Privacy Policy

👁️ Overview

Wrap ("we", "our", "us") is a social connection and messaging application operated from India. This Privacy Policy explains how we collect, use, store, and share information when you use the Wrap mobile application and website located at wrapchat.in.

By downloading or using Wrap, you agree to the practices described in this policy. If you do not agree, please do not use our services.

📋 Information We Collect

1. Account Information

• Phone number — used for authentication via OTP. We never share it publicly.
• Display name and username — visible to other users within the app.
• Bio, profile picture, age, gender, and interests — set by you, visible to others per your privacy settings.
• Occupation — optionally shared in the Connect/Discover feed.

2. Content You Create

• Messages — stored on our servers to enable delivery. Ephemeral messages are permanently deleted after being read.
• Snaps (photos/videos) — stored temporarily and deleted after the recipient views them.
• Stories — stored for up to 24 hours and then permanently deleted.
• Gallery photos — stored as long as you keep them on your profile.

3. Usage & Technical Data

• Device type, operating system, app version
• IP address (used for security and spam prevention only)
• Online/offline presence status (only while using the app)
• Location (only if you grant permission; used for the Discover nearby feature)
• Call metadata — duration, call type (audio/video), timestamp. We do not record or store call content.

4. Push Notification Token (FCM)

We store your Firebase Cloud Messaging (FCM) token to deliver push notifications. You can revoke this at any time by disabling notifications in your device settings.

🔧 How We Use Your Data

• To authenticate you and keep your account secure
• To deliver messages, snaps, stories, and call signals between users
• To show you relevant people in the Discover / Connect feed
• To send push notifications about new messages and calls
• To measure app performance and fix bugs
• To enforce our Terms of Service and prevent abuse
• To comply with applicable Indian law (including IT Act 2000 and its amendments)

🤝 Data Sharing

We do not sell, trade, or share your personal data with third parties for marketing purposes. We may share data only in the following limited cases:

Service Providers

• Hostinger — server hosting (India region)
• Firebase / Google — push notification delivery
• MSG91 / SMS gateway — OTP delivery only
• STUN/TURN servers — used to establish WebRTC calls; they see your IP but not call content

All service providers are contractually bound to protect your data and may not use it for any other purpose.

Legal Requirements

We may disclose your information if required to do so by a court order, government authority, or applicable Indian law, including the Information Technology Act, 2000.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before any such transfer and give you the option to delete your account.

🔒 Data Storage & Security

• All data is stored on servers located in India.
• Data in transit is protected by HTTPS (TLS 1.2+).
• Passwords are never stored — we use phone OTP authentication only.
• Access to your data is restricted to authorised engineering staff only.
• Ephemeral messages and snaps are hard-deleted from our database and file storage immediately after being viewed.
• Stories are permanently deleted after 24 hours.

No system is 100% secure. While we use industry-standard protections, we cannot guarantee absolute security of your data. Please report security vulnerabilities to security@wrapchat.app.

📹 Calls & Media

Wrap uses WebRTC peer-to-peer technology for audio and video calls. This means:

• Call audio and video travel directly between devices when possible — we never record or store call content.
• Only call metadata (duration, type, timestamp) is stored to display call history.
• ICE candidates (used to establish the connection) are stored temporarily and deleted when the call ends.
• Your IP address may be visible to the other call participant during a direct peer-to-peer connection.

⚖️ Your Rights

Under India's Digital Personal Data Protection Act (DPDPA) 2023 and applicable law, you have the right to:

Access Your Data

Request a copy of all personal data we hold about you by contacting privacy@wrapchat.app. We will respond within 30 days.

Correct Your Data

Update your profile information, display name, bio, and photo directly in the app at any time.

Delete Your Account

You may request full deletion of your account and all associated data by contacting us. Deletion is permanent and completed within 30 days. Some data may be retained for up to 90 days in backups before being purged.

Withdraw Consent

You may withdraw consent for location access, notifications, or camera/microphone access at any time through your device settings.

Data Portability

You may request an export of your data in a machine-readable format.

🍪 Cookies & Analytics

The Wrap mobile app does not use cookies. The website (wrapchat.in) uses only essential cookies required for the admin panel login session. We do not use tracking cookies, advertising cookies, or third-party analytics on our website.

👶 Children's Privacy

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send a push notification to all users
• Require re-acknowledgment within the app if changes are significant

Continued use of Wrap after changes take effect constitutes your acceptance of the updated policy.

📬 Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please contact us: