Last Updated: March 1, 2024

This Privacy Policy (the "Policy") describes how Guru Rain Holding Limited or "Guru Al Lab" (referred to in this Privacy Policy as "Company," "we," "us," or "our"), as the developer of the CastChat mobile application (the "App"), collects information when you use the App. This Policy also explains how we use and disclose the information we collect from you, and your rights in relation to that information.

This app requests some sensitive permission to make the in-app functions work properly. Camera, Photos/Media/Files, Contacts, Microphone, and other permissions may only need for having fun and chatting in CastChat.

We assure our users that any user data obtained through these permissions will not be shared or distributed without the user's express consent, except as required by law. We take the privacy and security of our users' data very seriously and are committed to complying with all relevant data protection laws and regulations.

You can read more about the details of our Privacy Policy in the following sections.

1. Acceptance

Please read the policy carefully before you use or access our Services. By accepting this Privacy Policy, you agree with our collection, storage, use and disclosure of your information as described in the following sections. Please note that if you disagree with anything in this Privacy Policy, you must not use the Service.

2. Amendments to this Policy

We will notify you of changes to this Privacy Policy by posting the amended terms on the Service or via the email address we have on file. By continuing to use the Service after those changes are posted, you agree to be bound by the revised Policy. To find out when we last updated this Policy, please refer to the date listed after “Last Modified” at the top of this Policy. If you do not agree to the changes, you should discontinue your use of the Service immediately.

In addition, we may provide you with “just-in-time” disclosures or additional information about the data collection, use and sharing practices of specific parts of our Service. These notices may provide additional information about our privacy practices, or additional choices about how we process your information.

3. Information We Collect

A. Cookies & Similar Tracking Technologies. We use “cookies” and similar tracking technologies to collect information about your use of the Service and to provide you with interest-based advertising. For example, we collect information about the way you interact with features on our Site, how long you spend on certain pages, and whether you received an error message on our Service. For more information, please check this privacy policy of the relevant services. 

B. Device Information. We collect information about the device you use to access or use our Service. For example, we may collect the following information from your device: the type of device you use (e.g., mobile, auto, a smart home device, etc.); your advertising Identifier (“IDFA” or “AdID”); network connection type (e.g., Bluetooth, WiFi, 3G, 4G, LTE, etc.); operating system and version (e.g., iOS, Android or Windows); language settings in your mobile device; and your mobile service carrier.

C. Media Information. We may collect media information about you from third-party applications or services available on our Service. For example, when you register for an account with us, you may do so by choosing to connect your already existing social media account with our Service (e.g., Facebook, Google+, etc.). We receive certain information from your social media account depending on your permissions and which information you have made public. We use this information to make an account for you on our Service. Also, we might collect and share your data with social media or other similar platforms, as well as our advertising partners, so that you and other people can see relevant advertising on that platform. For example, we may use the Facebook Custom Audiences service and share your IDFA with Facebook so that we can: serve relevant advertising to you or include you in a custom audience that we will serve relevant advertising to you on Facebook; or create an audience of other Facebook users based on the information in your Facebook profile. You can opt out from Facebook Custom Audiences in your Facebook privacy settings, for example, and other similar platforms may have equivalent opt-out settings.

D. Certain Permissions this app may require:

We assure our users that any user data obtained through these permissions will not be shared or distributed without the user's express consent, except as required by law. We take the privacy and security of our users' data very seriously and are committed to complying with all relevant data protection laws and regulations.

Complete details on each type of personal data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

4. How We Use the Information We Collect

We use the information we gather through the Service to help us better understand how our products, apps, and services are being used. We will only use your personal information as described in this Policy or as disclosed to you prior to such processing taking place. Under applicable data protection law in the European Region (such as the GDPR) and the United States of America (i.e. CPRA, COPPA). We have a legal basis to process information. We rely on different legal bases to process your information for the various purposes described in this Privacy Policy.

If you believe that we are processing your information for purposes that are incompatible with the purposes for which we originally collected your information or subsequently obtained your consent, you may choose not to allow us to use your personal information for such processing. However, by limiting how we may process your information, some or all of the Service may not be available to you.

We describe how we use your personal information below:

A.  Advertising.   This type of service allows user data to be utilized for advertising communication purposes displayed in the form of banners and other advertisements on this Application, possibly based on User interests. This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below. Some of the services listed below may use Cookies to identify Users or they may use the behavioral retargeting technique, i.e. displaying ads tailored to the User’s interests and behavior, including those detected outside this Application. For more information, please check the privacy policies of the relevant services. In addition to any opt-out offered by any of the services below, the User may opt out of a third-party service's use of cookies by visiting the Network Advertising Initiative opt-out page.

Service Provider:

Personal Data collected: Cookies; Usage Data.

B. Analytics.   The services contained in this section enable us to monitor and analyze web traffic and can be used to keep track of User behavior.

This Application uses an internal analytics system that does not involve third parties.

Personal Data collected: Cookies; Usage Data.

Google Analytics for Firebase or Firebase Analytics is an analytics service provided by Google LLC..

Firebase Analytics may share Data with other tools provided by Firebase, such as Crash Reporting, Authentication, Remote Config or Notifications. The User may check this privacy policy to find a detailed explanation about the other tools used by the Owner.

This Application uses identifiers for mobile devices and technologies similar to cookies to run the Firebase Analytics service.

Users may opt-out of certain Firebase features through applicable device settings, such as the device advertising settings for mobile phones, or by following the instructions in other Firebase related sections of this privacy policy, if available.

Personal Data collected: Application opens; Application updates; device information; first launches; geography/region; number of sessions; number of Users; operating systems; session duration; Usage Data.

C. Infrastructure monitoring.   This type of service allows this Application to monitor the use and behavior of its components so its performance, operation, maintenance, and troubleshooting can be improved. Which Personal Data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Application.

Service Provider: Crashlytics (Google LLC).  Crashlytics is a monitoring service provided by Google LLC.

Personal Data collected: geographic position; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); various types of Data as specified in the privacy policy of the service.

D. Hosting and backend infrastructure. This type of service has the purpose of hosting Data and files that enable this Application to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Application. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.

Service Provider: Agora.io. agora is a real-time voice transmission service.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Also, the user’s personal data may be used for legal purposes by us in court or in the stages leading to possible legal action arising from improper use of this Application or the related Services. 

5. Security

We implement industry standard security measures intended to protect against the loss, misuse and alteration of the information under our control. Please be aware that no data transmission over the Internet can be guaranteed to be 100% secure. As a result, the Company cannot guarantee or warrant the security of any information you transmit on or through the Service and you do so at your own risk.

6. Transfers of Your Information

If you choose to use the Service or provide your information to us, your information may be transferred to, processed and maintained on servers or databases located outside of the country or jurisdiction where you are located, including the United States. Such countries may have laws that are less protective than the country in which you reside. If you do not want your information transferred to or processed or maintained outside of the country or jurisdiction where you are located, you should not use the Site or Service.

If you reside in the European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland, please see Section 16 below.

7. Third Party Links

Our Service may include links to third party websites or social media services. We do not control how such third parties collect, use, share, or secure your personal information. Please read the privacy policies and settings on the third-party websites and social media services to ensure you are adequately informed about how your personal information is handled.

In order to ensure the stable operation and function realization of the products or services provided, Software Development Kits (hereinafter referred to as “SDK”) provided by third parties are integrated in this App. We will conduct a security assessment on the third parties and the deployed SDK to protect your personal information, Integrated SDKs are listed as follows:


Name of the SDK

Provider

Purpose

Collected personal information type

Privacy Policy link of the SDK provider

Firebase

Google

Analyze usage

unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. We also collect information about the interaction of your apps, browsers, and devices with our services, including IP address, crash reports, system activity, and the date, time, and referrer URL of your request.

https://policies.google.com/privacy?hl=zh-cn#infocollect

Adjust

Adjust

Analyze usage

Traffic data; Location; Server logs; Resources on our website which you access and use; IP address, operating system and browser type

https://www.adjust.com/terms/privacy-policy/

Max SDK

AppLovin

Ad

Device make, model, and operating system; Device properties related to screen size, orientation, audio, battery, device memory usage, settings, and boot time; Device settings related to accessibility features, font size, theme; Carrier; Operating system; Name and properties of mobile application through which a consumer interacts with the Services; Country, time zone, and locale settings (country and preferred language); City- and/or country-level or other coarse geolocation data; Network connection type and speed; IP Address; Internet browser user-agent used to access the Services; HTTP header information; Advertising IDs (IDFA/GAID/Amazon FOSAID); Vendor IDs (IDFV); App Set IDs; and Advertising and tracking preferences and restrictions.

https://www.applovin.com/privacy/

Facebook SDK

Facebook

Ad, Analyze usage 

Device identifiers; Device attributes, such as device model and screen dimensions, CPU core, storage size, SDK version, OS and app versions, and app package name; and Networking information, such as the name of the mobile operator or ISP, language, time zone, and IP address.

https://developers.facebook.com/blog/post/2022/07/18/resources-for-completing-app-store-data-practice-questionnaires-apps-facebook-or-audience-network-sdk

Admob

Google

Ad

IP address; User product interactions; Diagnostic information; Device and Account identifiers; Precise location data


https://developers.google.com/admob/android/privacy/play-data-disclosure


AgoraAudio_iOS

Agora

Analyze usage

IP address; User product interactions; Diagnostic information; Device and Account identifiers


https://www.agora.io/en/

AgoraRtm_iOS

Agora

Analyze usage

IP address; User product interactions; Diagnostic information; Device and Account identifiers


https://www.agora.io/en/


8. Do Not Track

A “Do Not Track” signal is a preference you may set on your browser, but we do not respond to Do Not Track signals.

9. Retention

We store information for as long as necessary for the purposes identified in this Privacy Policy, including to provide our Services, or for other legitimate purposes, such as complying with legal obligations, enforcing and preventing violations of our Terms, to fight spam, or protecting or defending our rights, property, and users. The storage periods are determined on a case-by-case basis that depends on the following factors:

The nature of the information and why it is collected and processed. The length of time we will keep your information will generally be determined by how long we need that information to provide you with our Services, including any optional features you use, and to provide customer support. 

• In certain cases, we need to keep your information for longer for legal reasons as described under the Legal Reasons section below.

Legal Reasons. In certain cases, we also keep your information for legal reasons, including after your account has been deleted.

We keep your information:

To respond to a legal request or to comply with applicable law when we have a legal obligation to retain information. For example, if we receive a valid legal request, such as a preservation order or search warrant, related to your account, we preserve your information after you delete your account. 

To deal with and resolve requests and complaints. For example, we generally retain correspondence relating to data subject requests under GDPR for a year, in case those requests are not resolved and this correspondence is required in order to handle any resulting complaints. In such cases, the correspondence is then retained while those complaints are being resolved.

For litigation or regulatory matters. For example, we preserve your information where it is reasonably necessary for reasons related to a legal claim or complaint, such as where we are subject to a regulatory investigation or we need to defend ourselves in legal proceedings about a claim related to your information or respond to a regulator in relation to a complaint made by you or someone else. 

Issues relating to the safety, security, and integrity of our Services and to protecting rights, property, and users. For example, we keep information where it is necessary to investigate misuse of our Services, such as spam and other bad experiences. If we disable an account for violating our Terms, we also preserve information about that user for safety, security and integrity purposes.

The actual information that we keep and how long we keep it for depends on the nature of the reason in question.

Operational Retention Needs. We need to store information in certain cases for operational needs. For example, if a message cannot be delivered immediately, we keep it in encrypted form on our servers for up to 30 days as we try to deliver it. We also store information where necessary for troubleshooting and debugging issues with the Services. We keep the information that we store for this purpose for up to 90 days, provided longer storage is not necessary for investigating and resolving a specific issue, or for legal reasons. 

Messaging. We retain the information that we process to convey your messages or calls (which includes information like your phone number, the time and date you make a call or send a message or the duration of your calls) in accordance with the specific rules and requirements under the EU Directive 2002/58/EC, where applicable, as long as it is needed for transmitting the communication, operating our Services, ensuring the safety and security of our Services, or to comply with legal obligations under applicable law. When we do not need the information for any of these purposes anymore, we delete or anonymize it.


10. Deleting Your Information

When you delete your account or when it is deleted as a result of inactivity, we delete the information we have about you immediately.

