Grazium

Grazium

Privacy Policy

Appykan Technologies Private Limited · CIN: U72502RJ2021PTC076553 · Effective: June 10, 2026 · IT Act 2000 · SPDI Rules 2011 · DPDP Act 2023

By using Grazium or creating an account, you confirm that you have read and agree to this Privacy Policy. If you do not agree, do not use the Platform.

Privacy queries: support@grazium.com · www.grazium.com/privacy-policy

1. Who We Are and Scope

This Privacy Policy ("Policy") explains how Appykan Technologies Private Limited (CIN: U72502RJ2021PTC076553), incorporated on August 20, 2021 under the Companies Act, 2013 ("Company", "we", "us"), collects, uses, stores, and protects your personal data when you use the Grazium Platform.

This Policy applies to all users in India and is governed by the Information Technology Act, 2000 ("IT Act"); the IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"); and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

This Policy applies exclusively to users in India. It covers the Grazium mobile application and all associated services. It should be read alongside our Terms & Conditions and Community Guidelines.

2. Data We Collect

2.1 Registration Data

  • Full name, mobile number, and email address
  • OTP-verified mobile number and email-verified address
  • Username and date of birth
  • Timestamp of your acceptance of the Terms & Conditions and this Privacy Policy

2.2 Content and Activity Data

  • Images you upload from your device gallery, capture in-app, or select from the Grazium media library
  • Post captions, text overlays, post settings (duration type, anonymous or named, comments enabled or disabled)
  • Votes, reactions, comments, poll-based comments, and replies you submit
  • Feedback or suggestions you submit to the Company
  • Reports you submit about content or other users

2.3 Automatically Collected Data

  • Device type, operating system version, and unique device identifiers
  • IP address and mobile network information
  • Usage data: features accessed, posts viewed, feed interactions, Versus feed usage, session duration
  • Notification interaction data: whether push notifications were opened or dismissed
  • Crash reports and technical diagnostics collected via analytics SDKs

2.4 Device Permissions

Revoking a permission limits the corresponding feature but does not affect your account or other Platform functions.

  • Photo Library — To upload images from your device when creating posts. Requested at first use. Revocable in device settings.
  • Notifications — To deliver real-time alerts for votes, reactions, comments, replies, and Platform activity via the persistent Notification icon.
  • Camera — To capture photos in-app when creating posts. Requested at first use. Revocable in device settings.

3. How We Use Your Data

  • To create and authenticate your account via OTP
  • To verify your age eligibility (minimum 18 years under the DPDP Act, 2023)
  • To publish and deliver your posts across the home feed, Versus feed, and search
  • To process and display votes, reactions, comments, poll-based comments, and replies
  • To support anonymous posting — your public identity is hidden but your account identity is retained internally for safety and legal compliance
  • To manage post durations (permanent and custom date/time) and archive all posts on your profile page
  • To personalise your feed, Versus feed, and search results based on your activity
  • To deliver and manage real-time push notifications via the Notification icon
  • To detect and prevent fraud, fake accounts, vote manipulation, and abusive behaviour
  • To process user reports and moderate content
  • To process feedback and suggestions you submit (see Terms & Conditions, Clause 7)
  • To operate third-party integrations including analytics SDKs, OTP delivery, and cloud infrastructure, all on a data-processor basis under written agreements
  • To comply with Indian law and respond to lawful requests from courts and government authorities

4. Lawful Basis for Processing

Under the DPDP Act, 2023 and SPDI Rules, 2011, we process your personal data on the following lawful bases:

Consent
Registration data; content creation; anonymous posting; notifications; feedback. Withdraw via account settings — some features may become unavailable.
Contractual Necessity
Authentication; feed and Versus delivery; voting; comments; search. Required to use the Platform's core features.
Legitimate Interest
Platform security; fraud detection; analytics; feed improvement; diagnostics. You may object — contact us at privacy@grazium.com.
Legal Obligation
Court orders; government directions; mandatory CSAM reporting under POCSO Act, 2012. Cannot be withdrawn — required by law.

5. How We Share Your Data

5.1 With Other Users

  • Your public profile, posts, votes, and comments are visible to other users according to your privacy settings.
  • Anonymous posts are visible to all users without your username.

5.2 With Service Providers (Data Processors)

We share data with third-party service providers who process it strictly on our behalf under written data processing agreements. These providers are prohibited from using your data for any independent purpose and include: cloud infrastructure providers (servers in India); OTP and SMS delivery services; email delivery services; analytics and crash reporting SDKs; and content moderation tools.

5.3 Legal Disclosures

We may disclose your personal data — including the identity behind anonymous posts — where required by an Indian court order, government direction, or applicable law. Any content constituting Child Sexual Abuse Material (CSAM) is immediately removed, the account permanently banned, and the matter reported to cybercrime.gov.in and law enforcement under the POCSO Act, 2012, without delay. We will notify you of any other disclosure where lawfully permitted to do so.

