Conversation privacy & safety

This version is a limited pilot for individually invited adults. Matching is random among available pilot accounts, not open public signup. Access codes identify accounts, not verified legal identities. The operator must check pilot eligibility.

Text chat

Text mode never requests a camera or microphone and does not establish a WebRTC connection. Messages pass through the application server and Upstash in HTTPS-protected requests; they are not end-to-end encrypted. They are buffered only for delivery and removed on acknowledgement. Abandoned participants are cleaned up after 35 seconds on the next request; if everyone leaves, the temporary store expires 60 seconds after its last update. No chat history or transcript is saved with reports. The browser shows at most 100 messages and clears them when you leave or move to another match. Other participants can copy messages. Text and video have separate matching queues, but share account blocks. UAE access is text-only; this is not a claim of regulatory approval.

Camera, microphone and your connection (video mode)

Start requests your permission, opens a local preview and joins the queue. When matched, your enabled microphone and camera are sent to the other person. Direct WebRTC connections use encrypted audio/video (DTLS-SRTP). The other person may discover your public network address. A network address is not an exact home address, but can reveal approximate location or provider.

The signaling server exchanges connection descriptions and network candidates; it does not receive your media stream. If direct connection fails, an optional TURN server relays encrypted packets. STUN/TURN operators can see connection metadata. No anonymity guarantee is made.

Your controls

Mute and Camera Off stop sending the corresponding media content. Next closes the old connection and keeps your local devices ready for a new match. End Call stops your devices. Closing the page also cleans up. Signaling loss ends the call; use Start to reconnect. Calls in the official app end after 20 minutes. A modified P2P client could ignore remote end instructions; server limits are not a guaranteed cutoff of an already established direct connection.

Recording and storage

KuttyBuzz does not record or store audio/video, and does not run speech recognition or AI moderation. The other person could still record externally. Connection descriptions are forwarded without permanent storage. In the Vercel-hosted pilot, Upstash Redis temporarily stores signaling messages and session state. Acknowledged messages are removed on the next request; abandoned connection data expires within 60 seconds after the last successful update. No audio/video is stored there. Access codes expire after 24 hours; new personal passwords expire after 30 days. Personal passwords are unique and securely generated by the operator, not shared by all participants. The operator keeps hashed invitation records in protected server configuration and removes expired records during the next invitation update. Hosted blocks expire after 30 days; local-test blocks remain while their account records exist. Reports contain opaque account/session IDs, a reason and timestamp, and expire after 30 days. Host access logs have a separate operator-configured retention policy.

Report, block and support

Report and leave immediately stops your media, saves your selected reason for the pilot operator, and blocks future matching with that account. Block and leave also prevents matching in either direction. The screen confirms when the server has saved your request. If it cannot save, contact the operator who issued your code. Creating a new account can evade a block, so the operator controls account issuance. For an appeal or deletion request, contact that operator. Reports are not an emergency service.

Availability

Local testing is separate from a public launch. Public access, target-country telecom/privacy requirements (including India and UAE), age assurance, moderation staffing and infrastructure must be reviewed before deployment. The existing UAE launch restriction is not lifted by changing the calling technology.