Privacy Policy

ChatDosti is an anonymous chat service. This policy explains exactly what we collect, why, how long we keep it, and how to get rid of it. It covers both the website at chatdosti.com and the ChatDosti Android app.

What we collect

You give us directly, when you start chatting or create an account:

• Username — chosen by you. You are not asked for your real name.
• Age, gender, country and state — used to show you to other users and to filter who you see.
• Password — registered accounts only, stored as a bcrypt hash. We never store it in readable form.
• Profile bio and picture — optional.
• Messages and images you send, including images you upload to a chat.

We collect automatically:

• IP address — recorded at signup and on each login. We use it to derive your approximate country and state, to enforce blocks and bans, and to investigate abuse reports.
• Approximate location — country and state only, derived from your IP. We do not use GPS and do not request device location.
• Activity timestamps — when you were last seen, so we can show who is online.
• Usage analytics — we use Google Analytics and Vercel Analytics to understand how the service is used in aggregate: pages viewed, approximate region, device type and referrer. Google Analytics sets cookies on your device to recognise repeat visits. We do not use analytics to build advertising profiles, and we do not link analytics data to your chat messages.

We do not collect contacts, calendar, SMS, precise location, or advertising identifiers.

Automated replies from Host accounts

Some accounts in ChatDosti are marked Host. These are operated by us and reply automatically using an AI language model rather than a person. They are labelled as Host in the user list and in the chat header so you always know.

If you message a Host account, the recent messages in that conversation are sent to our AI provider (Vercel AI Gateway and the underlying model provider) to generate a reply. Do not share anything private, personal or financial with a Host account. Conversations with ordinary users are never sent to an AI provider.

How long we keep it

• Anonymous (guest) accounts are deleted automatically shortly after you leave, or when you log out.
• Registered accounts are kept until you delete them.
• Messages and an archived copy of account details are retained for up to 12 months for safety, moderation and abuse investigation, then permanently deleted by an automated job.
• Abuse reports are kept so that repeat behaviour can be identified, even if the reported account is gone.

Who we share it with

We do not sell your data and we do not share it for advertising. We use these processors:

• Supabase — database and image storage (hosted in India, ap-south-1).
• Vercel — application hosting and aggregate analytics.
• Google Analytics— aggregate usage measurement. Google's handling of this data is covered by Google's Privacy Policy. You can opt out with Google's browser add-on.
• Vercel AI Gateway and its model providers — only for conversations with Host accounts, as described above.

We may disclose information where we are legally required to, or where it is necessary to investigate a credible safety concern.

Your choices

• Block any user from the chat screen. Neither of you will see the other again.
• Report any user or message from the chat screen. Reports go to our moderators.
• Edit or clear your profile details at any time from your profile page.
• Delete your account and its data at any time — in the app from your profile, or on the web at chatdosti.com/delete-account. No app install is required.

Cookies

We use a single essential cookie to keep you signed in. Google Analytics sets its own cookies to measure usage, as described above. We do not use advertising cookies. Blocking cookies in your browser will stop analytics but will also prevent you from staying signed in.

Children

ChatDosti is not for children. You must be at least 18 to use the guest chat. Accounts we believe belong to a child are removed. If you believe a child is using the service, report the account in-app or email us and we will act.

Security

Traffic is encrypted in transit. Passwords are hashed. Access to the moderation tools is restricted to administrator accounts. No service can promise perfect security, so please do not share sensitive personal information with strangers on ChatDosti.

Contact

Questions, data requests or complaints: support@chatdosti.com. We aim to respond within 30 days.