Privacy Policy

1. Overview & Core Privacy Commitment

At RakshaPlus Technologies ("we", "our", or "us"), we develop and publish YUZx ("YUZx – Connect Your World", the "Application") with an uncompromised commitment to user privacy, cryptographic integrity, and data sovereignty.

We operate on a strict Zero-Knowledge and Zero Data Brokering principle:

• We never sell, rent, monetize, or broker your personal information or metadata to third-party data brokers or advertising networks.
• We do not inspect, log, or sell the content of your private messages, voice notes, photos, or documents.
• We collect only the minimal data strictly necessary to authenticate your account, maintain secure network sessions, deliver real-time messages, and route encrypted audio/video calls.

2. Information and Data We Access, Collect, and Process

Depending on how you interact with YUZx across Android, Web, and Desktop clients, we collect and process the following categories of user data:

3. Android System Permissions & Exact Purpose

The YUZx Android application requests specific system permissions solely to deliver communication features with transparent runtime prompts:

• Camera (android.permission.CAMERA): Required to capture photos and videos directly within chats, broadcast video during meetings, and scan QR codes for web browser pairing.
• Microphone (android.permission.RECORD_AUDIO): Required to transmit audio during voice/video calls and record instant voice messages.
• Storage / Media Files (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO): Required to select and send media files from your gallery and save incoming media files to your device.
• Notifications (android.permission.POST_NOTIFICATIONS): Required to display notifications for new direct messages, group mentions, and incoming audio/video calls.
• Foreground Services (FOREGROUND_SERVICE_PHONE_CALL, FOREGROUND_SERVICE_MEDIA_PLAYBACK): Required to keep WebRTC calls and lossless background music streaming active when multitasking.
• Contacts (Optional): If explicitly permitted by you, hashed phone numbers are matched to discover friends already on YUZx. Address books are never uploaded or shared.

4. Third-Party Infrastructure & Subprocessors

We work with enterprise-grade, SOC2 / ISO 27001 compliant cloud infrastructure providers to operate the YUZx network:

5. Data Retention & Account / Data Deletion Policy

You have absolute control over your personal data in full compliance with the Google Play User Data & Account Deletion Policy:

• In-App Immediate Deletion: Inside the Android app, go to Settings → Account & Security → Delete Account. Confirming immediately revokes all authentication tokens, disconnects sessions, and purges your profile.
• Web Deletion Portal: You can also request account and personal data deletion via our web portal at https://xchat-backend.xchat-amitmallik.workers.dev/delete-account or by emailing privacy@rakshaplus.in.
• Permanent Erasure: Upon deletion request, all personal identifiers, account credentials, avatar images, and private messages are permanently erased from active production systems immediately, and backup snapshots expire within 30 days.

6. Cryptographic Security Standards

We deploy robust defense-in-depth security mechanisms:

• TLS 1.3 / HTTPS Encryption: All client-to-server traffic is encrypted in transit using modern cipher suites with HSTS enforcement.
• Hardware Keystore Isolation: Android client private keys and biometrics are isolated inside hardware-backed secure enclaves (TEE / StrongBox).
• Database Row-Level Isolation: Supabase cryptographic policies ensure users can only query records they are explicitly authorized to view.

7. Children's Privacy

YUZx is strictly intended for individuals aged 13 and above (or 16 and above in the European Economic Area). We do not knowingly collect or solicit personal data from children under 13. If we discover that personal information of a child under 13 has been collected without parental consent, we will immediately delete that information and terminate the account.

8. Contact Information & Privacy Grievance Officer

For any privacy inquiries, data deletion requests, or compliance questions, please contact our team: