Privacy Policy

Effective Date: October 2026  |  Last Updated: October 2026  |  Version: 2.4

Welcome to Topz Hyper. Your privacy and digital safety are foundational to our platform. This Privacy Policy governs the collection, processing, storage, and erasure of personal data by Topz Hyper Technologies Private Limited (“Topz Hyper”, “we”, “us”, or “our”), registered in Bengaluru, Karnataka, India.

This policy applies to all users of the Topz Hyper mobile applications (iOS and Android), official websites, and related application programming interfaces (APIs). Please read this document carefully to understand our practices regarding your personal information and how we safeguard it.

1. Regulatory Compliance Standards

Topz Hyper is designed and operated in strict conformity with applicable international and national data protection regulations, including:

• Apple App Store Review Guidelines: Specifically Guideline 5.1.1 (Data Collection and Storage) and Guideline 5.1.1(v) (Account Deletion).
• Google Play Developer Distribution Agreement & User Data Policy: Ensuring transparent data disclosures, permission gating, and self-service account deletion.
• Digital Personal Data Protection Act, 2023 (DPDP Act, India): Respecting individual consent, purpose limitation, and data principal rights.
• General Data Protection Regulation (GDPR, Regulation (EU) 2016/679): Enforcing the rights of access, rectification, erasure, and portability.
• California Consumer Privacy Act (CCPA / CPRA): Affirming zero data sales and granting transparency over personal information disclosures.

2. Information We Collect

We collect only the minimum personal data necessary to establish verified identity, operate interest-based circles, enable spontaneous drop-in voice rooms, and maintain community safety.

2.1 Information You Provide Directly

• Account Registration: Mobile phone number (for SMS one-time password verification), optional email address, chosen username or display name, and date of birth (to verify legal adulthood).
• Profile Data: Profile photos or avatars, personal bio, chosen interest categories (e.g., electronic music, indie films, campus startups), and user vibe tags.
• Communications & Messages: Text messages, circle posts, and media attachments sent directly to verified connections or community channels.

2.2 Trust Shield™ 3D Liveness Verification Data

To prevent automated bots, deceptive impersonators, and malicious catfishing, Topz Hyper requires new members to complete a mandatory 3D selfie liveness check:

• The captured selfie is evaluated exclusively in real-time to confirm the presence of a living human and verify consistency with the uploaded profile picture.
• The facial data is processed on-device or via secure, encrypted enclaves into an irreversible mathematical hash value.
• We do not build a public facial recognition database, nor do we disclose or sell biometric information to commercial data brokers, advertising networks, or law enforcement without a lawful court warrant.

2.3 Real-Time Voice Hangouts & WebRTC Telemetry

• Audio conversations within drop-in voice rooms are transmitted transiently through encrypted WebRTC protocols.
• Audio streams are never recorded, listened to, or stored permanently on our servers during standard operation.
• In the event that an active participant flags a room for acute harassment or severe safety violations, an ephemeral 60-second rolling encrypted moderation buffer is securely routed to our Trust & Safety team for urgent incident verification, after which it is irreversibly purged.

2.4 Location Information

• With your explicit operating system permission, we collect coarse or approximate geographical location solely to recommend local university circles, neighborhood events, and campus hangouts.
• We do not broadcast your continuous precise real-time GPS location to other users without your proactive consent.

2.5 Technical & Device Information

• Device model, hardware identifiers, operating system version, browser type, IP address, and anonymized diagnostic crash logs to maintain uptime and security.

3. Legal Bases and Purposes of Processing

We process your personal information strictly under the following lawful legal grounds:

• Contractual Necessity: To provide you with Topz Hyper services, set up your profile, authenticate your sign-in, and facilitate connections.
• Legitimate Interests: To detect malicious bots, enforce community safety guidelines, prevent fraud, and optimize mobile performance.
• Consent: For optional features such as campus location discovery and push notifications, which you may toggle off at any time.
• Legal Compliance: To satisfy statutory accounting requirements, tax regulations, and valid judicial court orders.

4. Strict Zero Data Sales Policy

Under no circumstances does Topz Hyper sell, rent, license, or monetize your personal identity, contact details, or profile data to third-party data brokers or marketing networks.

Data is shared exclusively with essential infrastructure service providers operating under strict Data Processing Agreements (DPAs):

• Cloud Hosting & Content Delivery: Amazon Web Services (AWS) and Cloudflare for resilient, encrypted infrastructure.
• Authentication Gateways: Twilio for SMS one-time password verification delivery.
• Crash & Performance Diagnostics: Anonymized crash reporting tooling to resolve software defects.

5. Data Retention and Erasure Schedule

We store personal information only for as long as your account remains open and in good standing. Below is our explicit data erasure timeline:

6. Your Privacy Rights

Regardless of where you reside, Topz Hyper extends universal privacy controls to all registered members:

• Right to Access: You may request a machine-readable copy (JSON) of all personal data linked to your account.
• Right to Rectification: You can update inaccurate personal details directly within the mobile application settings at any time.
• Right to Erasure (“Right to Be Forgotten”): You may permanently erase your account and all associated data at any time via the app or at topzhyper.com/delete.
• Right to Restrict or Object: You can revoke permissions for location, push notifications, and camera access directly via your device operating system settings.

7. Strict Protection of Minors (18+ Policy)

Topz Hyper is strictly restricted to individuals aged eighteen (18) years or older. We do not intentionally solicit or collect personal information from minors. If we learn that an account belongs to a minor under 18, the account will be immediately terminated and its data expunged.

8. Security Measures

Topz Hyper employs enterprise-grade administrative, technical, and physical security safeguards to shield your data against unauthorized access, loss, or alteration:

• All network transmissions use TLS 1.3 encryption.
• All persistent databases and backups are encrypted at rest using industry-standard AES-256 protocols.
• Strict least-privilege access controls and multi-factor authentication are enforced across our engineering and operational staff.

9. Contact Our Data Protection Officer (DPO)

If you have questions, feedback, or requests regarding this Privacy Policy or wish to exercise your legal privacy rights, please contact our Data Protection Officer:

• Entity: Topz Hyper Technologies Private Limited
• Attention: Data Protection Officer
• Email: privacy@topzhyper.com
• Location: Bengaluru, Karnataka, India
• Response Commitment: Within 48 business hours