Privacy Policy | Bzz Stays

1. Information we collect

Personal information: Full name, email, phone number, address, and payment details.
Non-personal information: IP address, browser type, device information, and cookies.
Content and communications: Content you post or send through the service, including Messages chat content where that content is not end-to-end encrypted, and — where stored for support or delivery logging — WhatsApp Business webhook payload data associated with your account.
Location: Your selected area and approximate coordinates, used for nearby discovery, local news, and community alerts. We do not intend to show exact map pins publicly in member discovery lists.

2. How we use your information

To provide and maintain our Services
To process transactions and send confirmations
To enhance user experience and security
To comply with legal obligations
To help keep community feed posts, local complaint posts, public replies on complaint threads, Messages chat content, and stay listing review text safe before they are published, we may send that text to a third-party AI provider for automated safety classification. We may use different AI models and providers for different features and may change them at any time; that processing is subject to the relevant provider’s terms and policies.
Your Kullvi AI conversations are stored so you can reopen them from the chat list inside the assistant. They are held encrypted, and our team may read them to improve the assistant and to support you. We keep only your most recent conversations (currently the last 10) and delete older ones automatically; you can delete any conversation yourself at any time. Please do not share personal details in a chat that you would not be comfortable sharing publicly.
If you enable push notifications and nearby news alerts, we may send browser push messages when new local news is published in your area, using approximate coordinates you have saved (such as home location) or recent device location, together with the article title, image, and link.
If you add an optional short bio on your profile, we may show it on your public community profile (for example on your Local Community feed page) for other members to see.
If you enable push notifications and nearby public complaint alerts, we may send browser push messages when a member files a complaint whose incident location is within your chosen radius of coordinates you have saved (such as home or profile GPS), together with a short excerpt and a link.
Local complaint posts and public replies on complaint threads are community content in the same way as the feed: other permitted signed-in members may see replies in the app, and shareable complaint detail links may show the complaint text and images to anyone who opens the link (including when another site generates a social or messaging preview).
If you choose Google SMS phone verification, your phone number is sent to and stored by Google to provide phone authentication and improve spam and abuse prevention across Google services. Google generates and validates this code; Kullvi receives a signed verification result and the verified phone number.
Authorised platform administrators may use your saved home area or recent location to select recipients for service or community announcements. If your notifications are enabled, these announcements may be delivered by push notification; they may also appear in your Messages inbox.
When you create a promoted business message, its text is sent to an AI provider for safety review and writing suggestions. Your currently selected location and range determine the nearby audience. The message, optional optimized image, payment record, selected area, audience delivery status, and recipient reward records are stored to operate and audit the campaign. Nearby eligible members receive the in-app message; only members who opted in to WhatsApp ads are selected for paid WhatsApp delivery.
For members who have verified their mobile number by OTP but have not set a profile name or photo, we may — where applicable law and the relevant provider allow it — obtain and populate that information from trusted third-party services (such as Truecaller or WhatsApp) or through manual verification, to improve profile completeness and account authenticity.
Media you upload may be processed automatically (including by AI) or manually to resize, crop, rotate, or compress it for display in the app. This does not affect your ownership of the original content.
Videos we generate with AI and publish to the community feed are made from a brief our team writes, not from your posts, photos or messages. When we publish one to a chosen set of members we store which video went to which member so we can show it, count it and take it down again if we need to.

3. Sharing and disclosure

With service providers (for example payment processing, messaging delivery, and analytics)
For legal compliance and safety measures
In case of a business transfer
With Google Firebase Cloud Messaging and Apple Push Notification service, which deliver push notifications to the Kullvi Messenger app using a device token (see section 8)
When you send an SOS from the Kullvi Messenger app, with nearby members who have opted in to SOS alerts, Kullvi staff, and your emergency contacts (see section 8)

4. Cookies and tracking

We use cookies and similar technologies for functionality, analytics, and experience improvements. You can manage cookie preferences in your browser settings.

5. Data security

We implement reasonable security measures to protect your personal data, though no system is 100% secure and you acknowledge the inherent risks of the internet. Where encryption at rest is enabled, Messages chat message bodies, in-app notification titles and bodies, WhatsApp delivery log message text, and stored WhatsApp webhook payload data held in our database are encrypted using keys that are kept separate from the database, so that database access alone is not enough to read those contents in clear form.

6. Kullvi AI assistant

The optional Kullvi AI experience — normal chat as well as guided flows such as the listing and community post helpers — sends what you type and recent conversation from your browser session to an AI model so the assistant can respond. Those are third-party services, we may change model or provider at any time, and your use of the assistant is also subject to the provider’s terms. Your chats are saved to your account (or to your browser if you are not signed in) and our team may read them to improve the assistant and support you. Never enter passwords, OTPs, full payment card numbers, legal identity numbers, health data, or other highly sensitive details.

7. Encrypted messages and delivery metadata

In eligible member-to-member Messages conversations, message text is encrypted on your device before it is sent, and the encryption key stays on your phone or browser — we cannot read the content of those messages, and we cannot recover that history if you clear browser data, reinstall the app, or sign in on a new device. A message you send is sealed only for the device you send it from and for the devices of the person or group members you send it to, so it can be read on those devices and nowhere else — not on your other phones or browsers. Messages you receive can be read on each of your devices that was set up for secure chat when they were sent. Eligible conversations are never sent unencrypted: if the other person has not yet opened Kullvi chat on any device, your message waits, unsent, on the device you wrote it on until they do (it is dropped if they have not done so within the chat retention period), and we may send them a notification — which never contains the message — asking them to open Kullvi chat. In a group, members who have not set up secure chat do not receive the message. We still process delivery metadata — who you message, when messages are sent, and device registration — because that is required to route messages. Support and other designated chats with us are not end-to-end encrypted, so our team can read those messages to help you.

8. Kullvi Messenger app

Kullvi Messenger is our Android and iOS app (package com.kullvi.messenger). It uses the same Bzz Stays account as the website, and everything else in this policy applies to it too. This section covers what the app does differently.

Phone contacts: Only if you give permission, the app sends the phone numbers in your contacts to us so we can tell you which of them are already members (up to 2,000 numbers per check). The numbers are matched and then discarded: we do not store or log them, and we never use them for marketing. We do keep a record of which members matched (their account, not their number), so that you and they can message and call each other without a friend request; it does not give either of you access to the other's friends-only profile or posts. You can refuse or revoke the contacts permission at any time in your phone settings; the app still works, and you can search for people instead.
Location: With your permission, the app uses your GPS pin and the radius you choose (1, 3, 10 or 25 km) for People nearby, Local Updates and the reach of an SOS. The name of your area is worked out from your coordinates on our servers.
SOS: When you send an SOS, your live location, the category you pick, the reason you give (optional) and the photo you attach (optional) are shared with nearby members who have opted in to SOS alerts, with Kullvi staff, and with your emergency contacts.
Chats: Chat text is end-to-end encrypted with keys held on your device (ECDH P-256 key agreement, AES-256-GCM encryption), so we cannot read it. A message is readable only on the device you sent it from and on the recipient's devices — never on your other devices — and it is never sent unencrypted: if the other person has no secure-chat key yet, it waits on your phone until they open Kullvi chat, and we may notify them (without the message) to do so. Your keys never leave your device, which means uninstalling the app loses that device's chat history by design. Photos, videos and shared locations are not end-to-end encrypted. Metadata, such as who messaged whom and when, is visible to us because it is needed to deliver messages. Support threads with us are not encrypted, so our team can read them to help you. Every message is permanently deleted 7 days after it is sent, or sooner or later if its sender chose a different disappearing-message timer (24 hours, 7, 15 or 30 days) in Settings → Privacy.
Push notifications: Notifications are delivered through Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS), using a device token that identifies your installation of the app.
Camera, photos and microphone: The app uses these only when you take or attach a photo, video or other media yourself.
View-once media: While a view-once photo or video is open, screenshots are blocked on Android. This cannot stop someone photographing the screen with another device.
Blocking and reporting: You can block or report a member from the app. A profile or message you report is reviewed by Kullvi staff.
Deleting your account: You can delete your account in the app (Settings → Account → Delete my account) or on the website. What is removed and what we keep is set out under "Your rights" below.

9. Your rights

Access and update your information
Opt out of marketing communications, and control alerts from your notification settings
Request account deletion, on the website or in the Kullvi Messenger app (Settings → Account → Delete my account): deleting your account deactivates it and removes your posts, comments and likes, your listings and their photos, your profile photo, your Messages chats and your notifications, and signs you out of the website and the apps. We may retain your mobile number (and a minimal account record) so it cannot be reused to create a new account or abuse referral or contest features, and as required by law. Click here to delete your account

10. Third-party links and services

Some features rely on third-party services, and some pages link to external websites. We are not responsible for the privacy practices of those third parties.

11. Children's privacy

Our Services are not intended for children under 13. We do not knowingly collect personal data from children under 13. Child Safety Standards

12. Policy updates

We may update this Privacy Policy periodically. Changes will be published on this page, and continued use of the service after an update means you accept the latest version.

13. Contact us

Kullvi Products & Services Private Limited

Website: www.kullvi.com

Phone: +91 74400 88000