Privacy Policy for "Checkout My Friend"
Effective Date: This Privacy Policy was last updated on: August 28th 2024.
Welcome to the Privacy Policy of "Checkout My Friend" which is made available by Extasy
Technologies (“our”, “us”, “we”), a registered Partnership Firm located in - Kushal Konwar Path,
Professor Colony, Rangagora Road, Tinsukia, Assam 786125, India. We recognise that your
privacy is critically important to us, and we are committed to protecting your personal
information. This Privacy Policy outlines how we collect, use, share, and protect your personal
information, and describes your rights and choices regarding your information.
This Privacy Policy applies to all users of the "Checkout My Friend" mobile application and any
associated services (collectively referred to as the "Services"). By using our Services, you agree
to the collection, use, and sharing of your information as described in this Privacy Policy.
1. Personal Information Collection
1.1 Types of Personal Information We Collect
We collect various types of personal information from you depending on your interaction with
our Services:
● Account Information: When you sign up via Google OAuth or Apple OAuth to use our
Services, we collect your name, email address, profile picture, and gender.
● Third-Party Content: We collect content that features third parties (your friend) which
you upload to the app. This content is securely managed and shared with the intended
audience via the web interface, as specified by you. You must obtain explicit consent
from your friends before sharing their photos via the app. This ensures that the content is
shared with the full knowledge and agreement of the person being depicted and that
they are aware of, and agree to, our Privacy Policy and the terms under which their data
will be processed.
● Reactions: We collect user reactions or likes (e.g., date, chill, hookup, or prank) along
with any pre-written messages associated with these reactions that users send or
receive through the Services.
● Friend’s Tag: We collect the one-word description you select for your friend from
predefined options when you upload their photo. This tag is intended to describe your
friend lightly and is part of the content displayed with the photograph.
● Instagram Username: We collect Instagram Usernames from users who interact with
shared content via links on social networks. If the individual wishes to potentially connect
with the subject of the content, they can optionally provide their Instagram Username.
Once provided, the Instagram Username is stored and associated with future
interactions, allowing the subject and the user in the app to view the Username along
with the individual's name. This process occurs on the web and not within the app, and it
is completely optional.
● Feedback and Correspondence: We collect information that you provide when
contacting us for support, submitting feedback, or reporting issues, which helps us
improve our Services.
● Automatic Data Collection: We, along with our service providers, automatically collect
certain data about your device and usage patterns when you interact with our Services.
This includes:
○ Device Data: Information about your device, such as its operating system type
and version, browser type, device type (e.g., phone, tablet), and IP address.
○ Online Activity Data: Information about your interactions with our Services, such
as pages or screens viewed, time spent on each page, and navigation paths.
1.2 How We Collect Personal Information
Personal information is collected directly from you when you:
● Download and interact with the "Checkout My Friend" app or website.
● Sign up for our Services using Google OAuth or Apple OAuth.
● Upload photographic content, send reactions, or provide feedback.
We may also collect information from third-party sources such as marketing partners, publicly
available sources, and data providers.
2. Use of Personal Information
2.1 Purpose of Collecting Personal Information
We use the personal information we collect for the following purposes:
● Providing and Supporting the Services: To operate, maintain, and improve the
functionality of our Services. This includes creating and managing your account,
providing customer support, and communicating with you about updates, security alerts,
and administrative matters.
● Improvement and Personalization: To enhance and personalize your experience, such
as by troubleshooting issues, conducting research, and ensuring the security of our
Services.
● Marketing and Advertising:
○ Direct Marketing: With your consent, we may send you marketing
communications about special promotions, offers, and events via email or other
means.
○ Interest-Based Advertising: We may work with advertising partners to deliver
targeted ads based on your interests, as permitted by law.
● Compliance and Legal Obligations: To comply with legal requirements, enforce our
terms of use, and defend ourselves against potential legal claims. This includes retaining
records as necessary and cooperating with legal authorities.
