Privacy Policy

1. What we collect

You give us

• Account: mobile number, name, handle, profile photo, bio, city and food preferences.
• Content: videos, photos, captions, restaurant and dish tags, reviews, comments, saved lists, and messages you send.
• Creators: linked social accounts, identity-verification (KYC) details and documents, and payout details such as a UPI ID or bank account.
• Restaurants: business details, verification documents, menus, prices and offers.
• Support: what you tell us in Help & Support requests, reports and grievances.

Collected when you use Zyrilo

• Location: precise location if you allow it, to show places near you and your distance from them; otherwise the area or city you choose. You can turn precise location off in your phone's settings at any time.
• Usage: app opens, which reels you see and watch, the restaurants, profiles and offers you view, and searches. Before you sign in these are linked to a random device identifier, and to your account after you sign in.
• Offers: the offers you claim and redeem, where and when.
• Device and technical: device model, operating system, app version, push notification token, IP address and crash diagnostics.

2. Why we use it

• To create and secure your account, including sending OTPs and detecting suspicious sign-ins.
• To run the product: show your feed and nearby places, publish your content, process offer claims and redemptions, and deliver messages and notifications.
• To attribute verified redemptions to creators, calculate earnings, verify identity and pay creators.
• To keep Zyrilo safe: screen uploads, handle reports, prevent fraud such as fake or duplicate redemptions, and enforce our Terms and Community Guidelines.
• To understand and improve Zyrilo, using measures such as views, saves and redemptions.
• To meet legal obligations, including tax, accounting, and responding to lawful requests from authorities.

We process your data on the basis of your consent, which you give when you sign up and when you grant permissions such as location and notifications, and for the legitimate uses the DPDP Act allows, such as complying with the law. You can withdraw consent at any time (see section 7); this does not affect processing that already happened.

3. What is public

Your handle, name, profile photo, bio and the content you post are public on Zyrilo and may appear on our public web pages and in search engines. Saved lists are private unless you share them. Messages are visible only to the people in the conversation.

4. Who we share it with

• Restaurants see the offers claimed and redeemed at their venue, as needed to honour and reconcile them.
• Creators see aggregated performance of their content — views, saves, offers claimed and used — not who you are.
• Service providers who process data on our behalf under contract: cloud hosting, video hosting and delivery, SMS and OTP delivery, maps and geocoding, push notifications, identity verification and payouts, and crash reporting.
• Authorities, when the law requires it or to protect the rights and safety of our users and the public.
• A buyer or successor, if Zyrilo is involved in a merger or acquisition, under the same protections.

We do not sell your personal data, and we do not share it with advertisers.

5. How long we keep it

We keep your data while your account is active. When you delete your account, your profile is hidden immediately and, after 30 days, your mobile number is erased and your name, handle, bio and photo are removed or replaced. Your posts are removed.

Some records are kept longer because the law requires it or to protect users: earnings, payout and tax records (as long as tax and accounting laws require), records of moderation decisions and grievances, and information needed to prevent fraud or banned users returning. These are kept in a form that is no longer used to identify you for any other purpose.

6. Your rights

• Access: get a summary of your personal data and how it is used. Request a data export from Settings in the app.
• Correction and completion: edit your profile in the app, or ask us to correct anything else.
• Erasure: delete your account from Settings, or ask us to erase specific data we no longer need — see Delete your account.
• Grievance redressal: complain to us first — see Grievance officer. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
• Nominate: name someone to exercise your rights if you die or become unable to.

Write to contact@zyrilo.app for anything you can't do in the app. We may need to verify your identity first.

7. Withdrawing consent and permissions

Turn off location, camera, photos or notification permissions in your phone's settings at any time; the features that need them will stop working. To withdraw consent to all processing, delete your account.

8. Children

Zyrilo is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child is using Zyrilo, contact contact@zyrilo.app and we will delete the account.

9. Security

We protect your data with encryption in transit, access controls, audit logs of staff actions, and database rules that limit each account to its own data. No system is perfectly secure; if a breach affects your personal data we will notify you and the Data Protection Board as the DPDP Act requires.

Your data is stored in India.

10. This website

Our website does not use advertising or tracking cookies — see the Cookie Policy. If you file a grievance on the website, we use your name, email and message only to handle that grievance.

11. Changes to this policy

We will post any update here and change the date at the top. If a change affects how we use data you have already given us, we will tell you in the app and, where the law requires, ask for your consent again.

12. Contact

Privacy questions: contact@zyrilo.app. Complaints: our Grievance Officer, 516/1748, Swarnapuri, Kanan Vihar, Patia, Bhubaneswar, Khordha, Odisha 751024, India.