Privacy Policy

Welcome to IndiAdda. We are committed to protecting your personal information and your right to privacy.

IndiAdda is a social and community application owned and operated by PJ Consulting Services, having its principal place of business at 1419 Valley Trail, Irving, Texas 75063, United States. “IndiAdda” is a product and trade name of PJ Consulting Services (https://pjconsulting.co/).

This Privacy Policy explains how PJ Consulting Services, as the operator of IndiAdda ("we," "us," or "our"), collects, uses, shares, and protects your information when you use our mobile application and services.

Where consent is required for a particular processing activity, we will request it separately and explain the relevant choice.

1. Information You Provide:

• Personal identifiers: name, email address, phone number, username, profile picture
• Account data: city, neighborhood, account preferences, marketing preferences, consent records (including the required 18+ attestation and terms version), and authentication metadata handled by Supabase
• User content: posts, events, messages, comments, marketplace listings, room posts, and travel posts
• Communications: support requests, feedback, reports, and moderation appeals you send to us
• Marketplace and listing contact data: listing inquiries, selected contact methods, contact request metadata, and messages you choose to send
• Safety and fraud records: reports, blocks, moderation decisions, audit logs, suspected scam indicators, and evidence or context you submit to us
• Automated processing records: content snapshots, classifications, confidence scores, generated suggestions, provider and model details, and related audit metadata
• We do not ask for or process payment card numbers, bank account credentials, Social Security numbers, or immigration documents for marketplace transactions

2. Information Collected Automatically:

• User-provided location data: city/neighborhood used for local content and filters
• Usage data: app interactions, features used, logs, and crash reports for debugging
• Device information: device type, operating system, app version, and push notification token if notifications are enabled
• Network information: IP address and connection metadata used for security, reliability, and service optimization

3. Diagnostics & Crash Reporting:

We use Sentry to collect crash reports and diagnostic information. When a crash or error occurs, Sentry may receive: app version, device model, operating system version, stack traces, and limited app interaction breadcrumbs. We scrub sensitive data — including email addresses, phone numbers, authentication tokens, and payment-like values — before sending any crash report. Performance tracing is disabled. You can confirm this in App Store Connect under Diagnostics → Crash Data.

4. Service Providers and SDKs:

• Supabase: authentication, database, and backend services
• Cloudflare R2/CDN: image storage and delivery
• Sentry: crash reporting and error diagnostics (see section 3 above)
• Expo: push notification delivery when enabled
• Resend: email delivery for account and marketing email when applicable
• AI service providers: OpenAI and, when configured, Anthropic or Google, for automated content moderation and AI-assisted community features

• To provide and maintain our services
• To personalize your experience and deliver relevant local content
• To communicate with you about account, security, support, and service updates
• To send marketing email only when you have opted in or where otherwise permitted by law
• To improve our app through analytics, diagnostics, and user feedback
• To detect, prevent, and address technical issues, spam, abuse, and fraud
• To review reports, investigate suspected scams or unsafe behavior, enforce our Terms, and protect users and the service
• To comply with legal obligations and enforce our terms
• To connect you with other users for community events, services, and marketplace activity

We use automated systems, including third-party artificial intelligence services, to help operate and protect IndiAdda.

• Safety and moderation: Public posts, comments, listings, profiles, and related content may be analyzed to detect spam, fraud, unsafe material, or violations of our Terms and Community Guidelines
• AI suggestions: Where this feature is enabled, eligible public posts may be processed to generate clearly labeled AI comments or suggestions
• For automated moderation, we send the public-content snapshot reasonably needed for classification. Depending on the content type, this may include public text and relevant listing, location, price, category, availability, route, or tag information. We do not include separate account email, phone, authentication, device, or full-profile fields in these requests; public content may nevertheless contain personal information that a user chose to post
• We use automated redaction to reduce personal information in AI-suggestion requests, but automated redaction is not guaranteed to identify or remove every personal detail. Moderation processing may use the content snapshot needed to evaluate the content
• AI outputs and classifications can be incomplete, inaccurate, or inappropriate. Authorized moderators may review, override, restore, or otherwise act on automated decisions
• Do not include passwords, one-time codes, financial credentials, identification documents, immigration documents, medical records, or other highly sensitive information in public content
• We do not send private messages or unrelated message history to external AI providers for automated moderation or AI community suggestions. Reported private messages may be reviewed by authorized human moderators as needed to investigate a report
• You may request review of an eligible enforcement decision using the appeal process described in our Terms of Service

We will conduct a separate privacy and legal review and provide an appropriate notice before materially expanding AI processing to new private-content categories.

