Privacy Policy

Welcome to Winter (hereinafter referred to as "Winter", "we", "us", or "our"), provided via the Android mobile application distributed under package identifier com.app.screentime.

This Privacy Policy explains how your information is collected, used, shared, and safeguarded when you access or use the Winter application, our real-time messaging, WebRTC calling, and interactive social discovery services. By installing or utilizing Winter, you consent to the practices described herein.

1. Age Requirement (Strict 18+ Only)

Winter is strictly reserved for adults aged 18 years or older. We do not knowingly collect, maintain, or solicit personal information from individuals under the age of 18. If we discover or are notified that an underage user has created an account, we will permanently terminate that account and purge all associated records immediately.

2. Information We Collect

We collect information to facilitate genuine interpersonal chemistry and protect community safety:

A. Information You Provide to Us

• Profile Information: Display name, age/birthdate, gender, dating intent, profile bio, and photos you choose to upload.
• Chat Messages & Media: Text communications, emoji reactions, and in-chat media transmitted between matched users.
• Support & Feedback: Content you submit when contacting support, filing reports, or answering feedback surveys.

B. Information Automatically Collected

• Device & Network Data: Android OS version, device model, language settings, and temporary IP addresses used for establishing peer-to-peer WebRTC STUN/TURN connection candidates.
• Usage Analytics: Timestamps of logins, feature interactions, match responses, and call session durations (metadata only, not audio/video contents).
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens utilized exclusively to notify you of incoming calls, matches, and chats.

3. WebRTC Audio & Video Calling Privacy

Winter enables users to connect through live 1-on-1 video and voice conversations using standard WebRTC peer-to-peer protocols:

• All media packets are transmitted in real time over encrypted DTLS-SRTP protocols directly between the two callers whenever network topology allows.
• Our relay servers (TURN) merely route encrypted packets when firewalls prevent direct peer connection; servers do not decrypt, record, store, or monitor your live audio or video streams.
• Incoming video calls display only your chosen public profile name and photo. Your phone number, email address, and exact GPS coordinates are completely shielded.

4. Biometric Authentication & Device Security

Winter provides an in-app Biometric Security Lock leveraging the official Google Android BiometricPrompt API:

• Biometric scanning (fingerprint or face verification) is executed entirely within your device's isolated hardware security module (Trusted Execution Environment / Titan Security Chip).
• Winter has zero access to your raw fingerprint or facial scan data. The Android operating system solely returns an authenticated success/failure token to unlock the UI.

5. How We Use Your Information

We process collected data for the following legitimate purposes:

• To administer your account, profile display, and discoverability preferences.
• To enable matchmaking, chat conversations, and 1-on-1 call connections.
• To maintain in-app coin balances, talk-time credits, and purchase verification.
• To detect, investigate, and prevent fraudulent activity, spam, harassment, and policy violations.
• To comply with statutory legal requirements and enforce our Terms of Service.

6. Information Sharing & Third Parties

We do not sell, rent, or trade your personal data to third-party advertisers or data brokers. Information is shared strictly under the following limited circumstances:

• With Matched Users: Information on your public profile (display name, photos, bio, interests, age) is viewable by other users in accordance with discovery settings.
• Infrastructure Service Providers: Trusted cloud partners (such as Google Firebase for push notifications and hosting, WebRTC TURN relay infrastructure) operating under strict data processing agreements.
• Payment Processors: Official Google Play Billing or authorized UPI payment gateways for coin recharge transactions. Financial information (credit card numbers, UPI PINs) is processed directly by the gateways and never handled by Winter.
• Legal Compliance: When required by enforceable court order, subpoena, or applicable law to protect human safety or defend legal claims.

7. Data Retention & Your Account Deletion Rights

We respect your sovereignty over your personal data:

• Account Deletion: You can delete your account at any time directly through the Winter application under Settings > Account > Delete Account, or by submitting an email to our support desk.
• Upon account deletion, your public profile is immediately removed from search and discovery. Associated private messages and profile data are purged from active databases within 30 days, except where retention is legally required for compliance or fraud prevention.

8. Data Security Safeguards

We employ industry-standard administrative, physical, and technical safeguards designed to protect personal information against unauthorized disclosure, interception, or destruction. This includes TLS 1.3 encryption across all network APIs, authenticated WebSockets, encrypted databases, and optional anti-screenshot safeguards.

9. Grievance Officer & Contact Information

If you have questions, feedback, or grievance requests concerning this Privacy Policy or your personal data, please contact our privacy compliance team: