Privacy Policy

1. Who is responsible for your data?

STITCHBYTE LLP operates Watch and is responsible for the personal information it processes, subject to the roles and responsibilities of third parties involved in providing the Service.

Operating entity: STITCHBYTE LLP
Website: https://watch.stitchbyte.in
Privacy contact: info@stitchbyte.in
Grievance contact: mayur.bhargava@stitchbyte.in

Registered office: 446, Inside Delhi Gate, Near Jain Dispensary, Alwar, Rajasthan, India.

2. Personal information we collect

The information we collect depends on the features you use, your account settings, and how you interact with Watch.

2.1. Account and profile information

We may collect:

• Email address and display name.
• Profile avatar and other profile information you choose to provide.
• Authentication credentials, including a password stored as a one-way cryptographic hash if password-based authentication is used.
• Account identifiers, preferences, and account status.
• Profile badges or subscription-related labels, such as Standard, VIP, or Creator Pass, where those features are offered.

We do not need to know your original password to authenticate you when properly implemented password-hashing methods are used.

2.2. Activity and social information

Depending on the features you use, we may process:

• Rooms you create, join, or leave.
• Chat messages and direct messages.
• Friends lists and friendship relationships.
• Watch-party plans, invitations, and RSVPs.
• Game results, participation records, and watch streaks.
• Online presence, room participation, and relevant interaction timestamps.
• Reports, complaints, and information you provide to customer support.

This information enables Watch to provide its social features, maintain room state, synchronize activity, and protect the Service.

2.3. Device, connection, and technical information

We may collect:

• IP addresses appearing in server logs.
• Browser type, operating system, device information, and relevant application version.
• Session identifiers and authentication-related information.
• Connection timestamps, error reports, diagnostic information, and security logs.
• Push notification tokens and notification preferences.
• Information needed to detect abuse, troubleshoot failures, and protect accounts.

The precise information collected depends on the deployed application, hosting infrastructure, and enabled features.

2.4. Voice, video, and screen-sharing information

When you use communication features, Watch may process information necessary to establish and maintain a connection, including connection metadata, session identifiers, network information, and technical diagnostics.

Voice, video, and screen-sharing media may be transmitted to other participants through the communication architecture used for the session.

Watch does not intentionally record voice calls, video calls, or shared-screen sessions as part of its ordinary operation.

This does not mean that all connection metadata or diagnostic information is absent. Nor can we prevent another participant from independently recording, photographing, or capturing information displayed or transmitted to them.

2.5. Subscription and transaction information

If you purchase Watch+, we may process:

• Your subscription plan and entitlement status.
• Billing period, currency, and transaction identifiers.
• Purchase, renewal, cancellation, and payment-status information.
• Records of successful charges, including date, amount, and currency.
• Information needed to reconcile purchases made through Google Play or our website.

Website payments may be processed by Razorpay or Stripe, where available. Eligible Android purchases may be processed through Google Play Billing.

We do not intentionally collect or store complete payment-card credentials, UPI PINs, or banking authentication secrets on our own systems. Payment providers and payment platforms may collect and process payment information under their own policies and applicable legal obligations.

2.6. Information you provide voluntarily

If you contact us, submit a report, request a data export, or make a complaint, we may process your email address, correspondence, supporting documents, and other information reasonably necessary to respond.

Please do not submit passwords, complete payment credentials, or unnecessary sensitive personal information through support channels.

3. How we use personal information

We use personal information for the following purposes:

Providing Watch

• Create and maintain accounts.
• Authenticate users and manage sessions.
• Operate rooms, chat, direct messages, invitations, plans, RSVPs, and games.
• Synchronize supported playback and communication features.
• Maintain friends lists, profile settings, and social features.

Subscriptions and payments

• Determine subscription eligibility.
• Activate, maintain, or cancel paid entitlements.
• Reconcile payments, renewals, refunds, and transaction status.
• Respond to billing disputes and maintain necessary transaction records.

Security and abuse prevention

• Detect suspicious activity, account compromise, spam, fraud, and technical attacks.
• Enforce our Terms of Service.
• Investigate complaints and protect users.
• Maintain appropriate security and diagnostic logs.

Support and communication

• Send account verification and password-reset messages.
• Respond to support requests.
• Communicate material service changes, security notices, and subscription-related information.

Maintenance and improvement

• Diagnose errors and performance issues.
• Improve reliability and compatibility.
• Understand feature usage where necessary to operate and improve the Service.

Legal compliance

• Respond to valid legal requests and binding orders.
• Meet applicable tax, accounting, data-protection, and other legal obligations.
• Establish, exercise, or defend legal claims where appropriate.

