Last Updated: June 12, 2026
Effective Date: June 12, 2026
This Privacy Policy explains how BRIGHT UNION PTE. LTD. ("CHACHA", "we", "us", or "our") collects, uses, stores, shares, transfers, and otherwise processes personal information when you access or use the CHACHA mobile application, website, games, voice rooms, and related services (collectively, the "Service"). We are committed to protecting your privacy and handling your personal information in a transparent and secure manner. By using the Service, you acknowledge that you have read and understood this Privacy Policy.
CHACHA is operated by BRIGHT UNION PTE. LTD., Registered Address: 120 ROBINSON ROAD #13-01 SINGAPORE 068913; Contact Email: contact@nextlv.net. For privacy-related inquiries, requests, complaints, or data subject rights requests, please contact us using the details above.
We collect information that you provide directly, information collected automatically through your use of the Service, and information received from third parties.
Account Information
When you register an account, we may collect: nickname; profile photo; user ID; login credentials; email address; mobile phone number (if applicable); authentication information; account recovery information.
Profile Information
You may voluntarily provide: profile biography; gender; language preferences; country or region; interests; room information; gaming preferences.
User Content
We may collect content that you voluntarily submit through the Service, including: text messages; room descriptions; game-related content; support requests; reports and appeals; profile content.
Device Information
We may collect: device model; operating system; device identifiers; advertising identifiers; application version; language settings; network information. To support account security and multi-device access, we may assign a unique user identifier and device identifier.
Usage Information
We may collect: login time; logout time; feature usage; room participation history; gameplay activity; interaction history; crash reports; diagnostic logs.
Voice Room Metadata
For operation of voice rooms, we may process: room creation records; room participation records; room duration; room activity logs.
IMPORTANT:
CHACHA DOES NOT RECORD OR PERMANENTLY STORE REAL-TIME VOICE COMMUNICATIONS UNLESS REQUIRED FOR LEGAL COMPLIANCE, SAFETY INVESTIGATIONS, OR AS OTHERWISE DISCLOSED TO USERS.
Location Information
With your permission, we may collect approximate or precise location information to: improve user matching; display nearby users; enhance localized experiences; support fraud prevention. You may withdraw location permissions at any time through your device settings.
Microphone Access
With your permission, we access microphone functionality solely to enable: voice communications; voice rooms; voice interactions. If microphone access is denied, voice-related features may be unavailable.
Third-Party Login Services
You may register or log in using third-party authentication providers such as: Apple; Google; Facebook; other supported providers. Depending on your settings with the third-party provider, we may receive: account identifiers; email addresses; profile information; authentication tokens.
Advertising and Analytics Partners
Our advertising, analytics, attribution, and measurement partners may provide information relating to: advertising interactions; campaign performance; device identifiers; conversion events. Such information helps us understand service usage and improve product performance.
Other Sources
Subject to applicable law, we may receive information from: affiliates; service providers; public databases; fraud-prevention partners; business partners; regulatory authorities.
Unless expressly disclosed otherwise:
• We do not permanently record users' real-time voice conversations;
• We do not access your contacts without permission;
• We do not access SMS messages without permission;
• We do not access files stored on your device except those you voluntarily upload;
• We do not monitor your use of other applications;
• We do not collect payment passwords, banking PINs, SMS verification codes, or full payment card details.
Depending on your jurisdiction, we process personal information based on one or more of the following legal grounds:
We process personal information when necessary to provide the Service, including: account registration and management; voice room functionality; game features; virtual item transactions; customer support; account security.
We may process personal information where necessary for our legitimate interests, including: maintaining platform security; fraud prevention; improving products and services; analyzing service performance; enforcing our Terms of Service; protecting users and third parties. When relying on legitimate interests, we balance our interests against your privacy rights.
Where required by law, we process information based on your consent, including: location permissions; microphone permissions; marketing communications; optional features; certain cookies and tracking technologies. You may withdraw consent at any time. Withdrawal will not affect processing conducted before consent was withdrawn.
We may process personal information when necessary to comply with: legal obligations; court orders; governmental requests; regulatory requirements; law enforcement investigations.
In limited circumstances, we may process information to protect: personal safety; life or health; public security; prevention of serious harm.
