Privacy Policy

1. Who we are

TagIn is operated by Kayease Global Solutions LLP, Jaipur, Rajasthan, India ("we", "us"). We decide how your personal data is used. In the words of India's Digital Personal Data Protection Act, 2023, we are the "data fiduciary".

This policy covers the TagIn mobile app and this website. Questions? Email [email protected].

2. What we collect

2.1 What you give us

• Account: your mobile number, your MPIN (we store it only as a one-way hash, never the digits), and your recovery code (also only as a hash).
• Profile: name, username, gender, date of birth, profile and cover photos, gallery photos, bio, "looking for", and interests.
• Location: your last location and its place name (see 2.3).
• Emergency contact: the name and phone number you add in Safety Center.
• Verification selfie, if you ask for a Verified badge.
• Events: events you host or join, join requests and intro messages, check-in times, no-show marks, invitations, event photos, and ratings you give and receive (punctuality, sportsmanship, communication, and "play again").
• Posts: your text, photos and videos, comments, likes, saves and shares.
• Messages: chat text, photos, voice notes, GIFs, stickers, shared posts, reactions, replies and edits.
• Safety: reports you file, people you block, and appeals you send.
• Other: squads, follows, stars, saved posts, event alerts (including the map area you save), and notification settings.
• Website: if you use our contact form or newsletter, your name, email address, message and IP address.

2.2 What we collect automatically

• Devices: a push-notification token, your platform (Android, iOS or web), and when each device signed in and was last used.
• Activity: when you were last active. Others see this as your online status unless you turn it off.
• IP address: our servers use it briefly to block abuse and limit repeated attempts. We don't keep it for app users.
• Error reports: technical details when something breaks on our servers or website.

2.3 Location

• We ask for location permission to show events near you, to check you in at an event, and for the Safety Center tools. We never track you in the background.
• We keep only your last location, not a history. By default we save it rounded to about 200 m. You can choose Exact, Fuzzy (~200 m) or City only at Settings → Privacy & permissions → Privacy → Location precision. City only keeps no coordinates.
• Other users never see your coordinates. They see only a place name.
• To find that place name, we send your exact coordinates to Google Maps once, before rounding them.
• Check-in: we compare where you are with the event's pin, then throw the coordinates away. We keep only the time you checked in.
• Event pins are exact. Everyone who can see an event sees its pin.
• Any location data inside the photos you upload is removed before we save them.

2.4 Permissions on your phone

Each permission is optional, and you can turn it off at any time in your phone's settings.

• Location: see 2.3.
• Camera and photos: only for photos and videos you choose to take or pick.
• Microphone: for voice notes, and for voice search in chats. Voice search uses your phone's speech-to-text service (Google on Android, Apple on iOS), which may process the audio on their servers.
• Contacts: only if you use Invite friends. The app sends the phone numbers in your address book to our server to find which of your friends are already on TagIn. We use them only for that check and don't save them. Names and other contact details are never sent.
• Notifications: to send you push notifications.
• Fingerprint / Face unlock: your phone checks it. We never receive your fingerprint or face data.

2.5 What we don't collect

We don't read your SMS or call logs. We don't use advertising IDs, and we don't run advertising or analytics tracking inside the app.

3. How we use your data

• To run TagIn: your account and sign-in, events, the feed, posts, chat, squads, points and notifications.
• To show you relevant events and people: using your location, interests and activity.
• To keep people safe: checking ages, enforcing "Open to" and age limits, reviewing reports, verification, stopping spam and abuse, and enforcing our Terms and Community Guidelines.
• To help you: answering support requests and appeals.
• To fix and improve TagIn: using error reports and overall usage.
• To meet the law: keeping records and answering lawful requests.

We use your data because you agreed to it when you signed up, and for the legitimate purposes the law allows, such as safety and following the law. You can withdraw your consent at any time by changing your settings or deleting your account.

We do not sell your personal data, and we don't show ads.

Moderation and safety

To keep TagIn safe, our trained moderators may read chat messages, including private one-to-one, event and squad chats, even when they aren't in the chat. This includes messages deleted in the last 90 days. They do this only to look into reports, prevent harm, support you, and follow the law. Every time a moderator opens a chat, it is logged. We never make private chats public.

4. Who can see your information

• Other users see your profile (name, photos, bio, interests, badges, level, ratings summary, show-up rate), your posts and comments, the events you host, and messages in chats you're part of. You choose who sees your profile with Profile visibility (Public or Followers only), and who can message you with Who can message you. Both are at Settings → Privacy & permissions → Privacy. You can hide your online status at Settings → Privacy & permissions → Show my online status.
• Hosts see what you share when you ask to join their event.
• Your emergency contact receives your location only when you choose to send it with the SOS button or Share my location.
• Anyone with a link: when an event is shared, a web page shows its public details (title, description, host name, cover photo, time, place name and seats filled). Photos, videos and voice notes are stored as files and delivered through web links, so don't forward those links outside TagIn.
• People you block can't see your profile, join your events or message you.

5. Companies that help us

We share only what each company needs to do its job:

• SMSGatewayHub (India) gets your mobile number and the code, to send sign-in codes by SMS.
• Google Firebase Cloud Messaging gets your push token and the notification text, to deliver push notifications. A message notification can include the first part of the message.
• Google Firebase Authentication gets your mobile number, but only in older app versions that sent sign-in codes through Firebase.
• Google Maps Platform gets map requests, your coordinates (to find a place name) and the words you type into place search. This powers maps, place names and venue search.
• Google Fonts gets your device's IP address when the app downloads its typefaces and animated emoji.
• GIPHY gets your GIF search words (through our server). Your device then loads the GIFs directly from GIPHY, so GIPHY also sees your IP address. GIPHY powers GIFs and stickers in chat.
• Sentry gets technical error reports from our servers and website, so we can fix bugs.
• Plausible (website only, and only if you accept analytics) gets page views without cookies, so we can measure website visits. See our Cookie Policy.
• Our email provider receives website contact-form messages so we can reply.
• Our hosting provider stores TagIn's servers, database and files.

We may also share data:

• with police or authorities when the law requires it, or when it's needed to protect someone's life or safety; and
• with a new owner, if our business is merged or sold. They must follow this policy.

Some of these companies may process data outside India. When they do, we rely on the protections the law requires.

6. How long we keep data

• While your account is active: we keep your data so TagIn works.
• When you delete your account: we immediately erase your mobile number, MPIN, name, username, gender, date of birth, bio, photos, selfie, location, emergency contact and notification settings. We also sign you out everywhere and cancel the events you're hosting. Things you shared with others (messages, posts, comments, ratings, event photos and reports) stay in our records, hidden from everyone and no longer linked to your name or number. Deletion can't be undone.
• Deleted messages: removed for everyone straight away. A copy only moderators can read is kept for 90 days so safety reports can still be checked, and then it is permanently deleted.
• Sign-in: you stay signed in on a device until you sign out or don't open TagIn for 30 days.
• Sign-in codes expire after 5 minutes.
• Backups of our database are kept for up to 30 days.
• Reports, moderation records and appeals are kept for as long as we need them for safety and legal reasons.

7. How we protect your data

• All traffic between the app and our servers is encrypted (HTTPS).
• MPINs and recovery codes are stored only as one-way hashes.
• Verification selfies are stored privately, and only moderators can see them.
• Moderator access to chats and accounts is limited and logged.
• You can sign out other devices at Settings → Account & security → Active devices.

No system is perfectly secure. If you find a security problem, please tell us at [email protected].

8. Your choices and rights

• See and download your data: Settings → Privacy & permissions → Download my data. For anything not included, email us.
• Correct your data: Settings → Account & security → Edit profile.
• Delete your account: Settings → Delete my account. See Account Deletion.
• Control who sees you: Settings → Privacy & permissions → Privacy, and Show my online status.
• Notifications: Settings → Notifications → Push notifications.
• Location and other permissions: Settings → Privacy & permissions → Location permission, or your phone's settings.
• Block people: from their profile ⋮ menu.

Under India's Digital Personal Data Protection Act, 2023, you can ask us for a summary of your data, ask us to correct, complete or erase it, withdraw consent, name someone to act for you if you die or can no longer act, and raise a grievance. If you're not happy with our answer, you can complain to the Data Protection Board of India.

If you live in another country, you may have similar rights under your local law (for example, the GDPR in the EU and UK). Email us to use any of these rights. We'll reply within 30 days.

9. Grievance Officer

Grievance Officer, TagIn
Kayease Global Solutions LLP, Jaipur, Rajasthan, India
Email: [email protected] (subject line "Grievance")

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

10. Children

TagIn is only for people 18 and over. We ask for your date of birth and refuse anyone under 18. If you think someone under 18 is using TagIn, email [email protected] and we will remove the account.

11. Changes to this policy

If we make an important change, we'll tell you in the app at least 30 days before it takes effect. Small wording fixes just get a new "Last updated" date.

12. Contact

Kayease Global Solutions LLP, Jaipur, Rajasthan, India. Email: [email protected].