We do not sell personal information and do not display third-party advertising as part of the service model described in this Policy. If our practices change, we will update this Policy and provide any required notice or obtain any required consent.

4. Legal grounds for processing

We process personal information only where we have an applicable legal basis.

Depending on the processing activity and the law that applies, this may include:

• Providing a service you request and administering your account or subscription.
• Consent, where required and validly obtained.
• Compliance with applicable legal obligations.
• Legitimate operational purposes permitted by applicable law, such as security, fraud prevention, and protecting the Service.
• Establishing, exercising, or defending legal claims where permitted.

These descriptions do not create a blanket authorization to process all information for every purpose. We will limit processing to the purposes and legal grounds applicable to the relevant activity.

Where applicable law requires consent, we will provide the relevant notice and obtain consent through an appropriate mechanism. Where consent is the legal basis, we will provide a means to withdraw it as required by law.

5. What other users can see

Watch includes social features through which information may be visible to other users.

Depending on your settings and the feature used:

• Friends may see your display name, avatar, applicable badge, online status, and watch streaks or activity shared with them.
• Participants in a room may see your display name, avatar, messages, reactions, and other information you share there.
• Direct messages are intended to be visible to the sender and recipient within Watch, subject to the actual implementation and any lawful processing described in this Policy.
• Participants in a call may see or hear the voice, video, or screen content you choose to share.
• Public rooms, shared invitations, or publicly accessible plans may be visible to people beyond your immediate friends list, depending on their configuration.

Do not share information in a room or message that you are not comfortable disclosing to its intended recipients.

Private rooms and direct messages should not be treated as an absolute guarantee of confidentiality. Recipients may copy, screenshot, independently record, or disclose material they receive.

We do not promise end-to-end encryption or any other specific encryption architecture unless that protection has been implemented and verified.

6. When we share personal information

We do not sell personal information. We may disclose or make information available in the following circumstances.

6.1. Service providers

We may use third-party providers to operate Watch, including:

• Hosting and database providers.
• Authentication and email delivery providers.
• Browser push and notification services.
• Voice, video, or WebRTC infrastructure providers, where applicable.
• Razorpay, Stripe, Google Play, or other authorized payment providers.
• Security, diagnostic, and infrastructure-monitoring providers.

These providers receive only the information reasonably necessary for their relevant role, subject to the applicable arrangements, security measures, and legal requirements.

6.2. Legal requirements and protection

We may disclose information when required by a valid legal obligation, binding court order, or competent-authority direction, or when disclosure is otherwise permitted by law and reasonably necessary to protect users, investigate fraud, enforce our Terms, or defend legal claims.

We will assess requests according to applicable law and will not treat an informal request as automatically authorizing disclosure.

6.3. Business transfers

If Watch or a relevant part of its business is involved in a merger, restructuring, acquisition, or transfer, personal information may be transferred as part of that transaction, subject to applicable law, appropriate safeguards, and any required notice or consent.

6.4. No unrelated disclosure

We do not authorize service providers to use personal information received from us for unrelated purposes merely because they provide services to Watch. Any additional processing must have an appropriate legal basis and be consistent with applicable law and the relevant arrangements.

7. Cookies, local storage, and notifications

Watch may use cookies, browser storage, and similar technologies to:

• Keep you signed in.
• Maintain authentication sessions.
• Remember settings such as theme and interface preferences.
• Maintain necessary security controls.
• Support the technical operation of the application.

We do not use advertising cookies under the service model described in this Policy.

Browser push notifications may require permission from your browser or operating system. You can disable notifications through the applicable browser or device settings. Disabling notifications may prevent you from receiving certain alerts but does not necessarily delete your Watch account.

Where applicable law requires consent for a particular cookie or tracking technology, we will obtain that consent before using it.

8. International data transfers

Some service providers may process or store personal information outside your country of residence.

The countries involved depend on the infrastructure and providers actually used by Watch.

Where applicable law imposes restrictions or safeguards on international transfers, we will comply with those requirements. We will not represent that a particular country, storage location, or transfer mechanism is used unless that has been verified.

For additional information about the relevant providers and processing locations, you may contact us using the details in Section 15, subject to security and confidentiality considerations.

9. Data retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal obligations.

Different categories may have different retention periods.

• Account and profile information: generally retained while your account remains active and until deletion is completed, subject to lawful exceptions.
• Social and user-generated content: retained as necessary to provide the relevant features, subject to deletion requests, other users’ legitimate access to shared content, and applicable legal obligations.
• Security and diagnostic logs: retained for a proportionate period necessary for security, troubleshooting, fraud prevention, and legal compliance.
• Subscription and transaction records: retained as necessary for billing, accounting, tax obligations, refunds, disputes, and applicable record-retention requirements.
• Support and complaint records: retained as necessary to respond to requests, document outcomes, and meet legal obligations.