 

11. Managing Your Information

If you would like to manage, change, limit, or delete your information, you can do that through the following tools:

• Settings. You can change your settings to manage certain information available to other users.

• Deleting Your Account. You can delete your account at any time using our in-app delete my account feature in your in-app settings. Be mindful that if you only delete the App from your device without selecting the in-app delete my account option in your in-app settings, the Information We Collect will be stored on our servers for a longer period


12. Special Information for California Residents

If you are a California resident, you have certain rights with respect to your personal data under the CPRA. These rights include the right to request access to, rectify, or deletion of your personal data, as well as the right to know whether your personal data is being sold or disclosed and to whom. To exercise any of these rights, please contact us at contact@among.chat. We will respond to your request within the timeframes required by the CPRA. Please note that we may require additional information from you in order to verify your identity and process your request.

California Consumer Privacy Rights Act (CPRA) and Other State Privacy Laws: If you are a resident of a state with a privacy law that requires it, you have the right to know whether we sell your personal data and, if so, the categories of personal data that we sell and the categories of third parties to whom we sell it. To exercise this right, please contact us at contact@among.chat. We will respond to your request within the timeframes required by applicable law. Please note that we may require additional information from you in order to verify your identity and process your request.

If you are a resident of a state with a privacy law that requires it, you have the right to opt out of the sale of your personal data. To exercise this right, please contact us at contact@among.chat. We will respond to your request within the timeframes required by applicable law. Please note that we may require additional information from you in order to verify your identity and process your request.

California law allows users of the Site or Service who are California residents to request and receive once a year, free of charge, a notice from us describing what categories of personal information (if any) we shared with third parties, including our corporate affiliates, for their direct marketing purposes during the preceding calendar year. If you are a California resident and would like to request a copy of this notice, please contact contacting us as provided in the “How to Contact Us” section. In your request, please specify that you want a “California Privacy Rights Notice.” Please allow at least thirty (30) days for a response.

Please note that we are not required to erase or otherwise eliminate content or information if:

Further, nothing in this provision shall be construed to limit the authority of a law enforcement agency to obtain such content or information.

13. Special Notice to Individuals in the European Economic Area, Switzerland and/or the United Kingdom

This section only applies to individuals who access or use our Service while located in the European Economic Area, Switzerland and/or the United Kingdom (collectively, the “Designated Countries”) at the time of data collection. We may ask you to identify which country you are located in when you use some of the Services, or we may rely on your IP address to identify which country you are located in.

When we rely on your IP address, we cannot apply the terms of this section to any individual who masks or otherwise hides their location information from us so as not to appear located in the Designated Countries. If any terms in this section conflict with other terms contained in this Policy, the terms in this section shall apply to users in the Designated Countries.

A. Our Relationship to You. Guru Network Limited is a data controller with regard to any personal information collected from individuals accessing or using its Service. A “data controller” is an entity that determines the purposes for which and the manner in which any personal information is processed. Any third parties that act as our service providers or are otherwise acting on our behalf are “data processors” that handle your personal information in accordance with our instructions.

B. Legal Bases for Processing Your Personal Information. We describe our legal bases for processing throughout this Policy. Below is a list of the purposes described in our policy with the corresponding legal bases for processing:

In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular, whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

C. Your Individual Rights. We provide you with the rights described below when you use our Service. If you would like to exercise your rights under applicable law, please contact us at contact@among.chat. Please note, we may seek to verify your identity when we receive an individual rights request from you in order to ensure the security of your personal information.

14. Children's privacy

The service may contain content appropriate for children under the age of 13. As a parent, you should know that through the Service children under the age of 13 may participate in activities that involve the collection or use of personal information. We use reasonable efforts to ensure that before we collect any personal information from a child, the child’s parent receives notice of and consents to our personal information practices.

We also may limit how We collect, use, and store some of the information of Users between 13 and 18 years old. In some cases, this means We will be unable to provide certain functionality of the Service to these Users. If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent’s consent before We collect and use that information.

We may ask a User to verify its date of birth before collecting any personal information from them. If the User is under the age of 13, the Service will be either blocked or redirected to a parental consent process.

15. How to Contact Us

Please also feel free to contact us at contact@among.chat if you have any questions about this Privacy Policy.