Pally — Privacy Policy

1. Who we are

Pally is a social app for chatting, calling, rooms, Moments, Pullup videos and live location sharing. Contact us from the Support chat inside the app (Profile → Support).

2. What we collect

• Account: name, gender, birthday, phone number and/or e-mail, Pally ID, profile and cover photos.
• Content you create: messages, voice messages, photos, videos, files, comments, reactions, Moments, stories, Pullups and room messages.
• Verification: a live selfie and a short video, used only to verify that the account belongs to a real adult and to protect members.
• Location: your approximate area (to show "about N km away"), and your exact live location only while you share it with someone.
• Payments: coin purchases (Google Play in the Play Store app; EPS — bKash, Nagad, Upay, cards and banks — in the website app), withdrawal requests and the wallet or bank account details you give for payouts. Card and wallet PINs are entered on the payment provider's page — Pally never sees or stores them.
• Device & usage: notification token, app version, crash and performance data, and what you view or like (to rank your feed).

3. How we use it

• To run the app: deliver messages and calls, show your profile and posts, keep your wallet.
• Safety: verification, reports, blocking, spam and fraud checks, and enforcing our Terms. Automated checks (including Google Gemini) may review posts, photos and verification selfies.
• Moderation: to investigate reports and protect members, authorised Pally staff may open a conversation; every opening is recorded in an audit log.
• Personalisation: a feed that learns what you like.
• Notifications you allow (for example new messages, or when someone you chat with comes online).

4. Who we share it with

• Other members: what you choose to show (profile, posts, comments, messages to the people you write to).
• Service providers: Google Firebase / Google Cloud (hosting, database, storage, sign-in, notifications), Google Play (payments), Agora (voice and video calls), Google Gemini (automated safety and AI features), EPS and SSLCOMMERZ (online payments), SMS gateways (one-time codes).
• Law: when Bangladeshi law or a valid legal request requires it.

We do not sell your personal data.

5. How long we keep it

We keep your data while your account is active. Chat media follows the retention period shown in the app. When you delete your account, your profile, posts and media are removed; some records (payments, safety and legal logs) are kept as the law requires.

6. Your choices

• Edit or delete posts, comments and your profile at any time.
• Control who sees your location, visits and posts (Privacy settings).
• Delete your account in the app: Me → Deactivate or delete account → Delete my account, or see Delete your Pally account.

7. Security

Data is encrypted in transit (HTTPS). Coins and payments are handled only on our servers. No method is 100% secure, so please keep your password and one-time codes private.

8. Age

Pally is for adults 18 and over. We remove accounts of anyone younger.

9. Changes

We will update this page when the policy changes and show the date at the top.