Privacy Policy

This Privacy Policy explains how Bodhi Tree INC ("Bodhi Tree", "we", "us" or "our") collects, uses, shares, stores and protects personal data when people use KKAUNHAI. It applies both to registered account holders and to visitors who scan a KKAUNHAI QR code to start a live audio or video call.

KKAUNHAI connects a visitor with the person or organisation responsible for a QR endpoint. Registered users sign in with an email one-time password. Visitors do not need to install an app or create an account. Live calls use a third-party real-time communications service. KKAUNHAI does not record or store live call content by default.

This Policy is intended to comply with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions become applicable, together with other laws that apply to our services.

1. Who We Are and What This Policy Covers

KKAUNHAI is operated by Bodhi Tree INC. For personal data processed to operate KKAUNHAI, Bodhi Tree INC acts as the Data Fiduciary under Indian data protection law. The service currently includes the Android application, www.kkaunhai.in, and the browser page opened when a visitor scans a KKAUNHAI QR code. This Policy will also apply to the KKAUNHAI iOS application if and when it is launched.

A registered user may create QR endpoints for a home, office, shop, vehicle or another location. The user linked to that endpoint may receive the visitor's live audio and video and may see visitor-history information described below. Account holders must use visitor information lawfully and must not copy, publish, record or misuse it without a valid reason and any consent required by law.

2. Key Privacy Points

3. Information We Collect

3.1 Registered Account Information

When a person creates or uses a KKAUNHAI account, we collect the chosen username and email address. We also process OTP delivery and verification records needed to authenticate the account and prevent misuse. KKAUNHAI currently does not ask for an account-holder name, mobile number, profile photo, password, Google sign-in or Apple sign-in.

3.2 QR Visitor and Call Metadata

When a visitor scans a QR code or starts a call, KKAUNHAI may process the visitor's IP address, the QR endpoint scanned, scan and call timestamps, call status such as answered or missed, and call duration. We and our service providers may also process browser, device, operating-system, network and diagnostic information that is necessary to load the page, establish the call, maintain service quality, prevent abuse and investigate faults.

The registered user linked to the QR endpoint may see relevant visitor-history information, including the date and time of the scan or call, its status and duration. KKAUNHAI does not require a visitor to provide a name, email address or mobile number before calling.

3.3 Camera Microphone and Live Communications

The browser or Android operating system asks for camera and microphone permission before those features are used. Camera and microphone access is used only to provide the communication feature requested by the user or visitor. A person may refuse permission, although the video or audio call may then be unavailable or limited.

KKAUNHAI uses Agora's Real-Time Communication service to transmit live audio and video. KKAUNHAI does not activate cloud recording for ordinary calls, does not record calls by default and does not store live call content on AWS. Agora states that standard RTC audio and video streams are transmitted in real time and are not stored, while it may process dynamic IP addresses, device and network information, session identifiers and operational metadata for routing, diagnostics and service quality.

3.4 Advertising Cookies and Similar Technologies

The free version may display Google AdMob advertisements in the Android app and Google AdSense advertisements on the visitor web page or other KKAUNHAI web pages. Google and its partners may process IP addresses, cookies, mobile advertising identifiers, device information, ad interactions and consent choices. Essential cookies or local storage may be used to operate the page, remember privacy choices, prevent fraud and maintain security.

KKAUNHAI does not use camera or microphone content, live call content or the substance of a conversation to select advertisements. Where required, we request a consent choice before making an advertising request. We initially use non-personalised or contextual advertising where appropriate. Personalised advertising is used only when valid consent has been obtained.

3.5 Support and Communications

If a person contacts us, we collect the information included in the request, such as the sender's email address and message. We send OTP emails, service notices, account and security messages, and replies to support or privacy requests. We do not send promotional marketing emails, SMS or WhatsApp messages unless the recipient separately opts in.

3.6 Security and Abuse Information

We may create or receive server, access, authentication and security logs. These can include IP addresses, event timestamps, request records, error information, suspicious-activity indicators and device or network details. We use these records to prevent spam and fraud, investigate incidents, protect QR endpoints and enforce our terms.

4. Information We Do Not Currently Collect

For the current service described in this Policy, KKAUNHAI does not collect account passwords, account-holder or visitor mobile numbers for the core internet call, precise GPS location, visitor selfies, or cloud copies of screenshots and screen recordings. We also do not store payment card or bank-account details.

This statement applies to the current product configuration. Section 17 explains how we will handle new features that require additional data.

5. How We Use Personal Data

We process personal data only for specified purposes connected with KKAUNHAI, including to:

• create, authenticate, maintain and secure registered accounts;
• generate and operate QR endpoints and route a visitor to the appropriate registered user or group;
• establish live audio and video calls and display relevant call status;
• provide visitor history and routing rules requested by the account holder;
• send OTPs, service notices and responses to support or privacy requests;
• serve consent-controlled advertising on the free service and remember consent choices;
• monitor reliability, troubleshoot faults, prevent spam and fraud, investigate security incidents and enforce our terms;
• comply with applicable law, lawful orders and valid requests from public authorities; and
• analyse service performance using aggregated or de-identified information where reasonably possible.

6. Consent and Other Permitted Processing

Where Indian law requires consent, we provide a clear notice describing the personal data and the purpose before asking for consent. Consent may be withdrawn through the relevant in-app or web consent control, through account settings where available, or by contacting us. Withdrawal does not affect processing already completed lawfully, and some service features may stop working if their necessary permissions or consent are withdrawn.

We may also process personal data when a person voluntarily provides it to receive a requested service, when processing is necessary to respond to an emergency involving life or safety, or for another use permitted by applicable law. We do not rely on consent for a purpose that was not disclosed when consent was requested.

7. Live Calls Screenshots and Recordings

Ordinary KKAUNHAI calls are live and are not recorded by KKAUNHAI. Agora Cloud Recording is a separate function that requires KKAUNHAI's backend to start a recording and designate cloud storage. That function is not enabled for ordinary KKAUNHAI calls under this Policy.

A future paid feature may allow an account holder to take a screenshot or make a screen recording on the account holder's own device. These files will remain on that device and will not be uploaded to or stored by KKAUNHAI unless we later introduce a cloud feature with a separate notice and consent process. Anyone who records a call or captures an image is responsible for giving any legally required notice and obtaining any legally required notice and consent from the other participant.

8. Advertising and Privacy Choices

Advertising is limited to the free service and is not placed over a live conversation. A paid subscription, when subscriptions launch, is intended to remove KKAUNHAI ad placements. Ad consent choices may be presented through Google User Messaging Platform or another certified consent platform. If a person declines or withdraws consent for personalised advertising, we may show limited, contextual or non-personalised ads where lawful.

Users can also control cookies through the web consent control and browser settings, and can reset or limit the Android advertising identifier through device settings. Blocking essential storage may prevent parts of the visitor page from working. Google's own processing is governed by Google's policies and the consent choices made through its interfaces.

9. How We Share Personal Data

We do not sell personal data. We share or make data available only as needed to operate the service, fulfil a user request, protect the service, complete a business transaction or comply with law.

A registered user linked to a QR endpoint receives the visitor's live communication and related visitor-history information. If a QR endpoint routes to several authorised recipients, the service may notify or ring those recipients according to the account holder's settings.

10. Storage and International Processing

KKAUNHAI's primary application hosting is configured for the Amazon Web Services Asia Pacific Mumbai region in India. We seek to keep KKAUNHAI-controlled production data and routine backups in India where the selected AWS services support that configuration.

Some service providers, including Agora and Google, operate global infrastructure and may process limited data in other countries. Where personal data is processed outside India, we use the provider and contractual arrangements permitted by applicable law. Indian authorities may restrict transfers to particular countries or territories, and we will comply with any such restriction that applies.

11. Data Retention

If more than one retention period applies, we use the longer period only to the extent necessary for the applicable legal, security or dispute purpose. Access to retained compliance and security records is restricted. We delete or de-identify information when the relevant period ends unless continued retention is required by law.

