Legal & Privacy

Effective Date: June 2026 EnzoChat ("we," "our," or "us") is committed to protecting your privacy with the strictest standards. This Privacy Policy outlines our data processing practices in alignment with the Digital Personal Data Protection Act (DPDPA), 2023 of India. 1. Information We Collect We believe in radical data minimization. We only collect what is strictly necessary to operate: • Account Information: Email address, username, display name. • Authentication Data: Hashed passwords (never plaintext) or OAuth tokens. • Profile Data: Avatar images you voluntarily upload. • Connection Metadata: Friend connections and chat request data for routing. • Technical Data: Device OS and app version (for compatibility and bug fixes). 2. What We Absolutely Do NOT Collect • Plaintext message contents — all chats, groups, and stories are end-to-end encrypted. • Your media elements, voice notes, or call streams. • Background location data of any kind. • Keystroke logs, clipboard contents, or screen captures. • Vault contents — these are encrypted client-side and only accessible to you. • Any biometric data. 3. End-To-End Encryption (E2EE) All messages, group chats, and stories are secured using AES-256-GCM End-To-End Encryption. We operate a "Server-Blind" architecture — meaning we physically cannot read or decrypt your private communications. 4. Data Fiduciary & User Rights (DPDPA 2023) EnzoChat acts as the Data Fiduciary for your account details. Under DPDPA 2023, you have the following rights: • Right to Access: Request a summary of personal data processed. • Right to Correction & Erasure: Correct inaccurate data or request deletion. • Right to Grievance Redressal: Reach out to our Grievance Officer. • Right to Nominate: Appoint another person to exercise rights in case of death or incapacity. Consent is voluntary and can be withdrawn at any time in app Settings. 5. Data Retention & Deletion Your data is retained only while your account is active. Upon deletion, your profile, connections, and metadata will be permanently removed from our active servers within 30 days. Questions? Contact us: enzochat4408@gmail.com

Effective Date: June 2026 By downloading, accessing, or using EnzoChat, you agree to be legally bound by these Terms & Conditions. If you do not agree, please do not use our services. 1. Eligibility & Account Security • You must be at least 13 years old to use EnzoChat. • You are solely responsible for maintaining the confidentiality of your account and encryption keys. • Accounts registered with false identities or for malicious impersonation are subject to immediate termination. 2. Acceptable Use & Zero-Tolerance Protocol (IT Rules 2021) EnzoChat maintains a strict zero-tolerance policy against abuse. In compliance with Rule 3(1)(b) of India's IT Rules 2021, you agree NOT to host, display, upload, modify, publish, transmit, or share any information that: • Threatens the unity, integrity, defense, security or sovereignty of India, friendly relations with foreign states, or public order. • Contains explicit, obscene, pedophilic, defamatory, libellous, or racially/ethnically objectionable material. • Infringes any patent, trademark, copyright, or other proprietary rights. • Impersonates another person, spreads severe misinformation, or coordinates fraud/scams. • Distributes malware, viruses, or attempts to hack EnzoChat infrastructure. Any violation will result in immediate account termination. 3. Account Suspension & Banning We exercise the absolute right to suspend or permanently BAN accounts that violate these terms. Administration bans are final. A ban will immediately wipe the user's local application cache to preserve system integrity. 4. Governing Law & Jurisdiction These Terms shall be governed by and construed in accordance with the laws of the Republic of India, including the Information Technology Act, 2000. Any disputes arising out of these terms shall be subject to the exclusive jurisdiction of the courts of Ahmedabad, Gujarat, India.

Last Updated: June 2026 In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDPA 2023, EnzoChat has appointed a dedicated Grievance Officer in India. 1. Grievance Officer Contact Details • Designation: Grievance Officer • Email: enzochat4408@gmail.com • Country: India • SLA Acknowledgment: Within 24 hours • SLA Resolution: Within 15 days 2. Reporting and Complaints Users or victims can report complaints regarding account actions, harassment, impersonation, copyright violation, child safety/CSAM, or privacy concerns. To file an official complaint, please email the Grievance Officer directly or use our interactive Grievance Draft Tool at /grievance-officer. 3. CSAM & Sexual Content Removal SLA If a complaint is received regarding content depicting sexual violence, CSAM, or non-consensual sexual materials, EnzoChat will review and take appropriate action to disable access or remove public links within 24 hours of receipt.

Effective Date: June 2026 EnzoChat is built around a secure End-to-End Encrypted (E2EE) messaging protocol. 1. Encryption Guarantee All user-to-user messages, group chats, voice notes, and media files are encrypted client-side using AES-256-GCM. We operate a "Server-Blind" architecture. We do not store or have access to decryption keys, and we cannot read or decrypt your private communications. 2. Law Enforcement Requests We cooperate with valid law enforcement agencies in compliance with applicable laws of India (e.g. requests under Section 91 CrPC/BNSS or Section 69 IT Act). • Message Contents: Because of E2EE, we cannot provide plaintext message contents, media, or decryption keys under any circumstances. • Metadata: We will only provide limited account metadata (registration date, email address, username, display name) if presented with a valid, official warrant or legal order. All official legal requests must be sent to enzochat4408@gmail.com.