Privacy Policy

Last updated: July 12, 2026 · Version 2026-07-12

Krrch ("we," "us," or "our") operates the Krrch mobile application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Service.

For users in India, we process personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). You are a Data Principal with the rights described below. We process personal data for the purposes stated in this policy, based on your consent and/or other lawful grounds permitted under applicable law (including where processing is necessary to provide the Service you request).

By creating an account, you provide affirmative consent to the processing described here. You may withdraw consent by deleting your account or contacting our Grievance Officer; withdrawal may limit or end your ability to use the Service.

1. Information We Collect

Information you provide

  • Account information: Email address, password (stored securely hashed), and authentication credentials.
  • Consent records: Timestamps and policy/terms versions when you accept our Privacy Policy and Terms, and when you attest that you are 18 or older.
  • Profile information: Name, headline, bio, startup name, stage, domain, what you're looking for, timezone, LinkedIn URL, website, and profile photo.
  • Communications: Direct messages, community posts, comments, connection requests, and intro requests you send through the Service.
  • Call feedback: Ratings and optional feedback you provide after video calls.
  • Support requests: Information you provide when contacting us.

Information collected automatically

  • Usage data: App interactions, features used, match history, call history, and community activity.
  • Device information: Device type, operating system, app version, and unique device identifiers.
  • Push notification tokens: Firebase Cloud Messaging (FCM) tokens used to deliver notifications.
  • Presence data: Online status and activity heartbeats to power live matching and platform statistics.

Video call data

Live video calls are facilitated through Agora, a third-party real-time communication provider. Video and audio streams are transmitted directly between participants via Agora's infrastructure. We do not record, store, or retain video or audio from your calls.

2. How We Use Your Information

We use the information we collect for these purposes:

  • Provide, operate, and maintain the Service (account authentication and profile management)
  • Match you with other founders based on your profile, intent, and availability
  • Facilitate live video calls between matched users
  • Enable community features, messaging, connections, and intro requests
  • Send transactional emails (invitations, password resets, security alerts)
  • Deliver push notifications for messages, matches, connections, and community activity
  • Detect, prevent, and address fraud, abuse, and security issues
  • Improve reliability and usability of the Service using aggregated or de-identified insights where practicable
  • Comply with legal obligations and respond to lawful requests

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

  • With other users: Your profile information is visible to other Krrch users. Messages and community posts are shared with intended recipients.
  • Service providers (Data Processors): We use trusted third parties to operate the Service, including:
    • Self-hosted API and database (MySQL)
    • Cloud infrastructure and object storage for profile photos (e.g., Google Cloud)
    • Agora (live video infrastructure)
    • Firebase / Google (push notifications)
    • Resend (transactional email delivery)
  • Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account through the app, we delete your profile, messages, associated personal data, and profile photos from our active systems, subject to:

  • Backup retention periods (typically up to 30 days)
  • Legal obligations requiring us to retain certain records
  • Anonymized or aggregated data that cannot identify you

5. Your Rights and Choices

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate profile information (editable in-app)
  • Delete your account and associated data (available in Settings)
  • Export / portability of your data (available in Settings → Export My Data, or by contacting us)
  • Withdraw consent by deleting your account or contacting our Grievance Officer
  • Opt out of push notifications (via device or app settings)

India (DPDP Act): As a Data Principal, you may exercise rights of access, correction, erasure, and grievance redressal by using in-app controls or contacting our Grievance Officer. We aim to respond to grievance complaints within a reasonable period, and in any event as required by applicable law.

Residents of the European Economic Area (EEA), United Kingdom, and California may have additional rights under GDPR and CCPA respectively. To exercise these rights, contact us at hello@krrch.com.

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, authenticated API access controls, rate limiting, and restricted administrative access. Direct messages are encrypted at rest before storage (platform operators can decrypt for moderation and support). However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Krrch is not intended for users under 18 years of age. We require age attestation at account creation and do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact our Grievance Officer and we will delete it promptly.

8. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States, where our cloud infrastructure and service providers operate. By using the Service and providing consent, you acknowledge that your personal data may be transferred outside India (or your country of residence) for the purposes described in this policy. We use contractual and organizational safeguards appropriate to the nature of the processing.

9. Third-Party Links

The Service may contain links to third-party websites (e.g., LinkedIn profiles, founder websites). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the version/date, and requesting renewed in-app consent when required. Continued use after accepting an updated policy constitutes acceptance of the revised terms.

11. Grievance Officer & Contact

For privacy questions, Data Principal requests, or grievances under the DPDP Act:

Grievance Officer: Sumith S
Email: hello@krrch.com
Subject line: “DPDP Grievance” or “Privacy Request”
Contact form