Privacy Policy

01 Who we are

Blindrop is operated by Blindrop, a company registered in India ("Blindrop," "we," "us," or "our"). This policy applies to the Blindrop Android app and the blindrop.app website (together, the "Service").

02 Scope of this policy

This policy covers information we collect through the Blindrop app, the blindrop.app website, customer support, and any related services. It does not cover third-party services we link to or integrate with, which have their own privacy policies — including Google Play, Daily.co/Agora, Firebase, and any AI providers we use, all listed in §8.

03 Data we collect

We collect the minimum needed to run a daily blind-matching product safely. Broadly, this falls into these categories:

We do not ask for your photo or your last name until a mutual Reveal happens, and we never make either mandatory for using the free tier of the Service.

04 How we use your data

• To create and verify your account, and to prevent one person from holding multiple accounts.
• To match you into a daily Drop based on age range, gender preference, and city-level radius.
• To run the live Drop session itself (timer, chat/call transport, AI assist).
• To generate your Vibe Report, Drop Replay Cards, and reaction-clip features you opt into.
• To send Drop-time push notifications, streak reminders, and service updates.
• To process subscription and virtual-item purchases (Reveal Tokens, Boosted Drop, Squad Drop Pass, etc.).
• To investigate reports, enforce our Community Guidelines, and keep the platform safe.
• To fix bugs, improve matching quality, and understand aggregate product usage — never to build a public profile of you for advertising to third parties.

We do not sell your personal data. We do not use your Drop conversations to serve you third-party ads.

05 Live Drops: text, voice & video

During a live Drop your identity is hidden from the other participant, but never from us — every account is tied to a verified phone number so we can act on reports and enforce accountability.

• Text Drops run over an encrypted, real-time channel. Messages are held only for the duration described in §9.
• Voice and Video Drops run through our real-time communications provider (Daily.co or Agora). Call recording is disabled by default on every room — we do not store an audio or video recording of your call. Video Drops apply a blur filter to the remote feed at the transport level.
• No photo, file, or link can be sent inside any live Drop, in any mode — this is enforced at the app level, not just a setting you can toggle.

06 AI processing

Blindrop uses a third-party large language model provider (such as Google Gemini or Anthropic Claude) to power features like the AI icebreaker assist, Vibe Report generation, and Drop Replay Cards. When these features are active, the relevant conversation text is sent to that provider to generate a response or summary. These providers process the data under their own enterprise data-handling terms and do not use it to train models on our behalf without our agreement. AI assist suggestions are visible only to the person who is stuck — the other participant is never told AI was involved.

07 The Reveal Gate & automatic deletion

This is the core privacy mechanic of Blindrop, so we want to be explicit about it:

• If both participants tap Reveal, the chat becomes a permanent thread and both profiles unlock to each other. From this point the conversation is retained like a normal message thread until either user deletes it or their account.
• If either participant taps Pass — or the Drop simply ends with no mutual Reveal — the session, the anonymous handles used, the chat transcript, and any call metadata are permanently deleted. Neither user is told who passed, and no "seen" record is kept.
• Vibe Reports are shown to each user privately regardless of outcome and contain no personal data by design — they're safe to keep or share even when a Reveal didn't happen.

08 Who we share data with

We share data only with the vendors that make the Service work, under contracts that limit what they can do with it:

We may also disclose information if required by law, to protect the safety of our users, or to investigate fraud or abuse of the Service. If Blindrop is ever involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to this policy.

09 Data retention

• No-Reveal sessions: deleted automatically per §7, typically within a short window after the Drop ends.
• Revealed conversations: retained until you delete the thread or your account.
• Account data: retained while your account is active, and for a limited period after deletion to comply with legal, tax, and fraud-prevention obligations.
• Reports and safety records: retained longer than other data where needed to enforce bans and respond to legal requests.
• Call audio/video: never stored beyond the live session, per §5.

10 Security

We use encryption in transit for chat and call traffic, restrict internal access to personal data on a need-to-know basis, and disable call recording by default on every Voice/Video room. No system is perfectly secure, and we encourage you to use a unique password (or your phone's biometric lock) and to report any suspicious activity immediately.

11 Your rights & choices

Subject to applicable law — including India's Digital Personal Data Protection Act, 2023, and, where relevant, the GDPR or CCPA for users outside India — you can:

• Access and download a copy of your personal data.
• Correct inaccurate profile information directly in the app.
• Request deletion of your account and associated data, subject to the retention exceptions in §9.
• Withdraw consent for optional features (Voice/Video Drops, reaction clips, marketing notifications) at any time via Settings.
• Lodge a grievance with your local data protection authority — in India, the Data Protection Board — if unsatisfied with our response.

You can exercise most of these directly from the app's Settings screen, or by contacting us using the details in §16.

12 Age requirement & children's privacy

Blindrop is strictly for users aged 18 and over. We verify age at profile setup and do not knowingly collect data from anyone under 18. If we learn an account belongs to a minor, we will suspend it and delete the associated data.

13 Where your data is processed

Blindrop primarily serves users in India, with the product built around single-city, single-timezone Drops. Data may be processed by our vendors (§8) in other countries, including the United States, in accordance with their own security and data-transfer safeguards.

14 Cookies & the Blindrop website

The blindrop.app marketing website may use basic cookies or similar technologies for essential site functionality and aggregate analytics (e.g., page-visit counts). We do not use the website to track you across other sites for advertising purposes.

15 Changes to this policy

We may update this policy as Blindrop's features evolve — for example, as Voice/Video Drops, Squad Drops, or new markets roll out per our product roadmap. We'll update the "Last updated" date above and, for material changes, notify you in-app before they take effect.

16 Contact

Questions about this policy, or requests relating to your data, can be sent to:

Privacy contact: support@blindrop.app