Privacy policy

The Data Fiduciary is the Section 8 company that operates the Platform on behalf of the Cockroach Janta Party movement (the "Company"). Postal and contact details are on /grievance.

• Phone number — required to verify you are a real human via OTP. Stored as a one-way hash; the raw number is discarded after verification.
• Handle + profile metadata — the pseudonymous Swarm-ID and any bio you set. Public.
• Content you post — rants, memes, videos, polls, comments, reactions. Public until you delete them.
• Device fingerprint — non-PII hash derived from device characteristics, used for spam and abuse detection and for IT Rules 2021 traceability obligations.
• Approximate IP-derived region (state-level), used for spike detection and infra routing. We do not store raw IPs beyond 30 days.
• Analytics events — anonymized page-view and engagement events. No cross-site tracking.
• Cookies — only strictly necessary cookies (session, CSRF, theme preference). No third-party advertising cookies.

• Aadhaar, PAN, or any government ID.
• Your real name (unless you choose to put it in your bio).
• Your caste, religion, gender identity, sexual orientation, or political affiliation as a profile attribute.
• Selfies or biometric data.
• Your contact book or call logs.
• Your location with GPS precision.

• To run the Platform (auth, feed, moderation).
• To comply with our legal obligations under the IT Act 2000, IT Rules 2021, and DPDP Act 2023 — including traceability of first originator and grievance redressal.
• To detect and prevent spam, hate speech, doxxing, and coordinated abuse.
• To serve in-feed ads via brand-safe networks (InMobi primary). We do not share your personal data with ad networks beyond standard, anonymized SDK telemetry.
• To produce aggregate analytics. Aggregated data may be published in press materials or compliance reports.

We do not sell your personal data. We share data only:

• With service providers strictly necessary to operate the Platform (SMS gateway for OTP, cloud hosting, moderation APIs). These are bound by data-processing agreements.
• When required by lawful order from a competent Indian authority — pursuant to a writ, subpoena, or §69 / §69A IT Act order. Such disclosures are reviewed by counsel before response.

• Active account data — for as long as your account is active.
• Deleted account data — purged within 30 days of your deletion request, except where IT Rules 2021 / IT Act require us to retain certain logs (typically up to 180 days) for compliance.
• Raw IPs — 30 days, then discarded.
• Analytics events — 13 months in aggregate form.

Under the DPDP Act 2023, you may:

• Access the data we hold about you.
• Correct or update inaccurate data.
• Erase your data (one-tap purge via app/web settings).
• Nominate someone to exercise your rights on incapacity.
• File a grievance — see /grievance.
• Withdraw consent at any time (this terminates your account).

The Platform is intended for users 13 and over. We do not knowingly collect data from anyone under 13. If you believe a minor has signed up, please notify the Grievance Officer at /grievance and we will purge the account.

All traffic is encrypted in transit (TLS 1.2+). Phone numbers are stored only as one-way hashes. Refresh tokens are stored in the Android Keystore on mobile and as httpOnly+Secure cookies on web. We undergo periodic security review.

We will announce material changes to this policy in the app, on the website, and via push notification. Continued use of the Platform after a notice constitutes acceptance of the revised policy.