Privacy Policy

CodeThread Solutions Pvt Ltd is committed to protecting your privacy and being transparent about how we collect, use, and safeguard your personal data. This Policy complies with the Information Technology Act 2000, the IT Rules 2011, the IT (Intermediary Guidelines) Rules 2021, and the Digital Personal Data Protection Act 2023.

By using the Platform, you consent to the data practices described here.

Data you provide

• Account information: name, email, phone, date of birth, password (hashed), profile picture, bio, location, gender
• Content & communications: posts, comments, messages, reactions, search queries, uploaded media
• Transaction data: payment information (via secure gateways), billing details, subscription details
• Support communications: inquiries, feedback, and complaints

Data collected automatically

• Technical data: IP address, device type, OS, browser, device identifiers, diagnostics
• Usage data: features accessed, time spent (including how long you watch a video/flik and which posts you skip), interactions, content viewed, login/logout times
• Location: approximate (from IP) and, only with your permission, precise (GPS) location — detected automatically, not manually entered; you control whether and how precisely (city/state/country) it appears on your profile
• Cookies and similar technologies (see Section 9)

We may also receive data from linked social accounts, payment processors, and service providers. We limit collection of sensitive personal data (e.g. financial information for payments) to what is necessary, and never store passwords in plain text.

• Provide core services: create/manage your account, enable features, deliver transactions, provide support, and secure the Platform
• Communicate: service notifications, responses to inquiries, and — with your consent — promotional content
• Improve: analyze usage, run experiments, and optimize recommendations and performance
• Safety & compliance: detect fraud and abuse, enforce our terms, and meet legal obligations
• Personalize: customize your feed, recommend content and people, and (with consent) personalize advertising

We use automated systems, including machine-learning models, to operate the Platform — for example to rank and personalize your feed, recommend content and people, classify and label content, detect spam/abuse, and limit the reach of or hide content that appears to violate our rules. These decisions affect what you see and how your content is distributed, but do not by themselves produce legal or similarly significant effects on you.

Where a decision has a legal or similarly significant effect (such as account suspension or removal), you may request human review and contest the outcome through our Grievance Redressal process. You may also object to processing used purely for marketing or advertising personalization.

We process personal data based on your consent (which you may withdraw at any time), to perform our contract with you and provide the Platform, to comply with legal obligations, to protect vital interests and prevent serious harm, and for legitimate purposes such as security and fraud prevention.

We do not share your password (except in hashed form) or your private messages (except with the intended recipient, or where required by law). Your public profile, public posts, comments, reactions, and follower/following lists are visible to others by design.

We share data with service providers (cloud hosting, payment processors, email/CDN providers, analytics) bound by confidentiality and data-protection obligations. We may disclose data to law enforcement and authorities where legally required, and — where legally possible — will notify you of government requests. In a merger, acquisition, or restructuring, your data may transfer, and we will notify you where applicable.

We do NOT sell your personal data to data brokers, and we do not share it with third-party advertisers without your explicit consent. We may share anonymized, aggregated statistics that cannot identify you.

We retain account data while your account is active. When you request deletion, your account is deactivated immediately and enters a 30-day grace period during which logging back in cancels the deletion; after 30 days the account and personal identifiers are permanently purged. Transaction records are retained only for the period required by tax/legal obligations, and technical logs for a limited period.

On deletion we delete your profile and public data, anonymize or delete your historical activity, and securely delete personal identifiers, except where retention is required by law.

We implement reasonable security practices in line with IT Act Section 43A and the IT (Reasonable Security Practices) Rules 2011, including: TLS/SSL encryption in transit; salted password hashing (passwords are never stored or sent in plain text); signed, expiring authentication tokens with the ability to revoke active sessions; server-side validation, rate limiting, and abuse controls; least-privilege access; and regular vulnerability monitoring.

Messaging note: direct messages are encrypted in transit (TLS) and access-controlled, but are NOT end-to-end encrypted — our systems can process message content where necessary to operate the service, enforce these terms, and comply with law. Please do not share information you would not want the Platform to be technically capable of accessing.

Roadmap safeguards not yet in place: encryption of data at rest, optional two-factor authentication, a Web Application Firewall, and independent penetration testing. We will update this Policy as these are deployed. In the event of a data breach, we will investigate and contain it, notify affected users within 72 hours where legally required, and notify relevant authorities where applicable.

We use essential cookies (session management, security, authentication), preference cookies, analytics cookies, and — with consent — marketing cookies. You can accept or reject non-essential cookies via our consent banner, change preferences in settings, or clear cookies in your browser. Disabling cookies may limit functionality.

Subject to applicable law, you have the right to access your data and request a copy in a portable format; to correct inaccurate data; to request deletion; to withdraw consent (e.g. for marketing or non-essential cookies); to object to certain processing; and to lodge a grievance. To exercise these rights, update your account settings or contact support@codethreadsolutions.com (response within 30 days).

The Platform is for adults aged 18 and over only. We do not permit accounts for, or knowingly process the data of, anyone under 18. Registration requires confirming a date of birth establishing the user is 18 or older, and accounts found to belong to minors are removed. If you believe a minor is using the Platform, contact support@codethreadsolutions.com.

The Platform operates primarily within India, and your data is stored on servers in India or cloud infrastructure within India. Any cross-border transfer is limited to what is necessary, made to recipients with adequate protections and contractual safeguards, and made in compliance with applicable data-localization requirements.

Grievance Officer & Data Protection contact: Om Prakash — support@codethreadsolutions.com — 8319904102. We acknowledge complaints within 24 hours and provide a substantive response within 7 days, log each complaint with a reference number, and implement corrective measures where a violation is confirmed. If unsatisfied, you may escalate to our Compliance team and to the relevant regulatory authorities (e.g. MeitY) or courts in India.

We may update this Policy to reflect legal, security, or operational changes. Material changes will be communicated via email, in-app notice, and an updated "Last Updated" date. Continued use after changes indicates acceptance. If you object, you may discontinue use and request account deletion.