Privacy Policy

1. Who we are and what this policy covers

Guft is a platform for adults to discover creators, buy timed private text conversations, share permitted content, and manage related payments. In this policy, “Guft”, “we”, “us”, and “our” mean the operator of the Guft platform. We decide why and how personal information is handled for the services described here.

This Privacy Policy applies to our website, progressive web app, administrator tools, messages, payment and verification flows, customer support, notifications, and other services that link to it. It applies whether you visit without an account, join as a member, apply or work as a creator, or contact us for support.

2. Our privacy commitments

We design Guft around a few clear commitments: collect information for a defined reason; limit access to people and providers who need it; do not sell personal information; protect private conversations from public discovery; give people understandable choices; and keep information only for as long as it remains reasonably necessary.

Private does not mean inaccessible in every circumstance. Guft may use automated controls and authorised human review when needed to deliver the service, investigate a report, prevent fraud or abuse, enforce our Terms, protect a person, or comply with law. We do not treat private chats as advertising space and do not publish them as creator content.

3. Information you provide directly

We collect the information you choose to provide, including:

• Account details such as your name, email address, password credential, selected role, gender where required by platform rules, and confirmation that you are at least 18.
• Creator profile details such as a display name, profile photo, city, biography, category, experience, topics, languages, social link, availability, and rate.
• Verification details such as answers to verification checks, original identity information, date-of-birth or age evidence, photographs, documents, contact details, and verification codes. Public profile information is kept separate from private verification evidence wherever the product allows.
• Communications such as private chat messages, attachments, creator-community posts, reports, reviews, support requests, email replies, and other messages sent through or about Guft.
• Transaction details such as deposit amount, payment method, provider reference, wallet activity, chat price, creator earnings, withdrawal method, account title, account number, and records needed to reconcile, reverse, or support a payment.
• Preferences such as language, theme, notification permission, device subscriptions, people you follow or block, and content reactions.

Please do not send unnecessary identity documents, financial secrets, passwords, one-time codes, health information, intimate information, or information about another person in a profile, chat, upload, report, or support request.

4. Information collected through use of Guft

When you use Guft, we create or receive technical and activity information. This can include IP address, browser and device characteristics, operating system, requested pages, referring page, language, approximate location inferred from network information, timestamps, session identifiers, sign-in attempts, notification tokens, and security events.

We also record how the service is used: profile and discovery activity, follows and blocks, chat requests and acceptance, timers and extensions, message delivery and read state, content purchases and reactions, reports, verification state, creator availability, administrative actions, and the status of deposits, earnings, or withdrawals. We use these records to make the product work, maintain accurate balances, resolve disputes, and protect the platform.

5. Information from other sources

We may receive information from payment processors, messaging or email delivery providers, analytics and support providers, verification services, fraud-prevention services, people who report content or conduct, and public sources you direct us to review. For example, a payment provider may tell us whether a deposit completed, and another user may include your account or message in a safety report.

If you give us information about another person, you must have a lawful and fair reason to do so and must not expose them unnecessarily.

6. Public profile information

A creator profile is intended to be discovered. Its display name, public photo, city, introduction, category, topics, languages, rate, availability indicators, ratings, follower count, and other marked profile fields may be visible to members, visitors, and search engines. A member’s first name or account identity may be shown to the creator they contact and may appear with a review or relevant account activity.

Your original identity, private verification evidence, email address, payment account details, and private chat content are not public profile fields unless you deliberately place that information in public content. Avoid putting private contact details in a display name, biography, public post, or review.

7. Private chats, attachments, and communications

Messages and attachments are made available to the participants in the conversation. We process them to deliver the chat, enforce the purchased duration, preserve conversation history, provide downloads to authorised participants, support reports, and maintain safety. Guft administrators may access relevant conversation content under controlled access when reviewing a report, responding to a support or legal request, investigating suspected abuse or fraud, or protecting platform integrity. Administrative access is restricted and recorded where the product supports audit logging.

Participants control what they say and share, but neither participant should assume the other person will keep information confidential. Do not disclose something you could not safely have copied, saved, or reported. If an immediate threat or unlawful activity is reported, we may preserve and disclose relevant records as permitted or required by law.

