What they may do · DPDP §6(4)
What Chalo does with your data
Chalo's policy permits collecting biometric, Aadhaar, PAN and medical data, serving interest-based ads on third-party sites, logging pages you visit before and after the app, sharing with business partners and affiliates, and keeping data for open-ended periods.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
Chalo’s own policy says “We may share your information including Personal Data with our business partners, and affiliates for our and our affiliates’ internal business purposes or to provide you with a service on the App that you have requested.”
Our summary personal data may be shared with business partners and affiliates for Chalo's and its affiliates' internal business purposes, and separately with vendors and service providers, with State instrumentalities for subsidy or benefit eligibility, and to a transferee on merger or sale of assets.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
Chalo’s own policy says “We may use first-party or third-party cookies and web beacons to deliver Chalo Content, including ads relevant to your interests, on our App or on third-party sites.”
Our summary first-party and third-party cookies and web beacons are used to deliver ads relevant to the user's interests, both inside the app and on third-party sites.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
Chalo’s own policy says “We may collect certain information automatically through our App or other methods of web analysis, such as your Internet protocol (IP) address, cookie identifiers, mobile carrier, mobile advertising identifiers, MAC address, IMEI, Advertiser ID or other device identifiers that are automatically assigned to your computer or device when you access the internet, browser type and language, geo-location information, hardware type, operating system, internet service provider, pages that you visit before and after using the App, the date and time of your visit, the amount of time you spend on each page, information about the links you click and pages you view within the App, and other actions taken through use of the App such as preferences.”
Our summary automatic collection expressly includes mobile advertising identifiers, MAC address, IMEI and the pages the user visits before and after using the app; the policy separately states that interest-based ads are delivered on third-party sites and that its technologies recognise the user across devices.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
Chalo’s own policy says “We retain the Personal Data we receive as described in this Privacy Policy for as long as you use our App or as necessary to fulfil the purpose(s) for which it was collected, resolve disputes, establish legal defences, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws, whichever is longer.”
Our summary retention runs for as long as the app is used or as long as needed for disputes, legal defences, audits, agreements and open-ended 'legitimate business purposes', whichever period is longer.
-
Processes your face or other biometrics
Face matching, liveness checks or similar.
What this costs you. You can change a leaked password in a minute. You cannot change your face. A biometric breach is permanent in a way nothing else is.
Show me where they say that
Chalo’s own policy says “The Personal Data we collect may include your gender details, passwords, medical history, financial data (including PAN and Aadhar details), biometric information, etc.”
Our summary the personal data collected may include biometric information, listed alongside medical history and PAN and Aadhaar details.
What the policy does not mention
These are uses Chalo’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Trains AI models on your content
Chalo is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does Chalo do with my personal data?
According to Chalo's own privacy policy, read on 2026-08-14, it discloses 5 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps, keeps your records long-term, processes your face or other biometrics.
Can I withdraw my consent from Chalo?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does Chalo track me for advertising?
Yes — Chalo's published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one Chalo declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy