This Privacy Policy describes how GC Labs Private Limited ("GediChat", "we", "us") collects, uses, and protects your information when you use the GediChat mobile application and the website gedichat.com (together, the "Service").
1. Information We Collect
Information you provide
- Phone number — used to create and sign in to your account via SMS verification.
- Profile information — username, display name, profile photo, and vibe/personality details you choose to add.
- Content you create — photos, videos, stories, messages, and routes you share in the app.
Information collected automatically
- Location data — with your permission, we use your device's location to show your presence on the map while you are on a Gedi, to power route features, and to detect crossed paths with other users. You can stop sharing location at any time in your device settings, though core map features will not work without it.
- Device information — device model, operating system version, app version, language, and a push notification token used to deliver notifications to your device.
- Usage data — interactions within the app (such as Hys sent and received, stories viewed, and chats unlocked) needed to operate the Service.
Music integration
If you connect Spotify or Apple Music, we access limited information (such as currently playing track) solely to power music sync features. We do not receive your streaming account password. You can disconnect these integrations at any time.
Camera and photo library
With your permission, GediChat accesses your camera and photo library so you can capture and share stories, set a profile photo, and scan GC Passport QR codes. Media is only uploaded when you choose to share it.
2. How We Use Your Information
- To create and manage your account and verify your identity via phone number.
- To show your live presence on the map to other users while you are on a Gedi.
- To enable core social features: Hy (mutual wave) chat unlocking, messaging, stories, crossed paths, and notifications.
- To deliver push notifications about messages, Hys, and other interactions. You can disable these in your device settings.
- To maintain safety and security, including enforcing a single active session per account.
- To improve, debug, and develop the Service.
We do not sell your personal information, and we do not use it for third-party advertising.
3. How Your Information Is Shared
- With other users — your username, profile, live map presence (while on a Gedi), stories (per the audience you select), and messages (with users you have mutually unlocked chat with) are visible to other users as part of the Service.
- Service providers — we use Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, and Cloud Messaging) to operate the Service. Firebase processes data on our behalf under Google's data processing terms. See Firebase Privacy and Security.
- Music partners — if you connect Spotify or Apple Music, limited data is exchanged with those services under their own privacy policies.
- Legal requirements — we may disclose information if required by law, legal process, or to protect the rights, safety, and security of our users or others.
4. Data Retention
- Stories automatically expire and are deleted 24 hours after posting.
- Account data (profile, messages, interactions) is retained while your account is active.
- If you delete your account, we delete your personal data within a reasonable period, except where retention is required by law.
5. Your Rights and Choices
- Access, correction, deletion — you can update your profile in the app, or contact us to access or delete your data.
- Location — control location access in your device settings.
- Notifications — disable push notifications in your device settings.
- Account deletion — you may request deletion of your account and associated data by contacting us at the email below.
Depending on where you live, you may have additional rights under applicable law (including the Digital Personal Data Protection Act, 2023 in India). We honor valid requests in accordance with applicable law.
6. Security
We use industry-standard measures to protect your data, including transport encryption (HTTPS/TLS), Firebase security rules restricting data access, and single-session account enforcement. No method of transmission or storage is 100% secure, but we work to protect your information.
7. Children
GediChat is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
8. International Users
Our Service is operated from India and data may be processed on servers located in other countries through our service providers. By using the Service, you understand your information may be transferred to and processed in countries other than your own.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date above. Material changes may also be communicated in the app.
10. Contact Us
© 2026 GC Labs Private Limited. All rights reserved.