8. Identity and age verification

Guft is for adults aged 18 and over. We may ask members or creators to complete checks that confirm age, identity, contact ownership, profile authenticity, or other eligibility requirements. Creator checks can be more extensive because creators publish profiles, receive money, and interact with paying members.

We use verification information to assess authenticity, prevent duplicate or deceptive accounts, protect payments, investigate impersonation, and meet legal or provider obligations. Passing a check does not mean Guft guarantees a person’s character, qualifications, intentions, or every statement they make. We may repeat a check when information changes or risk increases.

9. Payments, wallets, and creator earnings

Guft and its payment providers process transaction information to accept deposits, credit platform wallet balances, charge accepted chats or content, calculate fees and creator earnings, manage clearance periods, process withdrawals, handle refunds or reversals, prevent fraud, keep accounting records, and answer payment disputes.

Payment providers may collect information directly under their own privacy terms. Guft generally receives transaction status, amount, method, and provider references rather than the secret credential used to authorise a wallet or bank payment. Do not send a PIN, password, or one-time code to Guft, a member, or a creator.

10. How we use personal information

We use personal information to:

• Create, authenticate, secure, and recover accounts.
• Display creator profiles and help people discover appropriate conversations.
• Deliver private chats, permitted attachments, paid content, community features, reviews, follows, blocks, and notifications.
• Show prices, accept and reconcile deposits, maintain wallet balances, calculate creator earnings, and process withdrawals.
• Verify age, identity, profile ownership, contact details, eligibility, and authenticity.
• Provide support and communicate about transactions, security, product changes, and account status.
• Detect spam, impersonation, misrepresentation, exploitation, harassment, payment abuse, account takeover, and other prohibited conduct.
• Investigate reports, enforce platform rules, moderate content, and protect users, Guft, and the public.
• Debug, measure, maintain, and improve performance, accessibility, reliability, and product design.
• Meet tax, accounting, legal, regulatory, contractual, and recordkeeping obligations.
• Establish, exercise, or defend legal claims and cooperate with lawful requests.

We do not use private chat content to create public advertising testimonials without the participants’ separate permission.

11. Our reasons for processing

Depending on the information and applicable law, we process information because it is needed to provide the service you requested or perform our agreement with you; because you gave consent for a particular optional use; because we or another person have a legitimate interest in operating, securing, improving, or defending the platform; or because a legal obligation requires it.

Where processing depends on consent, you may withdraw that consent for future processing. Withdrawal does not undo processing already carried out lawfully and may make an optional feature unavailable. Some core records cannot be deleted immediately while an account, payment, dispute, safety hold, or legal duty remains active.

12. When we share information

We share only what is reasonably necessary with:

• Other users, when a feature requires interaction, such as showing a creator profile to a member or the member’s identity to a contacted creator.
• Payment, payout, verification, hosting, storage, email, messaging, notification, analytics, fraud-prevention, support, and security providers acting for Guft or providing a service you select.
• Professional advisers, auditors, insurers, banks, and contractors subject to appropriate duties.
• Authorities, courts, regulators, or affected parties when disclosure is required by law or reasonably necessary to prevent harm, investigate unlawful conduct, enforce rights, or protect Guft and its users.
• A buyer, investor, successor, or restructuring participant if Guft is involved in financing, reorganisation, merger, acquisition, or asset transfer, with appropriate confidentiality protections.

We do not sell personal information for money. We do not give creators a member’s private payment credentials or give members a creator’s private identity evidence.

13. Service providers and international processing

Some providers may process information from a different country or use infrastructure located outside Pakistan. Privacy and government-access rules may differ in those places. When we choose providers, we consider their role, security practices, contractual commitments, and the information they need. Where required, we use contractual or other lawful safeguards for international transfers.

14. Cookies, sessions, analytics, and support tools

Guft uses cookies and similar local technologies to keep you signed in, remember language and appearance, protect sessions, enable progressive-web-app features, deliver notifications, understand service performance, and support visitors. Some essential technologies are necessary for the site to work. Optional analytics or support tools may set their own identifiers according to their terms and your browser choices.