12. Account Deletion

A registered user may request account deletion through the in-app deletion path or through the deletion route published at www.kkaunhai.in. A request may also be sent to kkaunhai@gmail.com from the registered email address. We may take reasonable steps to verify that the requester controls the account.

When deletion is confirmed, KKAUNHAI immediately deactivates the QR endpoints linked to the account so that they no longer route calls. We remove associated account data from active systems within 30 days. We may retain restricted records for security, fraud prevention, dispute resolution, statutory record-keeping or another requirement of law. Deleting the app from a device does not by itself delete the account.

13. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or misuse. Measures are selected according to the nature of the data and the service and include access restrictions, monitoring, secure service configuration, incident investigation and business-continuity practices. Our contracts with processors require appropriate safeguards where applicable.

No internet transmission or storage system is completely secure. Users should protect access to their registered email account, avoid sharing OTPs and report suspected misuse of a QR endpoint or account promptly.

14. Children

KKAUNHAI accounts are intended only for people aged 18 or older. By creating an account, the user confirms that the user is at least 18. We do not knowingly allow a child to create an account.

A visitor under 18 should not initiate a KKAUNHAI call unless a parent or lawful guardian has permitted the interaction and, where appropriate, is present. If we learn that we processed a child's personal data without the consent required by law, we will take reasonable steps to stop the processing and delete the data, subject to legal requirements. A parent or guardian may contact the Grievance Officer to raise a concern.

15. Your Rights and Choices

Subject to applicable law and reasonable identity verification, a person may ask us to:

• provide information about the personal data we process and the entities with which it has been shared;
• correct inaccurate or misleading personal data and complete incomplete personal data;
• erase personal data that is no longer needed or that must be erased by law;
• withdraw consent for processing based on consent;
• manage advertising and cookie choices through the available consent controls;
• delete a KKAUNHAI account and deactivate its QR endpoints; and
• nominate another person to exercise rights in the circumstances provided by applicable law.

Requests may be sent to kkaunhai@gmail.com. Please use the email address linked to the account where possible and describe the request clearly. We may ask for information necessary to verify identity and protect the account. We will respond within the period required by applicable law.

16. Grievance Redressal

A person with a privacy question or grievance should first contact our Grievance Officer. We will acknowledge and address the matter through our grievance process. If the person is dissatisfied after using that process, the person may have the right to complain to the Data Protection Board of India or another competent authority, subject to the procedure and commencement provisions of applicable law.

17. Future Features

KKAUNHAI may later introduce visitor selfie capture, precise-location or geo-fenced anti-spam, WhatsApp or SMS alerts, reception mode, an iOS application and paid subscriptions. These features are not described as current collection in this Policy. Before activating a feature that materially changes the personal data or purpose, we will provide an updated notice and request permission or consent where required.

Future subscriptions are expected to use Google Play Billing for Android and Apple In-App Purchase for iOS. Those platforms process payment details under their own policies. KKAUNHAI will receive transaction status and entitlement information needed to activate a subscription, but will not store full card or bank details.

18. Legal Disclosures and Business Transfers

We may disclose personal data when we reasonably believe disclosure is required by applicable law, a court order or a lawful government request; is necessary to protect a person's safety, our users, our rights or the security of the service; or is needed to investigate fraud or abuse.

If Bodhi Tree INC or the KKAUNHAI business is involved in a merger, acquisition, financing, reorganisation, insolvency or sale of assets, personal data may be disclosed to advisers and transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards. We will provide notice if a transaction materially changes who controls personal data or how it is used.

19. Changes to This Policy

We may update this Policy when the service, providers or law changes. The current version will be posted at www.kkaunhai.in with its effective date. If a change materially affects a person's rights or introduces a new purpose requiring consent, we will provide additional notice and request fresh consent where required.

20. Third Party Privacy Information

The following provider pages explain relevant third-party processing. Their terms and practices are controlled by those providers and may change independently of this Policy.

• Agora Privacy Policy
• Google Privacy and Terms
• Google information about partner sites and apps
• Amazon Web Services Privacy Notice