5.4 Feedback Data

Any feedback or suggestions you submit to the Company become the Company's property under Clause 7 of the Terms & Conditions. We may use such feedback to improve the Platform without attribution or compensation to you.

5.5 What We Never Do

  • We do not sell, rent, or lease your personal data to any third party.
  • We do not share your data with advertisers for independent targeting.
  • We do not transfer personal data outside India without your explicit consent or a lawful basis under the DPDP Act, 2023.

6. Cookies, Analytics and Data Localisation

6.1 Cookies and Analytics

The Platform uses cookies, software development kits (SDKs), and similar analytics technologies for the following purposes:

  • Maintaining your login session and account preferences
  • Measuring Platform performance and diagnosing technical issues (via crash reporting SDKs)
  • Understanding how users interact with the home feed, Versus feed, and other features
  • Personalising your content feed and search results
  • Detecting fraudulent or abusive activity

You may manage cookie and tracking preferences through your device settings or the Platform's privacy controls. Disabling certain tracking technologies may affect Platform functionality.

6.2 Data Localisation

All personal data collected by the Company through the Platform is stored on servers located in India. The Company does not transfer personal data outside India unless: (i) you have given explicit consent to the transfer; or (ii) a recognised legal basis under the DPDP Act, 2023 applies. Where third-party service providers outside India are used, the Company ensures appropriate contractual safeguards are in place.

7. Your Rights

Under the DPDP Act, 2023 and SPDI Rules, 2011, you have the following rights. To exercise any right, contact support@grazium.com or use account settings. We will acknowledge within 24 hours and respond within 30 days.

Access
Request a summary of personal data we hold about you and how it has been processed.
Correction
Request correction of inaccurate or incomplete data.
Erasure
Request deletion of your data. We will delete or anonymise within 72 hours of a verified request, subject to legal retention obligations.
Withdraw Consent
Withdraw consent for consent-based processing at any time. Some features may become unavailable.
Object
Object to processing based on legitimate interests.
Nominate
Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity — as provided under the DPDP Act, 2023.
Grievance
Raise a complaint with our Grievance Officer (see Section 11 below).

8. Data Retention

Active account data
Retained while your account is active.
Permanent posts
Retained until you manually delete them.
Custom date/time posts
Archived on your profile page after expiry, until account deletion.
Feedback submissions
Retained by the Company indefinitely as Company property per Terms Clause 7.
Account deletion
Personal data deleted or anonymised within 72 hours of a verified deletion request.
Legal/investigation holds
Data involved in active court proceedings, government investigations, or legal retention obligations may be retained beyond the above periods as required.

9. Security and Minors

9.1 Security

We implement reasonable security measures including: TLS encryption for all data in transit; encryption of personal data at rest; OTP-only authentication at every login; strict internal access controls on a need-to-know basis; and regular security assessments. In the event of a data breach that poses a risk to your rights, we will notify you and the Data Protection Board of India as required under applicable law.

9.2 Minors

Grazium does not permit anyone under 18 to register, in compliance with the DPDP Act, 2023. Date of birth is collected at registration to verify eligibility. If we discover an underage user, we immediately suspend the account and delete all data within 72 hours. Report underage accounts to support@grazium.com.

10. Community Guidelines Reference

Grazium's Community Guidelines govern the standards of conduct and content on the Platform. They are incorporated into our Terms & Conditions by reference. For data-related matters — including how data from your posts, votes, and comments is used — this Privacy Policy applies.

The Community Guidelines and Privacy Policy work together and should both be read. Available at www.grazium.com/terms-and-conditions.

11. Grievance Officer

In compliance with the IT Act, 2000, the IT Intermediary Rules, 2021, and the DPDP Act, 2023:

If dissatisfied with our resolution, you may approach the Data Protection Board of India (once constituted under the DPDP Act, 2023) or the adjudicating officer under the IT Act, 2000.

Grievance Officer
Appykan Technologies Private Limited
Email
support@grazium.com
Acknowledgement
Within 24 hours
Resolution
Within 30 days

12. Changes to This Policy

We may update this Policy at any time. For material changes, we will notify you at least 15 days in advance by push notification or email. Continued use after the effective date constitutes acceptance of the updated Policy.

13. Contact

Privacy Queries
support@grazium.com
Grievance
support@grazium.com
Website
www.grazium.com/privacy-policy
Postal Address
Shop No. G-7, First Tower, Agra Road, Dausa, Rajasthan – 303303, India
Jurisdiction
Dausa, Rajasthan, India
Governing Law
IT Act 2000 · SPDI Rules 2011 · DPDP Act 2023