• With other users: profile information, posts, listings, and content you choose to make public or send
• With service providers: Supabase, Cloudflare, Sentry, Expo, Resend, and similar vendors that help us operate the service
• With AI service providers: content and related instructions may be sent to OpenAI or, for moderation when configured, Anthropic or Google. These providers process the information on our behalf under their applicable service terms and data controls
• With other users via external apps: when you choose to contact a seller, service provider, or other user via WhatsApp, Telegram, Instagram, email, or phone, the contact handle they have published on their listing is opened in the corresponding external app. IndiAdda is not in the data path for that communication — it is a direct link from your device to the third-party service.
• With your direction or consent: for features you choose to use, such as contacting another user
• Legal and safety reasons: when required by law or needed to protect rights, safety, and the integrity of the service
• With law enforcement, consumer protection agencies, payment providers you used outside the app, or other relevant parties when you ask us to, when legally required, or when we believe disclosure is needed to address fraud, scams, security incidents, threats, or illegal conduct
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets
• Aggregated or de-identified data: statistical data that does not identify you

We do not sell personal information or share it for cross-context behavioral advertising.

We use reasonable administrative, technical, and organizational safeguards, including:

• Encryption of data in transit
• Provider-side safeguards for hosted database, auth, and storage services
• Access controls and authentication mechanisms
• Admin role checks and database row-level security where applicable
• Logging and incident response procedures for potential security events

However, no method of transmission over the internet is 100% secure.

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security, prevent abuse, and support moderation

Account Deletion:

• You can delete your account anytime in Settings > Privacy & Security > Delete Account
• We generally begin processing account-deletion requests promptly. Production data is deleted or de-identified according to the timeframes and exceptions in this Privacy Policy.
• We attempt to delete user-uploaded media associated with your account as part of the deletion flow
• Some records may be retained for limited periods where needed for legal compliance, security, fraud prevention, backups, or moderation/audit logs
• We may retain a minimal record of your acceptance of our legal documents, such as document versions, acceptance time, app version, platform, and an account identifier, where reasonably necessary to establish, exercise, or defend legal claims or demonstrate compliance
• Moderation queue snapshots are retained while the underlying public content remains active. Moderation decisions, their content snapshots, and provider/model metadata are generally deleted within 2 years after the decision; orphaned snapshots for deleted content are generally deleted within 2 years after their last moderation activity. We may retain limited information longer where reasonably necessary for safety, appeals, fraud prevention, dispute resolution, or legal compliance
• AI providers may retain request and response data according to our contract, account configuration, and their applicable service terms. We do not represent that provider retention is always zero
• Moderation and safety records — including content reports, block records, scam or safety investigations, and admin audit logs — may be retained after account deletion when needed to protect users, enforce our Terms, respond to disputes, or comply with law. References to deleted accounts in these records are anonymized.
• Backup copies expire under our normal backup retention process
• Account deletion cannot be undone

Depending on where you live and how you use the service, you may have the right to:

• Access: Request information about personal information we process
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of information associated with your account where applicable
• Opt out: Unsubscribe from marketing communications
• Restriction or limitation: Ask us to limit certain uses where required by law
• Non-discrimination: Not be treated unfairly for exercising privacy rights

To exercise these rights, contact us at privacy@indiadda.com

The mobile app may use local storage, device identifiers, logs, and similar technologies to:

• Remember your preferences and settings
• Analyze app usage and performance
• Provide personalized local content
• Enhance security and prevent fraud

You can manage app permissions and notification settings in your device settings.

