This Privacy Policy describes how Viyona Fintech India Private Limited (“Viyona”, “we”, “us”, or “our”) collects, uses, stores, processes, and protects information when you use Evolv Chat, including its mobile application and related services.
By using Evolv Chat, you acknowledge the data practices described in this Privacy Policy.
When you register for or use Evolv Chat, we may collect information necessary to create, identify and manage your account, including:
Authentication information is used to authenticate users and protect access to Evolv Chat.
Evolv Chat provides real-time communication functionality. Depending on the features you use, we may process and store:
The current technical implementation stores messages and related conversation information using MongoDB, while media and documents may be stored using AWS S3.
Evolv Chat may provide audio and video calling functionality.
We do not record or store the content of your audio or video calls as part of the current service.
We may, however, retain limited call-related metadata and history necessary to provide call history, operate the service, maintain security and troubleshoot technical issues.
The current calling architecture uses technologies including WebRTC, LiveKit and Coturn.
With your permission, Evolv Chat may access contacts on your device to provide communication-related functionality, such as helping you identify and communicate with contacts using the service.
Access to contacts is subject to the permissions you provide through your device.
With your permission, Evolv Chat may access location information when required for features that involve location, including functionality that allows users to share location information.
Location access is subject to the permissions you grant through your device.
To operate, secure, maintain and troubleshoot Evolv Chat, we may collect technical information such as:
This information may be used for security, troubleshooting, service reliability, fraud or abuse prevention, and administration of Evolv Chat.
The application’s technical architecture also uses structured logging, metrics and observability technologies.
Depending on the features you choose to use, Evolv Chat may request access to certain device capabilities, including:
These permissions are requested to enable relevant Evolv Chat functionality, such as sending media, making audio/video calls, sharing content or location, identifying contacts and receiving notifications.
You can manage applicable permissions through your device settings. Disabling a permission may prevent the corresponding feature from functioning correctly.
Google classifies information such as contacts, device location, microphone and camera access as personal or sensitive user data, so the permissions and disclosures in the final build should remain consistent with this policy and your Play Console declarations.
Evolv Chat may provide an in-app locking feature that uses security capabilities available on your device.
Where supported and enabled, Evolv Chat may rely on the device’s existing authentication mechanism to authenticate access to the application. Availability depends on the capabilities and configuration of the user’s device.
Evolv Chat does not need to receive or store the user’s underlying device PIN, password or biometric credential merely to use the operating system’s device-authentication functionality.
We may use information collected through Evolv Chat to:
We do not currently use user information for advertising, and Evolv Chat does not contain third-party advertisements.
We use third-party infrastructure and technology providers where necessary to operate Evolv Chat.
These currently include:
Amazon Web Services (AWS) – infrastructure and object/media storage.
Firebase Cloud Messaging (FCM) – delivery of push notifications when the application is backgrounded or not actively running.
Twilio – delivery of OTPs and transactional SMS used for verification and authentication-related functionality.
These providers may process limited information as necessary to provide their respective services.
We do not sell users’ personal information.
We do not share personal information with unrelated third parties for their independent advertising or marketing purposes.
6. Data Storage
Evolv Chat’s application infrastructure and user data are currently hosted in India.
Depending on the type of information, Evolv Chat uses technologies including MongoDB for application data and AWS S3 for media, files and other objects.
We implement technical and organisational safeguards intended to protect information against unauthorized access, alteration, disclosure, loss or misuse.
The current Evolv Chat architecture uses security mechanisms including authenticated access, password hashing and encrypted API communications. The documented implementation includes JWT authentication, salted password hashing and AES-256-GCM/RSA-based API request/response security.
However, no electronic transmission, storage system or security mechanism can guarantee absolute security.
Current Encryption Model
The current version of Evolv Chat does not provide end-to-end encryption (E2EE) for chat messages.
Accordingly, Evolv Chat does not represent current chat communications as end-to-end encrypted.
The technical architecture may evolve in future releases. If our handling of user information materially changes as a result, we will update this Privacy Policy and applicable disclosures.
The current technical documentation expressly distinguishes the existing implementation from a proposed PQXDH/Double Ratchet E2EE approach.
Users may request deletion of their Evolv Chat account and associated personal data.
When an account deletion request is initiated, the account may initially enter a soft-deleted state while the deletion request is processed.
Associated user data is scheduled for permanent deletion generally within 14 to 30 days following initiation of the deletion process, subject to technical processing requirements.
Certain information may be retained for a longer period where retention is reasonably necessary or legally required for purposes such as:
Where information must be retained for such purposes, access will be limited as appropriate and the information will not be retained longer than reasonably necessary for the applicable purpose.
Google Play requires account-creating apps to provide both an in-app deletion path and an external web resource through which deletion can be requested.
Depending on your device and the functionality available within Evolv Chat, you may:
Revoking a permission may cause functionality dependent on that permission to become unavailable.
Users can initiate account deletion through the account/settings functionality provided within Evolv Chat.
Users must also be provided with an external method of requesting deletion if they no longer have access to the application.
Account deletion webpage:
https://evolvchat.viyona.com/account-deletion
That URL should only be included/published once your web team actually creates the page. Google requires the external resource to provide a genuine way to initiate deletion rather than simply redirecting users back into the application.
Evolv Chat is not intended to be directed specifically at children unless explicitly stated otherwise for a particular deployment or service.
Users must satisfy applicable eligibility requirements for use of the service.
If we become aware that personal information has been collected in circumstances inconsistent with applicable requirements, we may take appropriate steps to address the matter.
We may update this Privacy Policy periodically to reflect changes in Evolv Chat, our data practices, legal requirements or security practices.
When material changes are made, we may update the Last Updated date above and provide additional notice where required.
Users are encouraged to review this Privacy Policy periodically.
For questions, concerns or requests regarding this Privacy Policy or the handling of personal information, contact:
Viyona Fintech India Private Limited
Product: Evolv Chat
Country: India
Privacy/Support Email: Support@viyona.com