Privacy Policy

1. Who We Are

Othrhalff ("we", "us") is an independent student platform. We are NOT affiliated with, endorsed by, or acting on behalf of any university, college, or educational institution. University names appearing on the platform are provided by users themselves or used solely to help students find peers from the same campus.

2. What Data We Collect

• Account Data (from Google Sign-In): your name, email address, and profile photo as provided by Google. Used to create and identify your account.
• Profile Data: display name, gender, college/university, branch, year, interests, bio, date of birth, and avatar you provide. Your display name and photo are hidden from other users until a mutual match occurs or you choose to reveal them.
• Content You Post: chat messages with matches, glimpses (photo stories auto-deleted after 24 hours), anonymous confessions, and reactions.
• Interaction Data: swipes, matches, blocks, reports, and song requests — used to operate matching and safety features.
• Technical Data: device/browser information, IP address, and crash logs — used for security, abuse prevention, and fixing bugs.
• Analytics: anonymized usage events (e.g., "swipe right", "message sent") via Google Analytics to improve the product.

3. What We Do NOT Collect

• We do not access your university's internal systems, student records, or academic data.
• We do not read your personal Google account data beyond what Google shows you during sign-in consent.
• We do not track your location via GPS.
• We do not sell, rent, or trade your personal data to third parties — including universities, advertisers, or data brokers.

4. How Your Data Is Stored & Secured

• Data is hosted on Supabase (PostgreSQL) and cloud infrastructure with encryption in transit (TLS) and at rest.
• Row Level Security restricts database access so users can only read/write data they are permitted to.
• Glimpses are automatically deleted after 24 hours by scheduled jobs.
• Chat messages are stored server-side to deliver them reliably and sync across your devices. They are encrypted in transit but are not end-to-end encrypted; we can technically access message content, and will only do so to investigate verified reports of abuse, harassment, or illegal activity, or when legally required.
• Video/audio calls run on Agora. Call media streams are peer-to-peer/relay through Agora's network per their security terms and are not recorded by us.

5. What Other Users Can See

Your display name, avatar, university, branch/year, interests, and bio are visible to matched users. Anonymous features (confessions, anonymous glimpses) hide your identity by design. We show an online-presence indicator to your matches.

6. Third-Party Processors

We rely on these providers strictly to operate the service: Supabase (database/auth/storage), Agora (video/audio), Vercel & Render (hosting), Google (sign-in, analytics, push). Each processes data under its own privacy terms. We never share your data with universities or colleges.

7. Your Rights (DPDP Act, 2023)

• Access & Correction: view and correct your profile anytime from the Profile page.
• Erasure: request deletion of your account and personal data via in-app support or the Grievance Officer below. We will erase within 30 days, except data we must retain for legal compliance or active safety investigations.
• Withdrawal of Consent: you may stop using the service and request erasure at any time; withdrawal does not affect prior processing done lawfully.
• Grievance Redressal: if you believe your data was mishandled, contact our Grievance Officer (below). We respond within 30 days. You may also escalate to the Data Protection Board of India.

8. Data Retention

Profile and account data are retained while your account is active. Glimpses auto-expire after 24 hours. On account deletion, profile data, messages, matches, and content are erased within 30 days. Anonymized, aggregated analytics are retained indefinitely.

9. Children's Data

Othrhalff is strictly for users aged 18 and above who are enrolled university students. We do not knowingly collect data from anyone under 18. If we learn a user is under 18, the account and data are deleted immediately.

10. Grievance Officer

Per the DPDP Act and IT Rules, our Grievance Officer can be reached at othrhalff@gmail.com — or raise an in-app ticket from Profile → Contact Support. Include "Privacy Grievance" in your message.

11. Policy Changes

If we make material changes, we will notify you in-app before they take effect. Continued use after notification constitutes acceptance.