Privacy Policy

This Privacy Policy explains how Instayaar, operated by Joshful Apps Private Limited (“Instayaar”, “we”, “us”, or “our”), collects, uses, stores, and protects personal information when you access or use our website, mobile application, and related services (collectively, the “Platform”).

Instayaar is built on trust. Because the Platform facilitates real-world human interactions, we take privacy, safety, and data protection seriously. By using the Platform, you consent to the practices described in this Privacy Policy.

Our Approach to Privacy

Instayaar operates in a sensitive space involving companionship, emotional well-being, and personal safety. We collect only the information necessary to operate the Platform responsibly, verify users, and deliver a safe experience. We do not sell personal data or use it for unrelated purposes.

Information We Collect

We collect information in three primary ways.

Information you provide directly includes details shared during registration and profile creation, such as your name, contact details, date of birth, profile information, interests, and photographs. If you register as a Yaar, we may also collect identity documents and verification details as required for safety and trust.

Information from third parties may be received from identity verification partners, payment service providers, and analytics tools. Such data is used strictly for verification, fraud prevention, and service improvement.

Purpose of Data Use

We use personal information to operate and improve Instayaar responsibly. This includes creating and managing user accounts, verifying identities, enabling bookings and payments, facilitating communication after confirmed bookings, providing customer support, resolving disputes, and enforcing platform policies.

We may also use aggregated or anonymized data to understand usage trends and improve the Platform. Personal data is never used for purposes that conflict with this Privacy Policy.

Sensitive Personal Data

Certain information, such as government-issued identification documents and verification records, is treated as sensitive personal data. This data is collected only when necessary and is accessible only to authorized personnel or trusted verification partners. We apply heightened security measures to protect such information.

Face Data Privacy, Collection, Storage, and Deletion Policy

In strict accordance with Apple App Store Review Guideline 5.1.1(i) and applicable data protection regulations, this section details our policies and practices regarding the collection, use, disclosure, sharing, retention, deletion, and protection of face data:

1. Collection, Intended Uses, and Disclosures of Face Data

What Face Data We Collect: When you create an account, upload profile photos, or participate in our identity and trust verification workflow (such as selfie verification / Yaar identity verification), we collect photographic still images (selfies and profile photos) captured via your device camera or uploaded from your photo library. We do NOT collect, extract, or process biometric facial identifiers, TrueDepth facial mesh data, depth maps, or facial geometry templates.

Intended Uses: Face data (selfie photographs and profile pictures) is collected and processed solely for the following legitimate purposes:

• Identity Verification: To verify that the person creating the profile is genuine and authentic, preventing identity theft, bot registrations, and account impersonation.
• Safety & Trust: To allow users to view verified profile images before meeting in real-world activity sessions, creating a secure, trusted, and accountable community.
• Platform Integrity & Dispute Resolution: To review and resolve disputes, safety concerns, or reported community guideline violations.

Disclosures: Face data is NEVER disclosed, sold, rented, or traded to third-party advertisers, data brokers, or marketing networks. Face data is never used for commercial advertising, cross-app tracking, or automated profiling.

2. Face Data Sharing and Retention Policies

Sharing Policy: We do not share face data with any external third parties for commercial or marketing purposes. Face data is only accessible to authorized internal Trust & Safety personnel and processed by our secure, encrypted cloud infrastructure providers strictly to execute encrypted hosting, transmission, and platform security.

Retention Period: Face data (selfie photos and profile images) is retained only for as long as your account remains active on the Platform. Once an account is deleted or consent is revoked, retention ends immediately in accordance with our deletion policy below.

3. Face Data Deletion Policy & How Users Can Revoke Consent

Users maintain complete ownership and control over their face data at all times, including the right to delete data and revoke consent:

• How Users Can Delete Face Data:
  • In-App Profile Management: You can replace, edit, or remove your profile photos at any time via Profile > Edit Profile.
  • In-App Account Deletion: You can permanently delete your account and all associated face data directly within the app by navigating to Settings > Account Settings > Delete Account.
  • Direct Deletion Request: You can request immediate deletion of your face data by sending an email to our Data Protection Team at hello@instayaar.com with the subject line "Face Data Deletion Request". Upon receipt, all selfie photos and associated verification records are permanently deleted from our primary servers and databases within 30 days.
• How Users Can Revoke Consent:
  • Device Settings Permission Revocation: You can revoke camera or photo library access permissions at any time through your iOS device settings by going to Settings > InstaYaar > Camera (or Photos) and toggling off the permission.
  • Revoking Verification Consent: If you previously submitted a selfie for identity verification and wish to revoke consent without deleting your entire account, you can email hello@instayaar.com requesting "Revocation of Face Verification Consent". Upon processing, your verification badge will be removed, and the verification selfie photo will be permanently deleted from our verification database.

4. Third-Party Equal Protection Confirmation

Equal Protection Guarantee: If face data is processed by or shared with any third-party service provider (such as secure cloud storage and infrastructure hosting providers), we confirm that any third party with whom our app shares face data will provide the same or equal protection of the face data as stated in this Privacy Policy. All such providers are bound by strict Data Processing Agreements requiring equivalent security, encryption at rest (AES-256) and in transit (TLS 1.3), confidentiality, and strict limitations prohibiting any other use of face data.

Cookies and Tracking Technologies

Instayaar may use cookies or similar technologies to enhance user experience, remember preferences, and analyze platform performance. You can control cookie settings through your browser or device. Disabling cookies may affect certain features of the Platform.

Sharing of Information

We do not sell or rent personal information. Data may be shared only in limited circumstances, such as with trusted service providers (including payment gateways and verification partners), to comply with legal obligations, to protect user safety, or during corporate restructuring such as a merger or acquisition.

All third parties are required to handle data securely and only for permitted purposes.

Profile Visibility and Communication

User profiles are displayed within the Platform according to its design and privacy controls. Personal contact details are not publicly visible. Communication between users is enabled only after booking confirmation to maintain safety and reduce misuse.

Users retain control over optional profile information they choose to share.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, and resolve disputes. When data is no longer required, it is securely deleted or anonymized.

Data Security

We implement reasonable technical and organizational safeguards to protect personal data, including secure servers, encryption, and access controls. While we strive to protect user information, no system can be guaranteed to be completely secure. Users share information at their own discretion.

Your Rights

You may access, update, or correct your personal information through your account settings. You may also request account deletion or withdrawal of consent, subject to legal and regulatory requirements. Requests can be made using the contact details provided below, or through our dedicated web deletion portal:

Children’s Privacy

Instayaar is intended only for individuals aged 18 years and above. We do not knowingly collect personal information from minors. If such data is identified, it will be deleted promptly.

Third-Party Links

The Platform may contain links to third-party websites or services. Instayaar is not responsible for the privacy practices of those third parties, and users should review their policies separately.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or platform operations. Updates will be posted on the Platform. Continued use after changes indicates acceptance of the revised Policy.

Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of India.

Contact Us

If you have questions, concerns, or requests related to privacy or data protection, you may contact us at:

Email: hello@instayaar.com
Phone: +91 90730 07070
Company: Joshful Apps Private Limited