3. Sharing of Personal Information
3.1 With Whom We Share Personal Information
We may share your personal information under the following circumstances:
● With Other Users: We share personal information, including the name and profile
picture of the sender of feedback or reactions, with users who have subscribed to our
premium service (“Checkout Pass”). This information is derived from the email address
provided during account registration (via Google OAuth or Apple OAuth) and is
exclusively accessible to premium subscribers. Additionally, we provide details about the
time at which the reaction was submitted. This is done to reveal the identity of those who
react (“date”, “chill”, “hookup”, or “prank”) to photographic content shared via app.
● Service Providers: We may share your personal information with third-party service
providers who assist us in operating our Services. This includes providers for customer
support, hosting, analytics, email delivery, identity verification, fraud detection, payment
processing, database management and advertising services.
● Compliance, Fraud Prevention, and Safety: We may disclose your information to legal
authorities or other parties when necessary to comply with legal obligations, protect the
safety and security of our users and the public, or prevent fraud and abuse.
● Business Transfers: In the event of a corporate transaction, such as a merger,
acquisition, reorganization, or sale of assets, your personal information may be
transferred to the acquiring entity. We will make reasonable efforts to ensure the
recipient honors this Privacy Policy.
3.2 How user share their personal information
Initiator (user who shares the photo of their friend) and Subject (user whose photo has been
shared), may choose to post their responses to pre-written messages and likes received
through the services, on their social media accounts. The visibility of these posts is governed by
the social media privacy settings of the user. It is important for users to review and adjust their
social media privacy settings to control who can view their responses and reactions.
3.3 Compliance and Safety
We may share your information when required by law, such as responding to lawful requests
from public authorities, including to meet national security or law enforcement requirements. We
will also share information if we believe it is necessary to protect the rights, property, or safety of
our users or the public.
4. User Safety and Content Moderation
4.1 Reporting Inappropriate Content
We are committed to maintaining a safe environment on our platform. If you encounter any
photographic content that violates our community guidelines, you can report it directly through
the web by selecting the "Report" option. You can navigate to the “Report” by locating the menu
option at the top-right of the image you are supposed to report. Upon receiving a report, our
team will conduct a thorough review and may remove the content or take other appropriate
action, including reporting the incident to law enforcement if necessary.
4.2 Content Moderation Practices
Before uploading any content, users must agree to our Photo Guidelines, which include:
● Explicit consent from individuals depicted.
● No nudity, sexually explicit material, or child exploitation.
● No violence, self-harm, or illegal activities.
● Respect for the privacy and dignity of others.
Users must click "I Understand" to explicitly confirm their agreement with these guidelines and
must reaffirm their understanding of these guidelines with each upload. Violation of these
guidelines may result in content removal, account suspension, or legal action.
4.2 Consent Breach
In situations where your photographic content is used without your explicit consent, it is
important to take immediate action to protect your rights. You can report the unauthorized use of
your photographic content by contacting us at help@checkoutmyfriend.link . Required
information for content takedown request includes the following:
● 4.2.1 Identification Details:
○ Full Name of the complainant.
○ Contact Information (phone number).
○ Two government-issued IDs for identity verification (e.g., Passport, Aadhaar,
Driver's License, PAN).
● 4.2.2 Detailed Description of the Unauthorized Content:
○ URL(s) or specific location(s) of the content on the platform.
○ Date and time the content was uploaded (if known).
● 4.2.3 Proof of Ownership or Legal Rights:
○ For personal images: A statement affirming that the complainant is the individual
depicted in the content or has the legal right to control its use.
○ For copyrighted material: Proof of copyright ownership (e.g., registration
certificate, publication details).
● 4.2.4 Statement of Good Faith:
○ A declaration that the information provided is accurate and that the request is
made in good faith, without intent to mislead.
● 4.2.5 Signature:
○ A digital or physical signature of the complainant to confirm the authenticity of the
request.
Our team will treat your report with the highest level of seriousness and will work swiftly to
resolve the issue. If the user responsible is found to have acted without consent, they will be
permanently banned from our platform. In cases where legal violations have occurred, we will
escalate the matter to law enforcement to ensure appropriate action is taken.
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this
Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used
to determine our retention periods include:
● Duration of Your Relationship with Us: We retain your information while your account
is active or as needed to provide you with the Services.
● Legal Obligations: We may retain data for an extended period when required to comply
with legal obligations, such as tax, accounting, or legal reporting requirements.
● Dispute Resolution and Enforcement: We may retain information as necessary to
resolve disputes, enforce our agreements, and protect our legal rights.
6. Data Security
6.1 Security Measures
We implement appropriate technical and organizational measures to protect your personal
information against unauthorized access, alteration, disclosure, or destruction. These measures
include:
● Encryption: We implement industry-standard security protocols to safeguard our
system. This includes the use of HTTPS to protect data in transit, encryption of our
databases to secure data at rest, and strict access controls to ensure that resources are
only accessible to users with the appropriate rights. This helps to protect against
unauthorized access, misuse, loss, disclosure, alteration and destruction of personal
information.
● Access Controls: We restrict access to personal information to employees, contractors,
and service providers who need that information to operate, develop, or improve our
Services. They are bound by confidentiality obligations and may be subject to
disciplinary action or termination if they fail to meet these obligations.
● Regular Security Audits: We regularly audit our security practices and infrastructure to
protect against vulnerabilities and improve our data protection strategies.
6.2 User Responsibilities
While we take security seriously, no method of transmission over the internet or electronic
storage is 100% secure. You are responsible for maintaining the confidentiality of your account
credentials and for any activity under your account. We encourage you to notify us immediately
if you suspect any unauthorized access to your account.
7. International Data Transfers
Currently, our services are available only within India, and all data processing is restricted to
India. We operate solely within this region and do not engage in international data transfers. If
we expand our services internationally, we will update our policies and provide transparent
updates regarding international data transfers.
8. Your Rights and Choices
8.1 Accessing and Updating Your Information
You have the right to access and update the personal information we hold about you. You may
manage and update certain aspects of your account information, such as your profile picture,
through the settings section of the app.
However, personal information such as your gender, name, Instagram Username (if added) and
email address cannot be updated through the app once it has been set. These details can be
accessed and you can request a copy of your data in a structured, commonly used, and
machine-readable format. To request your data visit http://checkoutmyfriend.link/request-data.
If you require changes to this non-updateable information due to exceptional circumstances,
please request us at http://checkoutmyfriend.link/help. We will review your request and provide
assistance as appropriate.
8.2 Opting Out of Marketing Communications
You may opt out of receiving marketing communications from us at any time by following the
unsubscribe instructions provided in the emails or by contacting us directly. Please note that
even if you opt out of marketing communications, we may still send you non-marketing
messages, such as those related to your account or transactions.
8.3 Withdrawing Consent
Where we rely on your consent to process your personal information, you have the right to
withdraw your consent at any time. This will not affect the lawfulness of any processing
conducted prior to your withdrawal, nor will it affect processing based on other lawful grounds.
Note this may impact the way you interact with our services.
● 8.3.1 Withdrawing Consent for Third-Party Content Involvement
When any of your personal content (your photograph) is uploaded by another user (your
friend), your explicit consent is required prior to the use of such content within our
services. You retain the right to withdraw this consent at any time, even after initially
granting it. This withdrawal will be respected without contest or challenge, ensuring your
autonomy over your personal data.
The withdrawal of consent shall be your sole prerogative, and upon exercising this right,
the corresponding content will be immediately deactivated or removed from our services.
Please note that while this action will not retroactively affect the legality of prior usage, it
will impact any further interaction with the relevant content. Your ability to withdraw
consent remains continuous and unrestricted, safeguarding your rights at all stages of
your engagement with our services.
8.4 Right to Deletion
You are entitled to exercise your right to delete your personal information at any time. To do so,
access the settings page of your app and select the "Delete" option or request us at
http://checkoutmyfriend.link/delete-account. Upon activation of the delete function, your
personal data will be immediately removed from the application.
However, deleting your account leads to the occurence of three primary actions:
● Hard Delete of Engagement Data: All data related to your interactions on others' posts
(such as likes, checkouts, comments, reports) will be permanently erased immediately.
● Identity & Post-Related Data: Data tied to your identity, including your name, email,
profile picture, Instagram username, connections and any posts you have created, will
be retained on our servers for a 30-day period to meet legal obligations, fraud
prevention, and dispute resolution requirements. After 30 days, this data will be
permanently deleted. Note: Account deletion is irreversible. Once deleted, your account
and associated data cannot be recovered.
● Retention of Anonymized Data:
○ Subscription Data: Subscription records will be anonymized and retained for an
extended period when required to comply with legal obligations, such as tax,
accounting, and audit purposes, without any personal identifiers.
○ Feedback & Bug Reports: Any feedback or bug reports submitted to us will also
be anonymized and retained for product development purposes. This data will no
longer be associated with your identity.
● 8.4.1 Post Deletion Policy
Posts can be deleted through three mechanisms:
1. Account Deletion: When either the user or their friend deletes their account, all posts
associated with them will be deleted.
2. Explicit Post Deletion: Users can manually delete any posts they have created, at
which point the post will be removed from the app interface.
3. Blocking: If a user blocks their friend (or vice versa), all posts shared between the two
will be deleted.
In all cases, posts will be removed from the app but retained on our servers for 30 days to meet
legal obligations, resolve disputes, and prevent fraud. After 30 days, posts will be permanently
deleted.
8.5 Right to Block
As a user, you have the right to control who can collaborate with you within the app. When a you
blocks another user, the following actions occur:
● All shared posts and mutual activities between you and your friend will be deleted.
● The data will remain on our servers for 30 days, during which it will be inaccessible on
the platform but retained for legal, fraud prevention, and dispute resolution purposes.
After 30 days, it will be permanently deleted.
● Once you block a user, you cannot collaborate or invite them again.
This feature is designed to help you manage your privacy and protect your experience within the
app. You may unblock users at any time if you change your mind.
8.6 Right to Object
You have the right to object to the processing of your personal information where we rely on
legitimate interests as the legal basis for processing. If you object, we will cease processing
your personal information unless we can demonstrate compelling legitimate grounds for the
processing or if the processing is necessary for legal claims.
8.7 Exercising Your Rights
To exercise any of your rights, please contact us at help@checkoutmyfriend.link. We may
request additional information to verify your identity before fulfilling your request.
9. Children’s Privacy
"Checkout My Friend" is not intended for use by individuals under the age of 18. We do not
knowingly collect personal information from children under 18. If we become aware that we
have inadvertently collected personal information from a child under 18, we will take steps to
delete such information promptly. If you believe that a child under 18 has provided us with
personal information, please contact us at help@checkoutmyfriend.link.
10. Third-Party Services and Links
Our platform may contain links to external websites and services, including, but not limited to,
our official Instagram page, which can be accessed through the app settings page for the
purpose of following us on Instagram. Additionally, users interacting with our web platform may
encounter calls to action prompting the download of our app. Such links will redirect users from
their web browsers to the respective Google Play Store or Apple App Store.
Please be advised that these third-party websites and services operate independently of our
platform and are governed by their own privacy practices. We strongly advise users to review
the privacy policies of any third-party websites or services they visit to understand how their
personal information is collected, used, and protected by those entities. We expressly disclaim
any responsibility for the privacy practices and policies of third-party services.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, technical, or
business developments. When we update our Privacy Policy, we will take appropriate measures
to inform you, consistent with the significance of the changes we make. We will obtain your
consent to any material Privacy Policy changes if and where this is required by applicable data
protection laws.
11.1 Notification of Changes
We will notify you of any changes to this Privacy Policy by posting the updated policy within the
app and revising the "Last Updated" date at the top of this page. We encourage you to review
this Privacy Policy periodically to stay informed about how we are protecting your information.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please
contact us at:
https://www.checkoutmyfriend.link/contact-us