We use personal information for the following purposes:
Account Administration
To create accounts; authenticate users; verify identities; manage account security; recover accounts.
Service Delivery
To operate and provide: voice rooms; real-time communications; gaming features; social interactions; virtual gifts; memberships; in-app events.
Personalization
To: recommend rooms; suggest users; customize content; improve user experience; optimize matching systems.
Security and Trust
To detect fraud; identify suspicious activity; prevent abuse; enforce platform rules; investigate misconduct.
Product Improvement
To analyze usage patterns; diagnose technical issues; improve functionality; develop new features; conduct testing and research.
Customer Support
To respond to inquiries; resolve complaints; process appeals; provide technical assistance.
Communications
To send service notifications; account alerts; security notices; updates to policies; event reminders.
Where required by law, marketing communications will only be sent with appropriate consent.
Legal Compliance
To satisfy legal obligations; maintain records; cooperate with authorities; exercise legal rights; defend against claims.
We do not sell your personal information. We may share information only in the circumstances described below.
We may share information with trusted vendors that assist us in providing the Service, including: cloud hosting providers; content moderation providers; fraud prevention vendors; customer support providers; analytics providers; payment processors. These providers may process information only on our instructions and subject to confidentiality obligations.
We may share information with our affiliates, subsidiaries, and related companies for purposes consistent with this Privacy Policy.
Information that you choose to make public may be visible to other users, including: nickname; profile photo; public room participation; public posts; public rankings. Please carefully consider what information you choose to disclose publicly.
We may disclose information where necessary to: comply with applicable laws; respond to legal requests; comply with court orders; protect rights and safety; investigate unlawful conduct.
In connection with: mergers; acquisitions; restructurings; financing transactions; asset sales; bankruptcy proceedings, personal information may be transferred as part of the transaction. Where required by law, users will be notified of material changes.
CHACHA operates globally. Your personal information may be processed, accessed, stored, or transferred in countries other than your country of residence. These countries may have different data protection laws. Where required by applicable law, we implement appropriate safeguards, including: contractual protections; intra-group agreements; security controls; transfer mechanisms recognized under applicable law. By using the Service, you acknowledge that information may be transferred internationally as described in this Privacy Policy.
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy. Retention periods may depend on: account status; legal requirements; security needs; dispute resolution requirements; fraud prevention obligations. Examples include: (i) Account Information: Retained while the account remains active and for a reasonable period thereafter. (ii) Transaction Records: Retained as required by applicable tax, accounting, and financial regulations. (iii) Security Logs: Retained as necessary for fraud prevention and platform security. (iv) Support Records: Retained to resolve disputes and improve customer service. When information is no longer required, we will delete, anonymize, or securely dispose of it in accordance with applicable law.
Depending on your jurisdiction and applicable law, you may have one or more of the following rights regarding your personal information.
You may request information regarding: categories of personal information collected; purposes of collection; categories of recipients; retention periods; sources of information.
You may request access to personal information that we hold about you.
You may request correction of inaccurate, incomplete, or outdated personal information.
You may request deletion of personal information, subject to applicable legal exceptions. Certain information may be retained where necessary to: comply with legal obligations; prevent fraud; enforce agreements; resolve disputes; protect rights and safety.
Where processing is based on consent, you may withdraw consent at any time. Withdrawal of consent does not affect processing that occurred prior to withdrawal.
Where permitted by law, you may request restriction of certain processing activities.
You may object to processing based on legitimate interests under applicable law.
Where applicable, you may request a copy of your information in a structured, commonly used, and machine-readable format.
You may submit complaints directly to us or, where applicable, to your local data protection authority.
If you are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, you may have additional rights under applicable privacy laws.
Subject to applicable legal limitations, you may: request access to your personal information; request correction of inaccurate information; request deletion of information; request restriction of processing; object to processing; request portability of your information; withdraw consent where applicable.
If you believe our processing violates applicable law, you may lodge a complaint with the relevant supervisory authority.
If you are a California resident, you may have rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA").
Subject to applicable limitations, California residents may request: access to personal information; deletion of personal information; correction of personal information; information about categories of information collected; information about categories of disclosures.
CHACHA does not sell personal information as the term "sell" is defined under the CCPA. CHACHA does not knowingly sell or share personal information of individuals under sixteen (16) years of age.
We maintain administrative, technical, organizational, and physical safeguards designed to protect personal information.
Security measures may include: encryption; access controls; security monitoring; audit logging; vulnerability management; employee confidentiality obligations; incident response procedures.
However, no security system can guarantee absolute protection. You are responsible for maintaining the confidentiality of your account credentials.
CHACHA is intended solely for individuals who are at least eighteen (18) years of age or the legal age of majority in their jurisdiction.
We do not knowingly collect personal information from children.
If we become aware that personal information has been collected from an individual who does not meet the minimum age requirement, we may: suspend the account; delete associated content; remove personal information; take other appropriate action.
Parents, guardians, or legal representatives who believe a child has provided personal information may contact us for assistance.
Our mobile applications generally do not use traditional browser cookies. However, we may use technologies that perform similar functions, including: device identifiers; software development kits (SDKs); local storage; analytics technologies; security technologies.
Where CHACHA websites are provided, we may use: essential cookies; security cookies; authentication cookies; performance cookies; analytics cookies. These technologies help: maintain login sessions; improve functionality; analyze usage patterns; enhance security. You may manage cookie preferences through your browser settings. Certain functionality may not operate properly if cookies are disabled.
To improve safety, trust, security, and user experience, CHACHA may use automated technologies, including: machine learning models; artificial intelligence systems; automated moderation tools; fraud detection systems; recommendation systems. These systems may assist with: content classification; spam detection; abuse prevention; account security; room recommendations; gameplay recommendations. Human review may also be involved in moderation and enforcement decisions. Where required by applicable law, users may request additional information regarding certain automated processing activities.
We maintain procedures designed to identify, investigate, contain, and respond to security incidents. In the event of a personal information breach, we may: investigate the incident; mitigate potential harm; notify affected users; notify regulators; cooperate with authorities, where required by applicable law.
The Service may contain links to third-party websites, applications, payment providers, advertising networks, and services. These third parties operate independently from CHACHA. We are not responsible for: third-party privacy practices; third-party security practices; third-party content; third-party data handling activities. We encourage you to review the privacy policies of all third-party services you use.
We may modify this Privacy Policy from time to time to reflect: changes in law; regulatory requirements; technological developments; operational changes; new features and services. Material changes may be communicated through: in-app notices; website notices; email notifications; other reasonable means.
The "Last Updated" date above indicates the effective date of the most recent revision.
Your continued use of the Service following the effective date of an updated Privacy Policy constitutes acknowledgment of the revised Privacy Policy.
If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our processing of personal information, please contact:
BRIGHT UNION PTE. LTD.
Email: contact@nextlv.net
Customer Support: Available through the CHACHA application
We will use commercially reasonable efforts to respond to privacy requests within the timeframe required by applicable law.
Where local laws provide greater privacy protections than those described in this Privacy Policy, such local laws shall prevail to the extent required.
Nothing in this Privacy Policy shall limit any rights that users may have under mandatory provisions of applicable privacy or consumer protection laws.
THIRD-PARTY SERVICES, SDKS AND DATA PROCESSING DISCLOSURE
Last Updated: June 12, 2026
This Appendix forms part of the CHACHA Privacy Policy and explains the third-party services, software development kits ("SDKs"), cloud services, analytics tools, payment processors, security vendors, and other service providers that may process information in connection with the CHACHA Service.
CHACHA may update this Appendix from time to time to reflect changes in vendors, service providers, technical architecture, or regulatory requirements.
To provide, operate, improve, secure, and monetize the Service, CHACHA may engage third-party providers for: account authentication; cloud hosting; voice communications; analytics; crash reporting; payment processing; fraud prevention; advertising measurement; content moderation; customer support; security monitoring.
These providers are contractually required to protect information in accordance with applicable laws and our instructions.
Apple Sign-In
Service Provider: Apple Inc.
Purpose: Account authentication and login.
Data Processed: Apple Account Identifier, Email Address (if provided), Authentication Token
Privacy Policy: https://www.apple.com/legal/privacy/
Google Sign-In
Service Provider: Google LLC
Purpose: Account authentication and login.
Data Processed: Google Account ID, Email Address, Profile Information
Privacy Policy: https://policies.google.com/privacy
Facebook Login
Service Provider: Meta Platforms, Inc.
