app privacy
app privacy policy
Last updated: 25 August 2026. This policy covers the Hey! Creators mobile app on iOS and Android.
For the marketing website (heycreators.ai), see our website privacy policy.
Who we are
The Hey! Creators app is operated by Krisattva Private Limited (CIN: U72900TG2021PTC147960), T-Hub, Knowledge City, Hyderabad, Telangana — 500081, India. References to "we", "us" or "the company" mean Krisattva Private Limited.
Information we collect
| Category | Data | How collected |
|---|---|---|
| Account data | Name, email address, phone number, company name | You provide at registration |
| Social accounts | YouTube channel identity and public metrics when you connect your account; Instagram handle and public engagement data | You connect via OAuth or by entering your handle |
| Financial data | UPI ID for payouts, PAN for GST invoicing, bank details if provided, payout transaction records | You provide when setting up payouts |
| Campaign data | Brand collaboration details, deliverables, approval status, payout amounts | Generated through platform use |
| Content data | Media kit information, storefront product selections, Auto-DM templates | You create within the app |
| Usage data | Features used, screens visited, actions taken, session duration | Collected automatically |
| Device data | IP address, device model, OS version, app version, device identifiers | Collected automatically |
How we use your information
| Purpose | Legal basis |
|---|---|
| Operating the app and processing payouts | Performance of our contract with you |
| Generating your media kit and analytics | Performance of our contract with you |
| Matching you with brand campaigns | Performance of our contract with you |
| Processing Auto-DM messages on your behalf | Performance of our contract with you |
| Generating GST invoices | Performance of our contract with you |
| Security, fraud prevention and abuse detection | Legitimate interest in protecting the service |
| Product improvement and bug fixing | Legitimate interest, using aggregated data where possible |
| Marketing communications | Your consent, withdrawable at any time |
We do not sell personal data. We do not share it with third parties for their own marketing purposes.
Third-party services in the app
The app uses the following third-party services that may collect data independently:
- Firebase — authentication, crash reporting and push notifications
- AppsFlyer — install attribution and deep linking
- Google Analytics for Firebase — usage analytics
- Meta SDK — ad attribution and app events
Each service operates under its own privacy policy. We configure them to collect the minimum data needed for their function.
Auto-DM and Instagram messaging
The Auto-DM feature sends Instagram direct messages on your behalf through the approved Instagram Messaging API. It operates within Meta's 24-hour messaging window and requires the instagram_manage_messages permission, which you grant during setup.
We access comment content and send DMs only as you configure. We do not read or store the content of your personal Instagram messages.
Google API data
Where you connect your YouTube account, we request read-only access to your channel analytics and subscriber data. We comply with the Google API Services User Data Policy, including its Limited Use requirements. This data is used only to generate your media kit and analytics. We do not share it with third parties or use it for advertising.
To revoke YouTube access, disconnect your channel in the app settings or email hello@heycreators.ai.
Storage and security
Our infrastructure is hosted in India. Personal data is stored there by default. Data may be transferred outside India only where necessary to deliver a feature you have chosen to use — for example, connecting to YouTube or Instagram APIs.
Security measures include encryption in transit (TLS), hashed passwords (bcrypt), scoped access credentials, rate limiting, and role-based access controls.
If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of it.
How long we keep your data
| Data type | Retention |
|---|---|
| Account data | For as long as your account is active |
| Data after deletion request | Deleted within 7 days |
| Payout and GST invoice records | As required by Indian tax and accounting law (typically 8 years) |
| Usage and analytics data | 12 months, then aggregated or deleted |
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- Access the personal data we hold about you
- Correct anything inaccurate or incomplete
- Request deletion of your data, subject to legal retention requirements
- Withdraw consent for marketing at any time
- Nominate another person to exercise these rights on your behalf
To make a request, email hello@heycreators.ai. We respond within 7 days.
To delete your account and all associated data, visit our account deletion page.
Children
Hey! Creators is intended for people aged 18 and over. We do not knowingly allow anyone under 18 to create an account, and we do not knowingly collect personal information from children. If you believe we hold information about someone under 18, contact us at hello@heycreators.ai and we will remove it promptly.
Grievance officer
Aravindha Bollineni, Chief Technology Officer
Krisattva Private Limited
grievance@heycreators.ai
If your concern remains unresolved, you may complain to the Data Protection Board of India.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top and notify you through the app or by email.
Krisattva Private Limited
T-Hub, Knowledge City, Hyderabad, Telangana — 500081, India
hello@heycreators.ai