HeyFling legal
Privacy Policy
What information HeyFling collects, how we use and share it, how long we keep it, and the choices and rights you have.
Last updated: September 28, 2026 · Applies to the HeyFling website and apps
01 Who we are
HeyFling is operated by Velnor Tech Labs LLP, 80 Ankit Heights, Indore, Madhya Pradesh 452010, India (“HeyFling”, “we”, “us”). We are the data fiduciary responsible for your personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). This policy explains what we collect, why, who we share it with, how long we keep it, and the choices you have.
02 Information we collect
Information you give us
- Account details: mobile number (verified by OTP), display name, language preferences, role (Client or Executive), and optional profile photo and bio.
- Executive payout verification (KYC): for Executives only, when they first request a payout, PAN, bank account details (confirmed by a small test deposit), date of birth, and a short live selfie video matched to their profile photo. Verification is carried out through authorised KYC partners.
- Support and safety: messages, reports, evidence files, and feedback you send us.
Information created when you use HeyFling
- Call records: who you called, when, for how long, the call type, Coins spent, gifts sent or received, ratings, and reviews.
- Transactions: Coin recharges, balances, refunds, and Executive payouts, amounts, dates, status, and references from our payment gateways. We do not receive or store your full card number, CVV, UPI PIN, or net-banking password.
- Device and log data: device model, operating system, app version, IP address, approximate location derived from IP, crash logs, and diagnostic data used for security and performance.
Call content. Calls are carried by our real-time audio/video provider, LiveKit, and are encrypted in transit. HeyFling does not record the audio or video of your calls, and call media is not stored by us. If we ever introduce a feature that records calls, we will ask for your clear consent first and tell you in the app.
03 How we use information
- to create and secure your account and verify your phone number;
- to show profiles and online status, connect calls, and process recharges, Coins, gifts, refunds, and Executive payouts;
- to review Executive profiles, verify Executives before payouts, and keep fake, underage, or unsafe profiles off the Service;
- to detect, investigate, and prevent fraud, abuse, and violations of our Terms and Community Guidelines;
- to provide customer support and respond to reports and grievances;
- to send service messages such as OTPs, receipts, payout updates, and policy updates;
- to understand usage in aggregate and improve features, performance, and safety;
- to comply with legal obligations, including tax, accounting, and lawful requests from authorities.
We process personal data on the basis of your consent, which you give when you sign up and can withdraw at any time, and for legitimate uses permitted by Section 7 of the DPDP Act, such as complying with law and responding to emergencies. We do not sell your personal data, and we do not use it for third-party advertising.
04 How information is shared
We share personal data only where needed, and require our service providers to protect it:
- Other users: your display name, photo, languages, ratings, and reviews are visible to people you interact with. Executives see a Client’s display name, not their phone number.
- Service providers (data processors): cloud hosting in India, real-time calling infrastructure (LiveKit), SMS/OTP delivery, payment gateways (such as Razorpay and Cashfree) and app-store billing, KYC verification for Executives, analytics, crash reporting, and customer-support tools.
- Legal and safety: law-enforcement or government agencies when required by law, and others where needed to protect someone’s life or safety.
- Business transfers: a successor entity if HeyFling is merged or acquired, subject to this policy.
05 Retention and deletion
We keep personal data only as long as needed for the purposes above:
- Account and profile data: while your account is active, and deleted within 30 days of an account-deletion request.
- Transaction and payout records, including Executive PAN and bank details: for 8 years, as required by Indian tax and accounting laws.
- Executive live selfie videos: deleted within 90 days after verification is completed; the verification result is kept while the account is active.
- Safety reports and enforcement records: up to 3 years after closure, or longer if required for a legal proceeding.
- Server logs: up to 180 days, as required under CERT-In directions.
06 Deleting your account
You can delete your HeyFling account and associated data at any time:
- In the app: open Settings → Account → Delete account and confirm with OTP.
- By email: write to [email protected] from your registered details with the subject “Delete my account”. We will verify the request and confirm when deletion is complete.
Deleting your account removes your profile, preferences, and reviews you wrote from public view. Some records are kept for the periods listed under Retention where the law requires it, and are then deleted. Any unused Coins are handled under our Refund & Cancellation Policy.
07 Security
We use reasonable security safeguards appropriate to the data we hold, including encryption in transit (TLS for app and website traffic, and encrypted media transport for calls), access controls, OTP authentication, and monitoring. No system is perfectly secure; if a personal data breach affects you, we will notify you and the Data Protection Board of India as required by law.
08 Your rights and choices
Under the DPDP Act you have the right to:
- access a summary of the personal data we process about you and the processing activities;
- correct, complete, or update inaccurate or incomplete data;
- erase data that is no longer needed, and withdraw consent (this may limit what we can provide);
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and if unresolved, with the Data Protection Board of India.
You can exercise these rights in the app settings or by writing to [email protected]. You can also control app permissions (microphone, camera, notifications) in your device settings.
09 Children
HeyFling is only for people aged 18 and over. We do not knowingly collect data from children. If we learn that an account belongs to someone under 18, we close it and delete the data, except where we must keep it to protect the child or report to authorities.
10 Cookies and similar technologies
Our website uses essential cookies to keep it secure and working, and privacy-friendly analytics to understand overall usage. We do not use cookies for third-party advertising. You can block cookies in your browser settings; essential features may not work without them.
11 Where data is processed
Your account, profile, transaction, and support data is stored on servers located in India. To connect calls with low delay, real-time call media is relayed through LiveKit’s infrastructure, which may route it through servers outside India while the call is in progress; it is not stored there. Where any service provider processes personal data outside India, we use only countries not restricted by the Government of India and contracts that require appropriate protection.
12 Policy updates
We may update this policy as our Service or the law changes. We will post the new version here with a new “Last updated” date and, for material changes, notify you in the app or by SMS before they take effect.
13 Contact and Grievance Officers
For privacy questions, requests, or complaints, contact our Grievance Officers:
Grievance Officers: Rahul Singh, Amogh Gopi, and Agin
Velnor Tech Labs LLP, 80 Ankit Heights, Indore, Madhya Pradesh 452010, India
Email: [email protected]
We acknowledge complaints within 24 hours and aim to resolve them within 15 days.