Who we are
Dostii is a voice-first social app operated by Omachi Innovation Private Limited, registered in Bengaluru, India. This policy explains what we collect when you use the Dostii app or visit dostii.app, why, and what control you have.
We are the data fiduciary for this information. Contact us at info@dostii.app for anything in this policy.
Written to align with India's Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
What we collect
| Category | What it includes |
|---|---|
| Account | Phone number, display name, age confirmation, languages, interests, profile photo if you add one |
| Verification | A selfie or short video used to confirm you are a real adult, plus the result of that check |
| Activity | Rooms joined, call start and end times, call duration, who you called, coins spent, gifts sent and received |
| Content | Text messages, profile text, room names and any media you upload |
| Safety records | Reports you make or that are made about you, and moderation decisions |
| Payments | Coin purchases, transaction IDs and receipts from Google Play or our payment partner |
| Device and technical | Device model, OS version, app version, IP address, approximate location from IP, crash logs, advertising ID |
Calls and voice
Voice and video calls are transmitted in real time and are not recorded or stored by default. We record a call only when it is flagged by our automated safety systems or reported by a participant, and in that case we keep the recording for up to 90 days solely for moderation and for responding to law enforcement. We do not use your calls to train advertising profiles and we do not sell them.
What we do not collect
We do not read your contacts, SMS or call logs from your device, and we do not ask for them.
Why we use it
| Purpose | Basis |
|---|---|
| Creating your account and connecting your calls | Performance of our contract with you |
| Verifying age and identity | Legal obligation and our legitimate interest in keeping minors off the platform |
| Moderating content and investigating reports | Legitimate interest in user safety, and legal obligation as an intermediary |
| Processing coin purchases and preventing payment fraud | Contract and legal obligation |
| Matching you to rooms and people | Contract |
| Product analytics and crash fixing | Legitimate interest, using aggregated data where possible |
| Marketing messages | Your consent, withdrawable at any time |
Who we share it with
- Other users see only your display name, photo, languages, interests and badges. They never see your phone number, exact location, email or payment details.
- Service providers for calling infrastructure, cloud hosting, identity verification, payments, analytics and customer support, under contract and confidentiality.
- Law enforcement and courts where we are legally required to disclose, or where disclosure is necessary to prevent serious harm.
- A successor if our business is acquired or reorganised, with equivalent protection.
Some providers operate outside India. Where data leaves the country we use the transfer safeguards applicable law permits. We do not sell personal data.
How long we keep it
- Account data: while your account is active, then 90 days after deletion, except where law requires longer.
- Verification selfies: deleted within 30 days of a successful check; only the pass or fail result is kept.
- Call metadata (who, when, how long): 180 days.
- Flagged or reported call recordings: up to 90 days, or longer if part of an active investigation.
- Payment and tax records: 8 years, as Indian law requires.
- Records of banned accounts: retained to stop the same person re-registering.
Your rights and deleting your account
You can access and correct most of your data in the app under Settings. You may also ask us to give you a copy of your data, correct it, delete it, withdraw consent, or nominate someone to act for you if you die or become incapable.
Deleting your account
Open Settings, then Account, then Delete account — or email info@dostii.app from your registered number's email. Deletion removes your profile and messages within 90 days. Unused coins are forfeited on deletion and are not refundable. We keep the minimum needed for legal, tax and safety purposes as described above.
Write to us to exercise any right. We verify your identity and respond within 30 days.
Children
Dostii is strictly for people aged 18 and over. We do not knowingly collect data from children and we verify age at signup. If we learn that a minor has created an account, we delete it and the associated data immediately.
If you believe a minor is using Dostii, report it in the app or write to info@dostii.app. We report child sexual abuse material to the National Cybercrime Reporting Portal and the relevant authorities.
Security
Calls and messages are encrypted in transit. Data at rest is encrypted, access is role-based and limited to staff who need it, and administrative access is logged. Moderators see only what a report requires.
No system is perfectly secure. If a breach is likely to affect you, we will tell you and the Data Protection Board within the timelines the law requires.
Grievance officer
As required by the IT Rules, 2021:
- Name: [grievance officer name]
- Email: grievance.officer@omachi.in
- Based in: Bengaluru, Karnataka, India
We acknowledge complaints within 24 hours and resolve them within 15 days. Complaints about non-consensual intimate imagery are actioned within 24 hours.
We update this policy as the app and the law change. The date at the top shows the current version, and we notify you in the app before material changes take effect.