AIO INDIA — Privacy Policy
Last updated: 24 October 2026 · Applies to the AIO INDIA app, website and API.
AIO INDIA (“we”) provides a marketplace, chat and wallet/rewards service. This policy explains what we collect, why, and the choices you have.
1. Data we collect
| Data | When / why |
|---|---|
| Mobile number, OTP status, name, email, address, pincode, profile photo | To create and verify your account, show your profile and deliver ads/orders. |
| Listings, photos, videos, product details and messages you send | To publish your ads and provide chat/calls. |
| Contacts (hashed) | Only with your permission. Phone numbers are normalized and HMAC-SHA256 hashed on the device/server; raw contact numbers are not stored in the contact index. Used to show which contacts are on AIO INDIA. |
| Location / pincode | To show nearby or location-based ads and to fill your address. You can deny location and enter it manually. |
| Device and push data (model, app version, FCM token, risk signals) | To deliver notifications, keep the service secure and prevent fraud/abuse. |
| Wallet, top-up orders, reward/scratch/spin records and order history | To operate the wallet, verify payments, prevent double payouts and provide support. |
| Call logs (caller, callee, type, status, duration) | To show your call history and handle missed calls. |
| Usage, crash and security logs | To fix problems, detect abuse and improve reliability. |
2. How we use data
- Provide the app: login, profile, ads, search, chat, calls, wallet and rewards.
- Verify payments and prevent fraud, fake accounts, reward abuse and spam.
- Send service notifications (OTP, chat, calls, order/wallet updates).
- Comply with law and respond to lawful requests.
3. Sharing
- We do not sell personal data and do not share it for third-party advertising.
- We use service providers for hosting, SMS/OTP delivery, push notifications and payments. They process data only to provide those services.
- We may disclose data if required by law, to protect users, or to investigate fraud/abuse.
- Other users see your public profile, listings and the messages you send them. Your mobile number may be visible to users you contact or who view your ads.
4. Retention and deletion
- Account and personal data are kept while your account is active.
- You can delete your account in the app: Settings → Delete My Account. The live account and associated personal data (profile, listings, chat, wallet and order records) are deleted.
- Backup copies are purged within 30 days. Minimal records may be retained where required by law or for fraud prevention, for no longer than necessary.
- Email fallback: am4u.listen@gmail.com from your registered number.
5. Security
- All API traffic uses HTTPS/TLS. The Android app enforces certificate pinning for the API host.
- Contacts are hashed (HMAC-SHA256) before they reach the contact index. Session tokens authenticate API calls; admin access requires a password plus TOTP 2FA.
- No method is 100% secure. Protect your device, OTP and account, and contact us if you suspect misuse.
6. Permissions
- Contacts — optional, to find contacts on AIO INDIA; deny and the rest of the app still works.
- SMS — optional SMS import into your chat; deny and OTP login still works via SMS Retriever/autofill.
- Camera / microphone / photos — only when you add photos/videos or make calls.
- Location — optional, for nearby ads and pincode fill.
- Notifications — for chat, calls and service updates.
7. Children
The service is for users aged 18 and above. We do not knowingly collect data from children.
8. Your choices and contact
You can edit your profile, change privacy settings, deny optional permissions, and delete your account in the app. For access/correction requests, email am4u.listen@gmail.com.
See also: Terms & Conditions · Permissions & data-safety disclosure.