Purpose: Account authentication and login.
Data Processed: Facebook User ID, Email Address, Public Profile Information
Privacy Policy: https://www.facebook.com/privacy/policy/
Agora SDK
Service Provider: Agora Lab, Inc.
Purpose: Real-time voice communication.
Data Processed: Device Information, IP Address, Network Information, Voice Session Metadata, Usage Information
Privacy Policy: https://www.agora.io/en/privacy-policy/
Important: CHACHA does not permanently store real-time voice communications through Agora unless otherwise disclosed.
ZEGO SDK (if applicable)
Service Provider: ZEGO Technology Company Limited
Purpose: Voice communication services.
Data Processed: Device Information, Network Information, Session Metadata
Privacy Policy: https://www.zegocloud.com/privacy
Firebase Analytics
Service Provider: Google LLC
Purpose: Analytics and performance monitoring.
Data Processed: Device Identifiers, App Usage Information, Event Data, Crash Data
Privacy Policy: https://firebase.google.com/support/privacy
Google Analytics
Service Provider: Google LLC
Purpose: Product analytics and reporting.
Data Processed: Device Information, Usage Information, IP Address (where applicable)
Privacy Policy: https://policies.google.com/privacy
AppsFlyer
Service Provider: AppsFlyer Ltd.
Purpose: Attribution and marketing analytics.
Data Processed: Advertising Identifiers, Device Information, Campaign Information
Privacy Policy: https://www.appsflyer.com/legal/privacy-policy/
Adjust
Service Provider: Adjust GmbH
Purpose: Mobile attribution and analytics.
Data Processed: Device Information, Advertising Identifiers, Campaign Performance Data
Privacy Policy: https://www.adjust.com/terms/privacy-policy/
Apple In-App Purchase
Service Provider: Apple Inc.
Purpose: Processing in-app purchases.
Data Processed: Transaction Identifiers, Purchase Information
Privacy Policy: https://www.apple.com/legal/privacy/
CHACHA does not receive your payment card details from Apple.
Google Play Billing
Service Provider: Google LLC
Purpose: Processing in-app purchases.
Data Processed: Transaction Information, Purchase Records
Privacy Policy: https://policies.google.com/privacy
CHACHA does not receive payment card information from Google.
Stripe (if applicable)
Service Provider: Stripe, Inc.
Purpose: Payment processing.
Data Processed: Payment Information, Billing Information, Transaction Records
Privacy Policy: https://stripe.com/privacy
Xsolla (if applicable)
Service Provider: Xsolla (USA), Inc.
Purpose: Game payment processing.
Data Processed: Transaction Information, Payment Information, Fraud Prevention Information
Privacy Policy: https://xsolla.com/privacy-policy
Amazon Web Services (AWS)
Service Provider: Amazon Web Services, Inc.
Purpose: Cloud infrastructure and hosting.
Data Processed: Account Information, Service Data, Log Data
Privacy Policy: https://aws.amazon.com/privacy/
Alibaba Cloud (if applicable)
Service Provider: Alibaba Cloud
Purpose: Cloud hosting and storage.
Data Processed: Service Data, User Information, Log Information
Privacy Policy: https://www.alibabacloud.com/help/en/legal/latest/alibaba-cloud-international-website-privacy-policy
Tencent Cloud (if applicable)
Service Provider: Tencent Cloud
Purpose: Cloud hosting and storage.
Data Processed: Service Data, Log Information, Security Information
Privacy Policy: https://www.tencentcloud.com/document/product/301/17345
CHACHA may engage third-party security vendors to: prevent fraud; detect suspicious activity; prevent account abuse; protect platform security; monitor malicious behavior. Information processed may include: Device Information, IP Address, Login Information, Security Events
CHACHA may engage third-party moderation providers to assist with: trust and safety reviews; fraud detection; abuse prevention; policy enforcement. Information reviewed may include: profile information; reports; text communications; public content.
Certain third-party providers may process information outside your country of residence. Where required by law, CHACHA implements appropriate safeguards to protect personal information transferred internationally.
CHACHA may update this Appendix to reflect: changes in vendors; technical upgrades; legal requirements; product developments. The updated version will become effective upon publication unless otherwise required by applicable law.