dolly

Privacy Policy

Effective 24 September 2026 Applies to Dolly (app.dolly.com) Operated by Dolly

1.Who this is from

Dolly is operated by Dolly. This policy explains what the Dolly app collects about you, why, who else sees it, and what you can ask us to do with it. It covers the app and this website.

We do not sell your personal information, and we do not share it for advertising.

2.What we collect

Only what the service actually needs to run.

WhatWhy we have it
Mobile number It is your account. Proven by Truecaller, or by a one-time code where code sign-in is offered.
Profile — your public user code, chosen name, gender, language, and the avatar you pick So the app can show who you are to the person on the other end of a call.
Your 18+ confirmation, and when you gave it Dolly is for adults only, and we have to be able to show that consent was given.
Consultant details — age, short description, interests, and the voice introduction you record Collected only if you apply to take calls. The recording is what a reviewer listens to before approving you.
Wallet activity — coin balance, coins bought, coins spent To run the wallet and show you your own history.
Call records — who called whom, audio or video, when it started and ended, how long, coins charged, and any rating given This is what the billing is made of, and what a dispute is settled from. Not what was said.
Device information — a notification token, a per-install device id, app version, and whether you are currently online So an incoming call can ring your handset, and so the app can show who is free right now.
Reports and blocks you make or receive To keep people safe and to act on what is reported.
Referral code used at sign-up To credit whoever invited you.
Support messages you send us To answer you.

We do not ask for your contacts, your photo library, or your location. The app asks for the microphone, and for the camera on a video call, only so the call can happen.

3.Signing in with Truecaller

Dolly signs you in with Truecaller, which needs Truecaller installed and signed in on your phone. Where we offer it, you can instead use your mobile number and a one-time code.

If you choose it, Truecaller shows you a consent screen listing what it will share. When you accept, Truecaller gives the app a one-time code — not your number — and our server exchanges that code with Truecaller directly.

We ask Truecaller for your mobile number and nothing else. Not your name, not your email, not your Truecaller profile. The number becomes your Dolly account, exactly as it would if you had typed it and waited for an SMS. The name shown in Dolly is only ever one you choose yourself in the app.

We record that the sign-in happened through Truecaller rather than by SMS, so that our support team can make sense of your account later. What Truecaller does with your data on their side is governed by Truecaller's own privacy policy.

4.Calls are not recorded

Dolly does not record, store, or listen to your calls. Audio and video pass through and are gone. What remains afterwards is the fact of the call — who, when, which type, how long, and what it cost — because that is what the charge is based on.

The one recording we do keep is the voice introduction a consultant records deliberately as part of applying. That is stored so a reviewer can listen to it, and it is described in section 9.

5.Why we use it

  • To create your account and sign you in.
  • To connect calls, ring the right handset, and show who is available.
  • To charge coins correctly and keep your transaction history.
  • To review consultant applications and pay out earnings.
  • To answer support requests and settle billing disputes.
  • To detect fraud and abuse, and to enforce our Terms.
  • To send you notifications, as described below.
  • To understand which parts of the app are used, so we can improve it.
  • To meet our legal, tax, and accounting obligations.

6.Who we share it with

Only with the companies that help us run Dolly, and only with what each of them needs.

WhoWhat they get
Agora — carries the live audio and video A temporary call token and channel name. They carry the stream; we do not have them record it.
Google Firebase — delivers incoming-call notifications Your device's notification token and the caller's display name, so your phone can ring.
OneSignal — sends announcements and offers Your account id and broad tags such as language and gender, so a message is relevant.
Truecaller — optional sign-in Nothing about you is sent to them by us, and we ask them only for your number. See section 3.
Our payment partner What is needed to take a payment. Card and bank details go to them directly and are never held by Dolly.
Our hosting provider Stores the database and files on our behalf, under contract.

We may also disclose information where the law requires it, to respond to a valid legal request, to investigate fraud, or to protect the safety of a person. If Dolly is ever sold or merged, account data may transfer with the business, and you would be told.

7.Notifications

Two different kinds, and they are controlled separately:

  • Call notifications. These make your phone ring when someone calls you. They are part of the service. If you turn them off in your phone's settings, calls may not reach you.
  • Announcements and offers. Optional. Turn them off in the app's settings, or from your phone's notification settings, at any time.

8.Payments

Coin purchases are handled by an authorised payment partner. Your card number, UPI PIN, or bank credentials are entered with them and are never seen or stored by Dolly. What we keep is the record of the purchase: amount, date, status, and their reference, so we can support you and meet our accounting duties.

9.Consultant verification

If you apply to take calls, we keep the voice introduction you record so a reviewer can listen to it, and so it can be replayed if a decision is ever questioned. It is stored under a randomly generated file name that cannot be guessed, and it is not shown to other users of the app.

To withdraw earnings you must complete identity verification. That means giving us your name as on your PAN card, your PAN number, and payout details (bank account or UPI ID). No document photos are collected. These are used to confirm who you are, to make the payment, and to satisfy financial and tax rules. They are kept for as long as the law requires us to keep financial records.

10.How long we keep it

  • Profile and account data — while your account is open.
  • Call and coin records — kept after an account closes, for as long as accounting and tax law requires, because they are financial records.
  • Voice introductions — while the account takes calls, and for a reasonable period after it stops.
  • Identity and payout records — for the period financial regulation requires.
  • Reports and moderation records — long enough to act on repeat behaviour and to defend a decision.
  • One-time codes — stored only as an unreadable hash, and expire within minutes.

11.How we protect it

Traffic between the app and our servers is encrypted in transit. Login codes are stored only as keyed hashes, never as the code itself. Sessions can be revoked, and a refresh token that is reused signs the account out everywhere as a precaution. Access to the database is restricted to the small number of people who need it.

No system is perfectly secure. If a breach ever affects your personal data, we will tell you and the relevant authority as the law requires.

12.Your choices

You can ask us to:

  • tell you what personal data we hold about you;
  • correct anything that is wrong;
  • delete your account and the data we are not required to keep;
  • stop sending you promotional notifications.

Much of this you can do yourself in the app — your profile, availability, notification settings, and blocked accounts are all editable there. For anything else, use Help in the Dolly app from the account we can tie to you. We may ask you to confirm who you are before acting, and we aim to respond within 30 days.

13.Deleting your account

In the app, go to Profile, then Settings, then Delete account. We remove your profile and stop the account being reachable. The full steps are on Delete your account.

Financial records — coin purchases, coins spent, and consultant payouts — are kept for the period the law requires even after closure. Any coins left in the wallet are forfeited, as set out in the Terms.

14.Children

Dolly is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child is using Dolly, tell us and we will close the account and delete the data.

15.Changes

If this policy changes, the effective date at the top of the page changes with it, and anything significant is announced in the app.

16.Grievance Officer

In line with the Information Technology Act, 2000 and the rules made under it, you may contact our Grievance Officer about anything in this policy or about how your data has been handled.

Dolly — Grievance Officer
Contact: Help in the Dolly app
Subject line: Grievance — Dolly

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.