Privacy Policy
Last updated: August 2026
This policy explains what Mera Adda collects, why, and what you can do about it. Mera Adda is operated by Robosol India ("we", "us"), Kolkata, West Bengal, India.
We follow the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Who can use Mera Adda
Mera Adda is for people aged 18 and over. We ask for your date of birth at signup and refuse accounts below that age. If we learn that an account belongs to someone underage we delete it.
2. What we collect
You give us
- Account details - name, username, email address, date of birth and a password. We do not ask for your phone number.
- Profile details - photo, bio, gender, college, course, year and interests. All optional except where onboarding asks.
- Content - posts, reels, stories, comments and messages, including any photos, video or voice notes you send.
- Reports - what you tell us when you report someone.
We record as you use the app
- Who you follow, what you like, save and view.
- Story and reel view records, so creators can see who watched.
- Call records - who called whom, when, and for how long. We never record call audio or video.
- Your IP address and approximate time of requests, used for rate limiting and abuse investigation.
What we deliberately do not collect
- We do not store your password. We store a one-way hash of it and cannot recover it.
- We do not read the contents of your voice or video calls.
- We do not buy personal data about you from third parties.
- We do not track you across other websites or apps.
3. Secret Crush
Secret Crush is private by design, and this is a data-protection promise as much as a product one.
When you mark someone as a Crush, they are not told, and nothing visible to them changes in any way. There is no notification, no counter and no hint. No part of the app or its API will tell a person who has a pending Crush on them. The only moment anything is revealed is if that person independently marks you too - then you are both told, at the same time. If you remove a Crush before that happens, the record is deleted and the other person never learns it existed.
4. Why we use your information
| Purpose | What it involves |
|---|---|
| Running your account | Signing you in, showing your profile, delivering your posts and messages. |
| Safety | Enforcing blocks, message limits, reviewing reports, detecting abuse. |
| Verification | Sending a one-time code to your email address. |
| Support | Answering you when you contact us. |
| Legal | Meeting obligations under Indian law and responding to lawful requests. |
5. Who we share it with
We do not sell your personal data. We never have.
We share only what is necessary, with:
- Other users - your profile and content, according to the visibility you choose.
- Our hosting provider - which stores the database and files that run the service.
- Our email provider - your email address, solely to deliver a verification code.
- Our calling provider - a short-lived join token so a call can connect. The media travels directly between devices via their network.
- Law enforcement - when we receive a legally valid order.
6. How long we keep it
- Stories - hidden after 24 hours and deleted afterwards.
- Incomplete signups - nothing is stored at all. Until every verification code is confirmed, no account record exists on our servers, so an abandoned signup leaves nothing behind.
- Verification codes - valid for 10 minutes.
- Abuse and rate-limit records - up to 30 days, stored against a one-way hash rather than your actual email or number.
- Your account and content - until you delete them.
- Reports - kept after review so repeat behaviour can be recognised.
7. Deleting your account
Settings → Delete account. This is permanent. It removes your profile, posts, reels, stories, comments, likes, saves, follows, Crushes, matches, messages you sent, and your uploaded files.
Two things survive: reports filed about you, which we keep for safety, and messages you sent that exist in another person's conversation, which we cannot remove from their copy.
8. Your rights
Under the DPDP Act 2023 you may ask us to:
- tell you what personal data we hold about you;
- correct anything inaccurate;
- delete your account and data;
- nominate someone to exercise these rights if you die or become incapacitated.
Write to support@meraadda.in from your registered email address. We respond within 15 days.
9. How we protect it
- The site is served over HTTPS.
- Passwords are stored as one-way hashes, never in readable form.
- Login tokens are stored hashed, so a database copy alone cannot be used to sign in as you.
- Uploads are checked by content rather than filename, and stored where they cannot be executed.
- Database credentials are kept outside the public web directory.
No system is perfectly secure. If we discover a breach affecting your data, we will notify you and the Data Protection Board of India as the law requires.
10. Cookies
We set one essential cookie to keep you signed in. It is marked HttpOnly, so scripts on the page cannot read it, and SameSite=Lax to limit cross-site use. We do not use advertising or third-party tracking cookies.
11. Changes
If we change this policy we will update the date at the top and, for anything significant, tell you in the app.
12. Contact
Grievance Officer
Grievance Officer, Robosol India
Robosol India, Kolkata, West Bengal, India
grievance@meraadda.in
Appointed under the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020. We acknowledge complaints within 48 hours and resolve them within 15 days.