Privacy Policy — Friend You Need

Version 2026-10-30. KAPT Ventures ("we", "us") operates Friend You Need. This policy explains how we handle your personal data under India's Digital Personal Data Protection Act, 2023 and its Rules.

What we collect and why

Data	Why
Name or nickname	To address you and show who joined your session.
Email address	To send your one-time code, booking confirmation, session link and reminders.
Mobile number (only if you choose mobile verification)	To send a one-time code and your session link by message.
Topic (optional)	So your listener can prepare. Skip it if you prefer. It can reveal how you feel, so we treat it as confidential.
Booking and payment reference	To run your session, give refunds and meet tax and accounting law. We never see or store your card, UPI PIN or bank details; Razorpay handles those.
IP address, device and timing logs	To prevent fraud and abuse, keep OTPs safe and investigate security incidents.

We do not record your voice session and we do not store audio. We do not sell your data and we do not use it for advertising.

Basis: your consent

We process your data because you gave consent before booking (a clear tick-box, recorded with the date, time and policy version). Some data is also kept because the law requires it (for example payment and tax records). You can withdraw consent any time, as easily as you gave it, from the privacy request page.

Who we share it with

Razorpay: payments and refunds.
VideoSDK: carries the live audio of your session. Audio is not recorded by us.
Our email and SMS/WhatsApp providers: to deliver codes and links.
Hosting provider: stores our database.
Authorities, only where the law requires it.

Some of these providers may process data outside India. We choose providers with appropriate security commitments and share only what is needed.

How long we keep it

One-time codes: deleted within 24 hours.
Session link emails: deleted after 180 days.
Booking, payment and invoice records: as long as tax and accounting law requires.
Security and access logs: at least one year, as the Rules require, then deleted.
Your booking history (sessions booked, plan, time, amount, payment reference) is kept while you use the service so we can give support and refunds, and deleted or anonymised within 7 days of a verified erasure request, except records the law requires us to keep.
Everything else linked to you: deleted when you withdraw consent or ask for erasure, unless the law says we must keep it.

Your rights

You can ask to access a summary of your data, correct it, erase it, withdraw consent, nominate someone to exercise these rights if you die or cannot, and make a complaint. Use the privacy request page or write to info@friendyouneed.com. We reply within 30 days, and confirm erasure within 7 days of verifying your request. If you are not satisfied, you may complain to the Data Protection Board of India.

Confidentiality

Sessions are confidential. The only exception is a credible, immediate risk to someone's life, where we may act as the law requires.

Age

This service is for people aged 18 or over. Under the DPDP Act, children's data needs verifiable parental consent, which we do not collect, so we do not accept bookings from anyone under 18. If we find one we will cancel it, refund it and delete the data within 7 days.

Security and breaches

We use encryption in transit, hashed one-time codes, access controls and logging. If a breach affects you we will tell you and the authorities as the law requires.

Cookies

See our Cookie Policy.

Grievance officer and contact

Grievance Officer, KAPT Ventures, Delhi, India. Email: info@friendyouneed.com.

If you are in the EU or UK, you also have the right to object to processing and to complain to your supervisory authority. Your data is processed in India.

We will tell you by email at least 14 days before a material change takes effect. If a change affects what you consented to, we will ask again.