Our services are intended only for adults age 18 and older.

We do not knowingly collect personal information from, or permit accounts for, anyone under 18 years of age.

If you believe that a person under 18 has provided personal information to us or created an account, please contact us immediately at privacy@indiadda.com

We will investigate the report and take appropriate steps to disable the account and remove associated personal information, subject to any safety, legal, fraud-prevention, moderation, or backup retention described in this Privacy Policy.

You must be at least 18 years old to create an account or use our services.

PJ Consulting Services, the operator of IndiAdda, is based in Texas, United States. Your information may be transferred to and processed in the United States or other countries where our service providers operate.

When we use vendors or service providers, we rely on contractual and organizational safeguards appropriate to the services they provide.

The app is designed for users in the United States. Your information may be transferred and processed as described in this Privacy Policy and as permitted or required by applicable law.

If the CCPA/CPRA applies to us and you are a California resident, you may have additional rights:

Your Rights:

• Right to Know: Request what personal information we collect, use, disclose, sell, or share
• Right to Delete: Request deletion of personal information, subject to exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out: We do not sell personal information or share it for cross-context behavioral advertising
• Right to Non-Discrimination: We will not discriminate for exercising your rights
• Right to Limit Sensitive Data: Request limits on certain uses of sensitive personal information where applicable

Data We Collect: Personal identifiers, user-provided location data, device information, usage data, communications, and user content

Business Purpose: Provide services, personalization, security, analytics, automated moderation, fraud prevention, and AI-assisted community features

Data Sale/Sharing: We do not sell personal information or share it for cross-context behavioral advertising

Service Providers: Supabase, Cloudflare, Sentry, Expo, Resend, OpenAI, and, when configured, Anthropic or Google, plus similar operational vendors

To exercise these rights, contact us at privacy@indiadda.com or use in-app settings.

We will respond within 45 days of receiving your request.

IndiAdda is designed and intended for use in the United States. It is not directed at residents of the European Union, United Kingdom, or other jurisdictions with distinct data protection regimes such as GDPR or UK GDPR.

PJ Consulting Services operates IndiAdda from the United States. Your information may be processed in the United States or other countries where our service providers operate. Data protection laws in those countries may differ from the laws in your country.

By using the app, you acknowledge that your information will be processed as described in this Privacy Policy.

You may contact us at privacy@indiadda.com with privacy questions or requests.

United States: The Federal Trade Commission may take action against deceptive privacy or security claims and unfair privacy or data-security practices. We aim to collect only information needed for the service, protect retained information, honor our privacy commitments, and provide clear choices for unexpected or sensitive data collection.

U.S. state laws may apply depending on our operations, users, revenue, and data practices. For example, covered California residents may have rights to know, correct, delete, limit certain sensitive-personal-information uses, and opt out of sale or sharing. Other states, including Colorado, may provide similar rights.

We aim to provide core access, correction, deletion, export, and marketing opt-out rights to all U.S. users where feasible. This voluntary approach does not replace any state-specific requirement that applies to us.

India: India's Digital Personal Data Protection Act, 2023 may apply to digital personal-data processing performed in India, including processing by us or India-based personnel. We are building our notice, consent, security, correction, deletion, grievance, processor-contract, and retention practices in advance of the phased commencement of the Act and Rules.

We may update this Privacy Policy from time to time.

For non-material changes, we may provide notice by updating the posted Privacy Policy and the Last Updated date.

For material changes, we will provide prominent notice before the changes take effect, such as an in-app notice or email where appropriate.

Where required by law, we will obtain your affirmative consent before applying materially different data practices to information previously collected.

If you do not agree with a material change, you may stop using the app and delete your account.

If you have questions or concerns about this Privacy Policy, contact us:

PJ Consulting Services

Owner and operator of IndiAdda

Address: 1419 Valley Trail, Irving, Texas 75063, United States

Website: https://pjconsulting.co/

Privacy Department

Email: privacy@indiadda.com

Privacy Contact: privacy@indiadda.com

Built for Indian and South Asian communities in the United States; people of all backgrounds are welcome