When you request account deletion, we will initiate the applicable deletion process and delete or anonymize personal information that we are no longer entitled or required to retain.

Some records may need to be retained for a limited period to comply with law, resolve disputes, prevent fraud, or maintain necessary security records. Where information is retained for such reasons, it will remain subject to appropriate access restrictions and retention limits.

Backups may retain deleted information until it is overwritten or expires under the applicable backup cycle, subject to applicable law and the technical design of our systems.

We will not use backup retention as a substitute for implementing a genuine account-deletion process.

10. Your privacy rights and choices

Depending on applicable law, you may have rights to:

• Request access to personal information relating to you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information, subject to lawful retention requirements.
• Withdraw consent where consent is the applicable legal basis.
• Raise a grievance or complaint.
• Exercise additional rights available under the law applicable to you.

You can also edit profile information through the application, disable browser notifications, and cancel a subscription through the relevant purchase channel.

How to make a request

Email info@stitchbyte.in from your account email address where possible. Identify the request you wish to make and provide enough information for us to locate the relevant account.

We may request proportionate verification where necessary to prevent unauthorized disclosure or deletion.

We will respond within the time limits required by applicable law. We aim to respond to ordinary privacy requests within 30 days, but this target does not replace a shorter statutory deadline or extend a deadline imposed by law.

If we cannot fulfill a request in full, we will explain the reason where legally required and identify any available complaint or review mechanism.

11. Children’s privacy

Watch has a minimum user age of 13, subject to higher requirements imposed by applicable law or platform rules.

We do not knowingly permit children below the applicable minimum age to use the Service.

Under India’s Digital Personal Data Protection Act, the definition of a child includes a person under 18 years of age. The Act’s provisions relating to children’s personal data and associated obligations have a phased commencement framework.

Accordingly, our 13+ product policy does not override applicable children’s-data requirements. We will implement the parental-consent, age-assurance, and other safeguards required by law when applicable.

If you believe a child has created an account in violation of our eligibility requirements, contact us at info@stitchbyte.in. We will assess the report and take appropriate action, including restricting or deleting the account where required.

Where applicable law permits or requires retention of limited information for a legitimate legal or security purpose, we will handle that information accordingly.

12. Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, disclosure, or misuse.

Depending on the implementation, these measures may include:

• Encryption in transit.
• Secure password hashing.
• Access controls and restricted administrative permissions.
• Authentication and session protections.
• Security monitoring and diagnostic logs.
• Backups and recovery procedures.
• Vendor and infrastructure security controls.

No internet-connected service can guarantee absolute security. We therefore cannot promise that every attack, vulnerability, or unauthorized disclosure will be prevented.

If a personal-data breach occurs, we will assess it and take the notification, mitigation, and other actions required by applicable law.

Please notify us promptly if you suspect unauthorized access to your account.

13. Changes to this Policy

We may update this Policy to reflect changes in Watch, our service providers, data-processing practices, security controls, or applicable law.

We will publish the updated Policy with a revised effective date.

Where a change materially affects your rights or the purposes for which personal information is processed, we will provide notice and obtain fresh consent where required by law.

We will not treat continued use as a substitute for consent where applicable law requires affirmative consent.

14. Complaints and grievances

If you have a question, privacy concern, or complaint about Watch’s handling of personal information, contact us using the details below.

Privacy and support contact: info@stitchbyte.in
Grievance Officer: Mayur Bhargava
Grievance email: mayur.bhargava@stitchbyte.in
Address: 446, Inside Delhi Gate, Near Jain Dispensary, Alwar, Rajasthan, India.

If applicable law requires a particular officer, role, complaint mechanism, or response timeline, we will follow that requirement.

We will acknowledge and handle grievances within the applicable legal time limits. Where a statutory mechanism allows escalation to a competent authority, nothing in this Policy limits your right to use it.

15. Contact us

For questions about this Privacy Policy, requests concerning your personal information, or concerns about our data practices:

STITCHBYTE LLP
Product: Watch
Website: https://watch.stitchbyte.in
Email: info@stitchbyte.in
Grievance Officer: Mayur Bhargava
Grievance email: mayur.bhargava@stitchbyte.in
Address: 446, Inside Delhi Gate, Near Jain Dispensary, Alwar, Rajasthan, India.

This Policy is governed by the laws of India, subject to any mandatory privacy or consumer-protection laws that apply to you.