You can block or clear cookies in your browser, but signing in, saved preferences, payments, or other features may stop working correctly. You can withdraw browser notification permission in your device settings.

15. Email, WhatsApp, and push notifications

We may send service messages about sign-in, verification, security, chats, payments, withdrawals, support, policy changes, or account administration. We may also send product or community messages where permitted. Delivery providers receive the address, number, device token, template data, and delivery status needed to send the message.

You can turn off browser notifications at any time. Some essential account, safety, transaction, or legal communications may still be sent while your account is active.

16. Automated controls and moderation

We may use rules, signals, and automated checks to detect suspicious sign-ins, duplicate submissions, prohibited uploads, payment inconsistencies, spam, or safety risks. These systems can restrict a feature, hold a transaction, or prioritise an item for review. Important account decisions may also involve an authorised human review where appropriate. Contact support if you believe a material decision was based on incorrect information.

17. Data retention

We retain information for periods that reflect its purpose, sensitivity, legal requirements, and the risk of misuse. Account and profile information is generally kept while the account is active. Chats, attachments, reports, verification decisions, transaction ledgers, creator earnings, withdrawals, security records, and administrator audit records may be retained after account closure when needed for safety, fraud prevention, accounting, dispute resolution, enforcement, or law.

Retention periods may differ by record. Backup copies can remain for a limited rotation period and may not be removed immediately from disaster-recovery systems. We may keep aggregated or de-identified information that no longer reasonably identifies a person.

18. Security

We use administrative, technical, and organisational safeguards intended to protect information against unauthorised access, loss, alteration, or disclosure. These include access controls, password hashing, session protections, transport encryption in properly configured production environments, provider credential protection, validation, private file delivery, and administrative audit records.

No internet service can promise absolute security. Use a unique password, protect your device and email account, do not share one-time codes, sign out of shared devices, and promptly report suspected account compromise.

19. Your choices and rights

Subject to applicable law and necessary verification, you may ask to access, correct, update, or delete certain personal information; object to or restrict certain processing; withdraw a consent; obtain information about a material decision; or request a copy of information you provided in a usable form. You can edit many profile and preference fields directly, although cooldowns or verification review may temporarily limit changes that affect identity or trust.

Some requests may be limited when information belongs to another person, would expose security or anti-fraud methods, is protected by privilege, or must be kept for a contract, payment, dispute, safety reason, or legal obligation. We may ask for proof that you control the account before acting.

20. Account deletion and closure

To request closure or deletion, contact Guft through the support channel available on the platform. We may first resolve an active conversation, withdrawal, chargeback, report, investigation, or legal hold. Closing an account removes access but does not necessarily erase every record immediately. Content already lawfully shared with another participant may remain in that participant’s conversation history, and financial or audit records may be retained as described above.

21. Information about other people

Do not upload another person’s identity document, likeness, private message, contact information, or copyrighted content without authority. Do not create an account for someone else, impersonate them, or use synthetic or altered media to mislead people about who is communicating. If you believe your identity or content is being misused, report the account and provide enough information for us to investigate.

22. Adults only

Guft is not directed to children and no one under 18 may create or use an account. We do not knowingly seek personal information from a minor. If we learn that an underage person is using Guft, we may suspend the account, preserve information needed for safety or legal reporting, and delete other information as appropriate. A parent, guardian, or affected person may contact support with a specific concern.

23. Third-party links and services

Creator profiles, support messages, or platform pages may link to a third-party site or social account. Guft does not control how that third party handles information. Review its privacy terms before leaving Guft or sharing information. A link does not mean Guft endorses the destination or guarantees its safety.

24. Changes to this policy

We may update this policy as Guft, our providers, or the law changes. We will publish the updated version at this URL and revise the effective or updated date. If a change materially affects how we use information, we may also provide an in-product, email, or other reasonable notice. Continued use after the effective date means the updated policy applies to future use, subject to any consent the law separately requires.

25. Contact us

Questions, privacy requests, and concerns can be sent through the Guft help or support channel available on the platform. Please identify the account and request clearly, but do not send passwords, payment PINs, or unnecessary identity documents in an ordinary message. We may ask you to complete a secure verification step before disclosing or changing account information.