Privacy Policy
Last updated: 25 September 2026
This policy applies to the Zinsta mobile app, website (zinsta.org) and related services, published by Zinsta, Pakistan ("Zinsta", "we"). Zinsta lets adults have paid private chat, voice and video sessions with creators. This policy explains what we access, collect, use and share, how long we keep it, and how you can delete it. Contact for privacy questions: [email protected].
What we collect
- Account details: name, email or phone number, date of birth (to confirm you are 18+), password (stored hashed).
- Creators also: public profile, ID card images and number, and payout account details for identity checks and payments.
- Session content: chat messages (stored encrypted) and call metadata. Voice and video are carried by our provider LiveKit and are not recorded by us.
- Payments: wallet transactions and gateway references. We never see or store your card details.
- Device & usage: device id, app version, push token, IP address and basic product events, used for security, fraud prevention and improving the app.
How we use it
- To run your account and sessions, process payments and pay creators.
- To keep the community safe: screening messages for scams, abuse and contact-sharing, handling reports and preventing fraud.
- To send notifications you allow (session requests, reminders).
Who we share it with
Service providers that help us run Zinsta: hosting (Amazon Web Services), file storage and DNS (Cloudflare), push notifications (Google Firebase), calls (LiveKit), SMS/email delivery, payment gateways, and AI services that help screen messages for scams and abuse and, for creators who switch it on, answer common questions about prices and hours. Text sent to these providers is used only to provide that service. We may disclose information when the law requires it or to protect people from harm. We do not sell your personal data.
How long we keep data
- Account and profile: while your account is active. After you request deletion the account is deactivated at once and all personal data is permanently deleted after 30 days.
- Chat messages: while your account is active, then deleted with the account.
- ID documents (creators): deleted about 90 days after review.
- Payment, wallet and session records: kept in anonymised form for as long as the law requires for accounting, tax and fraud prevention. They are no longer linked to your identity.
- Safety reports and evidence: kept as long as needed to protect users and meet legal duties, including reports to the authorities.
Prominent notices
Before we collect your ID documents (creators only) or ask for camera, microphone or notification access, the app tells you why and asks for your permission. You can refuse; the related feature (for example video calls or becoming a creator) then will not work.
Your choices
- Delete your account in the app (Profile → Delete account) or at zinsta.org/delete-account. It is permanently deleted after 30 days.
- Ask for a copy of your data by emailing [email protected] from the address on your account. We reply within 30 days.
- Turn notifications off at any time in your phone's settings (Settings > Apps > Zinsta > Notifications).
- Refuse camera or microphone access; only voice and video calls stop working.
Permissions the app asks for
- Camera and microphone: only for video and voice sessions you join, and for taking a profile or ID photo.
- Photos: only the pictures you choose to upload.
- Notifications: to tell you about session requests and reminders.
Age
Zinsta is only for people aged 18 or older. We do not knowingly collect data from anyone under 18 and close such accounts. See our safety standards.
Security
Data is sent over encrypted connections. Chat messages and identity documents are stored encrypted. Access by our staff is limited and logged.