Privacy Policy

Welcome to RyKoraL (com.toss.walkearn), a comprehensive modern social media, communication, and fitness rewards application. The RyKoraL Team ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (https://rykoral.vercel.app). This policy complies strictly with global privacy standards and Google Play Store Developer Policies.

To provide our diverse range of features—including social networking, chat, voice/video calls, file sharing, and fitness tracking—we must collect certain information about you. We collect information you provide directly to us, information collected automatically, and information from third parties.

In accordance with Google Play Policy, we explicitly disclose our use of sensitive device permissions and Foreground Services. We only request these permissions to enable core app functionality:

• ACTIVITY_RECOGNITION (Physical Activity): Used exclusively to count your steps and convert your physical movement into in-app rewards/coins.
• CAMERA & RECORD_AUDIO: Used to allow you to take profile pictures, record video posts (Vibes), scan QR codes for group invites, send voice notes in MahaChat, and use the MahaEdit Pro voice-over features.
• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION: Used strictly for peer-to-peer (P2P) file sharing via MahaShare. Location permissions are required by Android to discover nearby devices via Wi-Fi Direct and Bluetooth. We do not track your location in the background.
• READ/WRITE_EXTERNAL_STORAGE & Media Permissions: Used to let you select photos, videos, and files from your gallery to post to your feed, share in chat, or transfer via MahaShare.
• Foreground Services (HEALTH, CAMERA, MICROPHONE, DATA_SYNC): We utilize foreground services (which display a persistent notification) to ensure your steps are accurately counted while your phone is locked (HEALTH), to maintain active voice/video recordings (CAMERA/MICROPHONE), and to ensure large file transfers or data syncing completes successfully without being killed by the Android OS (DATA_SYNC).

When you register for RyKoraL, we collect:

• Identifiers: Email address, phone number, and password.
• Profile Data: Your chosen username, display name, profile photos, bio, and other information you choose to add to your public profile.
• Authentication Data: Data required to secure your account via Firebase Authentication.

Our app acts as a social media platform within our "Mahaverse". We collect and store:

• Media: Images (referred to as "Waves"), short videos/reels (referred to as "Vibes"), and audio recordings you upload.
• Social Interactions: Posts, comments, likes, shares, and network connections (referred to as your "Circle" for followers, and "Connections" for following).
• Storage: This media is securely stored using Firebase Storage and Cloud Storage services.

RyKoraL features robust communication tools. We process:

• Messaging: The contents of your text messages, voice notes, and shared media within chats, processed via Firebase Realtime Database/Firestore.
• Calls: Metadata regarding voice and video calls (e.g., duration, timestamps). We do NOT record the audio or video of your private calls.

To power our gamified rewards system, missions, and mini-games, we collect:

• Sensor Data: Physical activity data from your device's built-in step counter/pedometer.
• Progress: Daily step counts, mission completion status, and rewards/coins earned.
• This data is used exclusively within the app to calculate rewards and facilitate step-based challenges. It is never sold to third parties.

We automatically collect device-specific information when you install or use the App:

• Hardware model, operating system version, unique device identifiers (e.g., Android ID).
• IP address, mobile network information, and app crash logs (via Firebase Crashlytics).

We use Firebase Analytics to understand how users interact with RyKoraL. This includes data on page views, feature usage frequency, time spent in-app, and button clicks. This helps us optimize the user experience and fix bugs.

Our app is supported by advertisements provided by AdMob. To provide relevant ads:

• AdMob may collect and use your Google Advertising ID.
• You can opt-out of ad personalization through your Android device settings (Settings > Privacy > Ads).

We utilize the collected information to:

• Provide, maintain, and improve all app features (social feed, chat, calls, fitness tracking).
• Process and manage your virtual rewards, coins, and challenge progression.
• Send push notifications regarding messages, social interactions, and app updates.
• Ensure platform safety, monitor for fraudulent activity, and enforce our Terms of Service.

