iChits Privacy Policy

Effective date: 5 October 2026

Last updated: 5 October 2026

Operator: SSV Creative Labs, Himayath Nagar, Hyderabad, Telangana, India

Contact: ssvcreativelabs@gmail.com

iChits is operated by SSV Creative Labs (we, us, our). This policy explains how iChits collects, uses, stores, shares, and protects information when you use the mobile app. iChits is a private chit record-keeping app. It does not collect, hold, transfer, process, or facilitate payments.

1. Information we collect

We collect your account email and sign-in details (an email one-time code, or the email address, name and profile photo that Google shares when you choose Sign in with Google); profile name and optional photo; chit names, schedules, contributions, turns, manual payment records, notes, and statuses; uploaded screenshots, receipts, and documents; invitation names and emails; optional notification and camera/gallery/file permissions; technical diagnostics used for support; optional, anonymous crash and ANR reports when you enable them; and optional encrypted backup data and metadata.

We do not collect bank passwords, card PINs, CVVs, banking OTPs, bank-account credentials, or payment credentials. iChits does not currently request Contacts permission; if contact selection is introduced, it will be optional and manual entry will remain available.

2. How we use information

We use information to secure accounts, display private records and schedules, deliver invitations and relevant notifications, synchronize signed-in devices, provide optional backup and restore, respond to support requests, improve reliability, prevent misuse and security incidents, and meet legal obligations. We do not sell personal data or use chit records, attachments, or contact information for advertising.

3. Who can see information

Organizers are responsible for having a valid basis to enter or invite a person’s name and email.

4. Sharing

We share information only with authorized users in the same chit under these role rules, service providers delivering authentication, hosting, storage, notifications, backup, opted-in crash diagnostics, or support, authorities where law requires, and in a business transaction subject to safeguards. We do not publicly disclose personal or financial information.

5. Permissions

Notifications are used for reminders, invitation updates, record updates, turns, backups, and security alerts. Camera, gallery, or files are used only when you choose an attachment. You can decline optional permissions, revoke them in device settings, and use available manual alternatives.

6. Security

We use reasonable safeguards, including secure transmission, role-based access controls, private storage policies, and audit logging for sensitive support access. No electronic system is completely secure; protect your email account, device, and backup account.

7. Google sign-in, Google Drive backup and third parties

Sign in with Google. If you choose Google sign-in, Google tells us your email address, name and profile photo (the openid, email and profile scopes). We use them only to create and secure your iChits account. We do not read your Gmail, contacts, calendar or any other Google data.

Google Drive backup (optional). If you turn on backup, iChits asks for the drive.appdata permission. This gives iChits access only to its own hidden app-data folder in your Google Drive. It does not let iChits see, list, open or change any of your other Drive files. Your chit data is encrypted on your phone with a passphrase you choose before it is uploaded. We never receive your passphrase and cannot read the backup. To restore, you need the same Google account and the same passphrase. You can switch backup off in iChits Settings and delete the backup file from your Google account at any time.

Google API Services User Data Policy. iChits's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the sign-in and backup features described above. We do not sell it, share it with third parties, use it for advertising, or allow people to read it.

Other providers. Providers such as hosting, storage, notification and opted-in crash-diagnostic services process information only to deliver their services under appropriate safeguards. Google's terms and privacy practices also apply to Google services you use.

8. Retention and deletion

We retain information while an account is active or as needed to provide iChits, preserve a shared record, resolve disputes, prevent misuse, or comply with law. You may export data and request correction or deletion through the app or by email. Deletion is scheduled 7 days ahead and you can cancel it in that time. It is refused only while you still organize a live chit or hold an active member seat. Records other people rely on, such as payment records, their audit trail and the organizer activity log, are kept; your account is anonymised instead of erased, so your name and contact details are removed while that history stays. Deleted data can remain in encrypted backups for a limited period (up to 30 days).

8b. Support access records

Every support access request, approval, refusal, revocation, expiry and view is written to a permanent log that cannot be edited or deleted by anyone, including us. Each entry records the action, the scope, how many records were shown, the time, and the device and network address it came from. Entries are kept for 8 years and can be seen for your own account on the support screen.

8a. Subscription billing, cancellation and refunds

The optional iChits subscription is billed for platform access only — never for chit money. Cancelling stops future renewal; access continues until the period you already paid for ends, and your chit data is never affected by a plan change or cancellation.

While iChits payment collection is manual (a bank/UPI transfer confirmed by our support team against a support ticket, pending Razorpay going live), refunds are handled the same way: raise a support ticket describing the issue within 7 days of the charge, and we will review it case by case. A wrongly charged or duplicate payment is refunded in full; a change-of-mind request after meaningful use of the paid plan in that period is not guaranteed. Once card/UPI payments go live through Razorpay, this section will be updated with the provider's own dispute and chargeback handling.

9. Your choices and rights

You may update profile information; manage permissions, language, theme, reminders, and backup; export data; withdraw optional consent; request deletion; and raise a privacy concern. India’s Digital Personal Data Protection Act, 2023 addresses notice, consent, access, correction/erasure, and grievance redressal rights. See the Digital Personal Data Protection Act, 2023.

10. Children

iChits is not intended for children. Do not use it below the minimum age required to consent to data processing. Contact us if you believe a child supplied personal information.

11. Changes

We may update this policy. We will post the update in the app and change the Last updated date. Material changes receive additional notice where required.

12. Contact and grievance

For privacy questions, requests, or complaints, contact SSV Creative Labs at ssvcreativelabs@gmail.com. We will respond within the period required by applicable law.

For Google Play data-disclosure requirements, see the Google Play User Data policy.

Privacy Policy · Terms of Service