1. Information We Collect

• Account Information: When you create a KhaYin account, we collect your email address and any display name you provide. We do not collect payment information as KhaYin is free.
• Meeting Data: Metadata about meetings you host or attend (e.g., meeting duration, participant count, timestamps). If you opt in to cloud recordings, media streams for that meeting are processed and stored in encrypted cloud storage.
• Device & Usage Data: Browser type, operating system, IP address, and general interaction telemetry (e.g., which features you use). This helps us improve reliability and diagnose issues.
• Passkey Credentials: If you register a passkey, the credential is stored on your device and a public-key reference is stored in our database. We never have access to your private key.

2. How We Use Your Information

• Provide, operate, and improve the KhaYin service.
• Authenticate you securely via passkey or email/password.
• Store and serve cloud recordings you explicitly create.
• Send transactional emails such as email-confirmation and password-reset messages.
• Monitor service health and investigate security incidents.
• Comply with legal obligations.

3. Data Sharing & Third Parties

• Infrastructure & Security: We use industry-standard cloud infrastructure and authentication providers to process your data only as necessary to deliver KhaYin's features.
• No Advertising: We do not sell, rent, or share your personal data with advertising networks or data brokers.
• Legal Requirements: We may disclose data if required by law, court order, or to protect the rights and safety of KhaYin and its users.

4. Cloud Recordings

• Recordings are stored in encrypted cloud storage and are only accessible to the meeting host.
• Recordings are not shared with other participants unless the host explicitly shares the link.
• You can delete your recordings from the Dashboard at any time, which permanently removes them from our storage.

5. Data Retention

• Account data is retained for as long as your account is active.
• Recordings are retained until you delete them or close your account.
• Usage logs are retained for up to 90 days for security and debugging purposes.
• Upon account deletion, we delete your personal data within 30 days, except where retention is required by law.

6. Security

• All media streams are encrypted using DTLS-SRTP.
• Data in transit is protected by TLS 1.3.
• Passkeys replace passwords and are resistant to phishing attacks.
• Access to production systems is restricted to authorized personnel only.

7. Your Rights

• Access: You may request a copy of personal data we hold about you.
• Correction: You may update your profile information from the Dashboard.
• Deletion: You may delete your account at any time, which triggers removal of your data.
• Portability: You may request an export of your data in a machine-readable format.
• To exercise any of these rights, contact us at privacy@khayincall.com.

8. Cookies & Local Storage

• We use browser localStorage and sessionStorage to maintain your authentication session and preferences.
• We do not use third-party tracking cookies or advertising cookies.
• Essential session cookies may be set by our authentication provider to keep you logged in.

9. Children's Privacy

• KhaYin is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

• We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users or via a prominent notice in the app. Continued use of KhaYin after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

• For privacy-related inquiries, please email privacy@khayincall.com. We aim to respond within 5 business days.