Privacy Policy

Last updated 27 October 2026 · Operated by Zenzop International Private Limited

Who we are

BlinkPals is operated by Zenzop International Private Limited, India. Contact us about privacy at support@zenzop.com.

What we collect

Account: email address and name from email sign-up or Google sign-in (processed by Amazon Cognito and Google). We never receive your Google password.

Your content: profile details, posts, photos, videos, Clips, stories, comments, reactions, saves, follows, blocks, messages (including voice notes), Live comments and reports.

Usage: which posts you view and interact with, used to rank your feed and produce creator insights; device session information, IP address and error logs for security.

Approximate location (optional): only if you turn on “Use my city for local suggestions” — we save your city, state and country, never your exact location or coordinates.

Contacts (optional): only if you use Find friends. Phone numbers and emails are converted to one-way hashes on your phone; only the hashes are sent to find matching accounts. Details of people who are not on BlinkPals are never uploaded or stored.

Notifications: a push token from Firebase Cloud Messaging and your time zone, used to send the notifications you allow and respect quiet hours.

How we use it

To run BlinkPals: show your content to the audience you choose, deliver messages and notifications, recommend posts and people, provide insights, prevent abuse and keep the service secure.

Safety checks: uploaded photos and videos are automatically scanned by Amazon Rekognition for nudity, violence and other harmful content. Comments may be checked for toxicity by Amazon Comprehend, which may process text in AWS data centres outside India. Text is checked against lists of severe words.

Who can see your information

Public posts are visible to everyone on BlinkPals; private accounts are visible only to approved followers. Stories can be limited to Close Friends. Messages are visible to the people in the conversation. Messages are encrypted in transit and at rest but are not end-to-end encrypted.

We use service providers to run BlinkPals: Amazon Web Services (hosting, storage, Cognito, Rekognition, Comprehend, IVS for Live, SES for invitation emails) and Google Firebase (push notifications). We do not sell your personal data and do not show third-party ads.

Invitations

If you choose to invite a contact by email, we send one invitation in your name and keep only a one-way hash of that address to prevent repeat invites for 30 days and to honour unsubscribe requests permanently. WhatsApp and SMS invites are sent from your own phone.

Your choices and rights

You can edit your profile, change audiences, delete posts, comments and messages, turn off contact discovery, local suggestions and notification types, download your data, and delete your account in the app (You → Privacy and settings). See Delete your account.

Under India’s Digital Personal Data Protection Act, 2023 you may request access, correction or erasure of your data and nominate another person. Write to support@zenzop.com.

Retention

We keep your data while your account is active. When you delete your account, active profile, posts, comments and messages are deleted and media cleanup runs automatically. Disappearing messages are deleted after the time you choose. Backups are kept for up to 7 days and application logs for about 30 days.

Children

BlinkPals is only for people aged 18 and over. If you believe someone under 18 has an account, tell us at support@zenzop.com and we will remove it. See our Child Safety Standards.

Changes

We will tell you in the app about important changes to this policy.