We do not sell your personal data. We only share information:

• With other users: Information you post on your public profile or social feed.
• With service providers: Third-party cloud infrastructure (Firebase, Google Cloud).
• For legal reasons: If required by law, subpoena, or to protect the rights and safety of our users.

RyKoraL deeply integrates with several third-party services. By using our app, you also acknowledge the privacy practices of:

• Google (Firebase & AdMob): For authentication, databases, storage, analytics, and ads.
• Cloud Storage Providers: For secure hosting of user-generated media.

We retain your personal information, chat history, and media for as long as your account is active. Step data and analytics logs are anonymized or deleted periodically. If you delete your account, your data is removed from our active databases within 30 days.

In accordance with the Google Play Data Safety section:

• Data in Transit: All data transferred between your device and our servers is encrypted in transit using industry-standard HTTPS/SSL.
• Data Deletion: We provide a mechanism for users to request data deletion both in-app and via our website (see Section 17).
• No electronic transmission or storage is 100% secure, but we enforce strict database rules and security protocols to safeguard your information.

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Opt-out of push notifications via device settings.
• Revoke physical activity tracking, camera, or location permissions at any time via Android Settings.

In strict compliance with Google Play Store policies, you can request complete deletion of your account and all associated data in two ways:

1. In-App: Navigate to Settings > Account > Delete Account and follow the prompts.
2. Web Request: Visit our Data Deletion Form and submit a request. All data is purged within 30 days of a verified request.

18.1 Children's Privacy (Age Limits)

RyKoraL is not intended for users under the age of 13. We do not knowingly collect personal data from children. If we discover a child under 13 has provided us with personal information, we will immediately delete it from our servers. During registration, users must provide their date of birth to verify they meet this age requirement.

18.2 Child Safety Standards & CSAE Prevention Policy

RyKoraL maintains a zero-tolerance policy against Child Sexual Abuse Material (CSAM) and Child Sexual Abuse and Exploitation (CSAE). We deploy proactive technologies, manual review, and strict reporting protocols to protect minors on our platform.

A. Proactive Prevention & Detection

• Automated Media Filtering: All images, videos, and media uploads (Waves and Vibez) are screened automatically to detect and prevent known CSAM/CSAE before it can be shared.
• Text Pattern Monitoring: Our chat servers use real-time keyword analysis to detect and flag suspicious messaging, including patterns related to online grooming.
• Human Moderation: Our safety team reviews any flagged alerts on a priority basis.

B. How to Report Child Safety Concerns In-App

Users can report suspected child safety concerns, grooming behavior, or abuse 24/7 directly inside the application:

1. Report Media/Post: Tap the options menu icon (···) in the top-right of the post, select "Report", and choose "Child Safety Concern".
2. Report Profile: Go to the user profile page, tap the options menu (···) in the top-right, select "Report Profile", and choose "Child Safety / Grooming".
3. Report Chat Message: Long-press the message, tap "Report Message", and select "Child Safety Concern".

C. Response and Legal Mandate

Upon verification of any child safety or CSAE violation:

• The offending account is permanently terminated.
• The user's associated device ID and IP address are blacklisted permanently.
• We submit a CyberTipline Report containing all relevant user details, logs, and evidence directly to the National Center for Missing & Exploited Children (NCMEC) and cooperate fully with global law enforcement agencies.

D. Designated Child Safety Point of Contact

We have a designated Child Safety & Compliance Officer prepared to handle inquiries and reports regarding child exploitation prevention and compliance. You can reach our safety officer at: vemalaramakrishna72@gmail.com.

Your information may be transferred to and maintained on servers located outside of your state or country. By using RyKoraL, you consent to the transfer of your data to our secure cloud facilities.

While the mobile app relies on SDKs (like Firebase), our website may use cookies to improve user experience, remember your preferences, and track website traffic analytics.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and, for significant changes, sending an in-app push notification or email.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact the RyKoraL Team:

Email: rykoral8@gmail.com

Website: https://rykoral.vercel.app