community members in Bangalore neighborhoods (e.g., Indiranagar, Koramangala, Whitefield). We do not broadcast your precise real-time coordinates to other users; only approximate distance bands (e.g. "1.2 km away") are displayed.
• Device & Telemetry Information: Device model, operating system (Android/iOS), app version, unique hardware device identifier, and Firebase Cloud Messaging (FCM) registration token to deliver instant chat alerts when the app is closed.
• Direct Communications: 1-to-1 chat messages, message requests, and communications with the official BLRSocial Moderator Bot. Messages are scanned by automated heuristic safety filters for prohibited keywords (fraud, money solicitations, non-consensual content) to maintain community integrity.

4. How We Use Your Data

Your personal data is used solely to provide and secure the platform services:

• To enable real-time discovery of verified members within Bangalore neighborhoods.
• To route and deliver 1-to-1 chat messages and message connection requests.
• To send critical push notifications (via Google Play Services FCM) when you receive a message.
• To enforce our Community Guidelines and combat financial fraud, UPI scams, and illegal solicitation.
• To review account suspension appeals and handle administrative support requests.

5. We Never Sell Your Data

BLRSocial does not sell, rent, monetize, or trade your personal data, chat history, or location coordinates to third-party advertisers, data brokers, or commercial syndicates.

6. Data Sharing & Third-Party Service Providers

We share minimal required data solely with trusted infrastructure providers under strict confidentiality agreements:

• Google Cloud Platform & Firebase: For real-time push notification delivery (FCM) and secure Google OAuth sign-in.
• Law Enforcement & Legal Compliance: We may disclose data if required by applicable Indian laws, lawful court orders, or requests from authorized government agencies under the Information Technology Act.

7. Data Security & Storage

All user passwords are encrypted using state-of-the-art cryptographic hashing. All network transmissions between your mobile device and our backend servers are secured using Transport Layer Security (TLS 1.3 / HTTPS). Data is stored in secure database facilities with role-based access control and continuous audit monitoring.

8. Your Rights Under Indian DPDP Act 2023

As a data principal, you possess enforceable statutory rights:

• Right to Access: You may request a summary of the personal data processed by us.
• Right to Correction & Erasure: You can edit your profile information at any time or request complete deletion of your account and associated messages.
• Right to Grievance Redressal: You have the right to register complaints regarding data processing with our designated Grievance Officer.

9. Account Deletion & Data Retention

You can request permanent account deletion directly through the app settings or by writing to support@blrsocial.in. Upon account deletion, your profile, photos, active sessions, and direct messages will be permanently purged from active databases within 30 days, except where retention is strictly required by statutory Indian law.

10. Statutory Grievance Redressal Officer

In accordance with the Information Technology Act 2000 and Rules made thereunder, the contact details of the Grievance Officer for BLRSocial are provided below: