Lytt Privacy Policy

Last updated: 3 November 2026

Pre-launch notice: Lytt is in a pre-launch testing phase. No real bookings are being taken, and checkout runs in our payment provider's test mode, so no real money is charged. This policy explains how we handle any personal data you share with us, including during testing.

1. Who we are and what this policy covers

1.1 Lytt is operated by Lytt Culture Labs Private Limited (CIN: U79900HR2026PTC151135), a company incorporated on 29 September 2026 under the Companies Act, 2013, with its registered office at I-201 JMD Gardens, Sector 33, Sohna Road, Gurgaon 122018, Haryana, India ("Lytt," "we," "us").

1.2 This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies when you:

(a) visit lytt.life (including through any other Lytt domain that redirects to it) or use the Lytt app (together, the "Platform");

(b) create an account, join a waitlist, or book a Trip;

(c) are added to someone else's booking;

(d) apply to become, or work with us as, a Creator;

(e) contact us for support, including through WhatsApp.

1.3 Words like "Trip," "Creator," "Operating Partner," and "Traveler" mean the same as in our Terms of Service.

1.4 For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Lytt is the Data Fiduciary for the personal data described in this policy, and you are the Data Principal.

2. The short version

• We collect what we need to run your account, book and deliver your Trip, pay Creators, keep people safe, and meet our legal obligations.
• We share your details with the Creator and Operating Partner of your Trip only as far as they need them to run it. Creators see a minimized view by default.
• Your profile photo is private unless you choose to share it with your Trip's Creator and fellow travelers.
• We use service providers (hosting, payments, identity verification, SMS, email, WhatsApp, analytics, AI tools) to run the Platform. They process data on our instructions.
• Analytics cookies only run if you accept them.
• We do not sell your personal data.
• You can ask to see, correct, or erase your data, withdraw consent, or complain. See Section 10.

3. What we collect

We collect personal data in three ways: what you give us, what's created when you use the Platform, and what we receive from others.

3.1 What you give us

If you are a Creator or apply to become one, we also collect:

3.2 What's created when you use the Platform

• Device and usage data: IP address, browser and device type, pages you view, and when. We need some of this to run and secure the Platform.
• Referral data: if you arrive through a Creator's share link or a campaign link, we record which link and channel, so the right Creator is credited for your booking.
• Transaction records: payment status, amounts, refund records, invoices, and payment reference numbers. We do not store your full card or UPI credentials. Payments are handled by our payment processor.
• Cookies and similar technologies: see Section 11.

3.3 What we receive from others

• From the person who booked: if someone adds you to their booking, they give us your name and age (and gender where relevant), and your email address and phone number, so we can send you a link to create your own account and verify your identity (Section 4.3).
• From you about others: if you give us an emergency contact or someone else's details, see Section 13.
• From Creators and Operating Partners: information about what happened on a Trip, for example if there's a safety incident or a concern about a booking.
• From sign-in providers, payment processors and social platforms: as described above, and in Sections 3.4 and 3.5.

3.4 Signing in with Google

If you choose to sign in with Google, Google shares your name, email address and, where available, profile picture with us, with your permission. We use this only to create your Lytt account, sign you in securely, and contact you about your account and bookings. We don't request access to your Gmail, contacts, calendar or files. We don't sell information received from Google, and we don't use it for advertising.

Lytt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.5 Connecting Instagram (Creators)

If you are a Creator and connect your Instagram account, Instagram (Meta) shares your account information with us, with your permission: your username and profile details, account metrics such as followers and engagement, and your posts. We use this to confirm you own the account, assess your Creator application, and show the posts you choose on your Lytt profile. We keep a copy of the posts you choose to display and refresh it from time to time. We don't post on your behalf, and we don't sell this information.

You can disconnect Instagram at any time, either from your Instagram settings (under apps and websites) or by contacting us. When you do, we stop refreshing your Instagram data and delete what we pulled from Instagram, except anything we must keep by law.

4. Sensitive information

4.1 Some information is more sensitive: health and medical information, financial information (bank details), and government identity documents and numbers (Aadhaar, PAN, and, where a destination requires it, travel documents). We ask for these only when we need them, we collect health information only if you choose to share it, and we handle identity verification as described in Sections 4.3 to 4.9.

4.2 By providing health or medical information in your Trip form, you consent to us using it, and sharing it with the Operating Partner of your Trip and, only through the approved and logged access described in Section 7.1(a), with its Creator, only to deliver that Trip safely.

Identity verification (Aadhaar or PAN)

4.3 When we verify your identity, and why. Travelers must verify their identity before joining a Trip, including anyone added to someone else's booking, who we'll send a link to create their own account and verify themselves. Verification opens once a booking is confirmed and must be completed by the verification deadline shown in the booking (3 days before we confirm the final group to the Trip's Operating Partner), and we'll send reminders before then. Creators verify with their PAN before they can host or join a Trip. You only need to verify once: your verified status is reused for later bookings. Whenever we ask, we'll tell you at that point why we need it (for example, to confirm you are who you say you are, that you meet our 18+ and any Trip-specific eligibility requirements, or, for Creators, to meet our tax obligations) and what information the method you choose will share with us. If you're on someone else's booking, we'll tell the person who booked whether you've completed verification, and whether your details matched, so they can help you fix it.

4.4 How you can verify. Travelers can verify in either of two ways, both through a licensed identity-verification service provider and your own DigiLocker account (a Government of India service), with your consent:

(a) Aadhaar (Section 4.5); or

(b) PAN (Section 4.6).

Using Aadhaar is always your choice. Choosing PAN instead won't affect your access to the Platform or your booking, and either method works for every Trip. Creators verify with PAN.

4.5 How Aadhaar verification works, and what we receive. If you choose Aadhaar:

(a) you open a secure link from our provider, sign in to your DigiLocker account, and agree to share your Aadhaar details from it. We never see or receive your Aadhaar OTP, your DigiLocker password, or your biometrics (fingerprint or iris);

(b) before you start, we'll tell you what information will be shared with us and why, and ask for your consent;

(c) we keep only the verification result and the details needed to confirm who you are: your name, date of birth and gender, along with no more than the last four digits of your Aadhaar number;

(d) we do not keep your full Aadhaar number, and we do not ask for or keep a photocopy, scan or image of your Aadhaar card;

(e) we use these details only to confirm your identity (and, where relevant, that you meet our 18+ and other eligibility requirements), and we don't share them with anyone except as required by law.

4.6 How PAN verification works. If you choose PAN, you share your PAN record from DigiLocker in the same way, which shows that the PAN belongs to you. We use it to confirm your name and date of birth, and we also check the PAN against Income Tax Department records through our provider to confirm that it is valid and active and to confirm your gender. That check may also return other details, such as your address, email or phone number, which we discard. If you are a Traveler, we keep only what we need to show you were verified. If you are a Creator, tax law requires us to record your PAN, so we keep it with your tax records (Section 9).

4.7 If verification doesn't go through. You can try up to five times. If it still doesn't work, or your verified details don't match the details on your booking, our support team will contact you to help, and may send you a new verification link. We don't offer verification by uploading an identity document for manual review. If a Traveler isn't verified by the deadline, their place on the Trip may be cancelled, as set out in our Terms of Service (Section 2.8).

4.8 Changing verified details. Once you're verified, your verified name, date of birth and gender (and, for Creators, PAN) can't be edited from your profile. To change them, contact support; we may ask you to verify again.

4.9 How long we keep verification details. We keep the verification result, the details we confirmed (Sections 4.5(c) and 4.6), and the provider's reference number for as long as your account is active, and afterwards only as long as we need them to show that verification took place or as the law requires. A Creator's PAN is kept with tax records for as long as tax law requires.

5. Why we use your data, and on what basis

5.1 We use personal data to:

(a) create and manage your account and keep it secure;

(b) process bookings and payments, issue invoices and refunds;

(c) check eligibility (the 18+ rule and any Trip-specific requirements);

(d) deliver your Trip, including sharing details with its Creator and Operating Partner (Section 7) and, if you choose, showing your photo and first name to your Trip's Creator and fellow travelers (Section 7.3);

(e) send you service messages about your booking, payments, and Trip, as set out in our Terms of Service (Section 13.4);

(f) respond to support requests and safety concerns;

(g) credit Creators for bookings they referred, and pay Creators;

(h) prevent fraud and misuse, and keep the Platform secure;

(i) understand how the Platform is used and improve it (analytics only with your consent);

(j) send marketing, only if you have opted in;

(k) meet legal obligations, including tax, accounting, consumer protection, and responding to lawful requests from authorities.

5.2 We process your data on the basis of your consent, which you give when you sign up, book, or opt in to something specific, or on a legitimate use the DPDP Act allows without separate consent. For example: where you've voluntarily given us data for a specific purpose, where the law requires us to keep or disclose data, or where it's needed to respond to a medical emergency or a threat to someone's safety.

5.3 Some data is necessary to provide the service. If you don't provide it, or you withdraw consent for it, we may not be able to create your account, complete a booking, or pay you as a Creator.

6. AI and automated tools

6.1 We use AI tools to help our team work faster, including to:

(a) sort incoming support messages, link them to the right booking, flag possible safety issues, and draft or send replies to routine questions;

(b) screen Creator applications and requested usernames, and flag ones that need a closer look;

(c) help our staff answer questions about business performance from aggregated data.

6.2 When a person is involved. For decisions that significantly affect you, a member of our team makes the final decision; AI tools may help prepare it, but don't make it on their own. These are decisions to refuse or cancel a booking, suspend or close your account, reject a Creator application, withhold or adjust a payout, or respond to a safety concern. For other tasks, such as answering routine questions, sorting support messages, or suggesting Trips, we may use automated tools without a person reviewing each one. If an automated response or outcome doesn't seem right, you can ask for a person to look at it by contacting us (Section 18).

6.3 These tools are run by a third-party AI provider, who processes the relevant content on our behalf.

7. Who we share your data with

7.1 The Creator and Operating Partner of your Trip. They get what they need to run your Trip:

(a) Creators see a minimized view by default: not your name or contact details (apart from your first name and photo, if you have chosen to share them; see Section 7.3), but, for example, the number of travelers and aggregated, non-identifying profile information such as age range, occupation, or location. A Creator can see full details (name, contact details, dietary needs, any medical information you've shared, emergency contact, roommate preferences) only for a limited window around the Trip dates, only after our team approves a specific request, and every such access is logged. If you join your Trip's WhatsApp group, its members, including the Creator, can also see your name and phone number (Section 7.2).

(b) Operating Partners receive the details needed to deliver the travel services, such as names, contact details, dietary and medical information you shared, and, where a destination requires it, travel document details.

(c) Both are bound by their agreements with us to use your data only for your Trip.

7.2 Your fellow travelers. For most Trips, our team creates a WhatsApp group for the travelers, Creator, and Operating Partner. Members of the group can see each other's names and phone numbers. We close the group after the Trip. You can choose not to join the group. If you do, you may miss some Trip-related updates shared there, but we'll make reasonable efforts to send you the most important Trip information by email as well.

7.3 Your profile photo, only if you choose to share it. Your profile photo is optional and private by default: only you and our team can see it. If you tick the sharing option when you add or manage your photo, we show your photo and first name only (not your surname, contact details or anything else) to:

(a) the Creator of a Trip you have booked; and

(b) other travelers who have booked the same Trip.

This applies only while your booking is paid or part-paid, and ends 30 days after the Trip ends. People whose booking is unpaid or cancelled, and anyone not booked on the Trip, can't see your photo. You can switch sharing off, or remove your photo, at any time from your profile; it then stops being shown (links already generated expire within a few minutes). We record when you agreed. We also take technical steps to stop photos being saved from the Platform, such as short-lived links and blocking save and drag actions, but we can't prevent someone taking a screenshot or photographing their screen, and travelers and Creators agree not to save, share or repost other people's photos without their consent (Terms of Service, Section 8.6, and our agreement with Creators).

7.4 Service providers who help us run the Platform, on our instructions and under contract: cloud hosting and database, payment processing, identity verification, SMS and one-time-password delivery, email delivery, WhatsApp messaging, website analytics, AI tools (Section 6), sign-in providers, and, for Creators, Instagram and YouTube for account connection.

7.5 Brands. If you are a Creator and agree to work on a brand engagement under your agreement with us, we share what's needed for that engagement, such as your name, handle, and content, with the brand.

7.6 Authorities and legal requirements. We may disclose data where required by law, court order, or a lawful request from a government authority, or where necessary to protect someone's safety.

7.7 Professional advisers, such as lawyers, auditors, and chartered accountants, under confidentiality.

7.8 Business transfers. If Lytt is involved in a merger, acquisition, or sale of assets, your data may transfer to the new owner, who will be bound by this policy or tell you about any change.

7.9 We do not sell your personal data.

8. Where your data is stored

8.1 Our service providers may store or process your data outside India. We only transfer data outside India as permitted under the DPDP Act, which allows transfers except to countries the Central Government restricts.

9. How long we keep your data

9.1 We keep personal data only as long as we need it for the purposes above, or as long as the law requires. After that we delete it or anonymize it so it no longer identifies you. In some cases we redact personal fields but keep the underlying record (for example, a payment record).

9.2 We keep each type of data for the periods below:

9.3 If a legal claim or dispute is ongoing, we may keep related data until it's resolved.

10. Your rights

10.1 Under the DPDP Act you have the right to:

(a) Access: get a summary of the personal data we hold about you, what we do with it, and who we've shared it with;

(b) Correct, complete and update inaccurate or incomplete data;

(c) Erase data we no longer need, unless the law requires us to keep it;

(d) Withdraw consent at any time, as easily as you gave it (for example, you can switch off photo sharing from your profile at any time). Withdrawal doesn't affect processing already done, and may mean we can no longer provide part of the service (Section 5.3);

(e) Nominate someone to exercise your rights if you die or become incapable of doing so;

(f) Have your grievance addressed by us (Section 14).

10.2 How to make a request: email privacy@lytt.life from the email address on your account. We'll verify your identity before acting on a request, and may ask for your registered email or phone number to do so.

10.3 We'll respond within 30 days, and in any case within the time the law allows.

10.4 You can update your account details yourself at any time from your profile, except verified details (Section 4.8).

10.5 Deleting your account and data. To delete your Lytt account and the personal data we hold about you, including anything we received from Google or Instagram, email privacy@lytt.life from the email address on your account with the subject "Delete my account". We'll confirm your request, delete or anonymize your data within 30 days, and tell you when it's done. We keep only what Section 9.2 says we must keep, such as booking, payment and tax records, or data needed for an open booking, refund or dispute.

11. Cookies and similar technologies

11.1 We use:

(a) Essential cookies, to keep you logged in, secure your session, and remember your cookie choice. The Platform doesn't work without these.

(b) Analytics cookies, to understand how people use the Platform. These only run if you accept them in our cookie banner.

11.2 You can change your choice at any time by clearing the Platform's cookies in your browser, which brings the cookie banner back. You can also block cookies in your browser, though parts of the Platform may not work.

12. Marketing

12.1 We'll send you marketing, such as news about Trips and offers, only if you've opted in. You can opt out at any time using the link in any marketing message or by contacting us.

12.2 Opting out of marketing doesn't stop service messages about your bookings and Trips (Terms of Service, Section 13.4).

13. Information about other people

13.1 If you give us someone else's personal data, for example a person you add to your booking or your emergency contact, you confirm that you're allowed to share it with us for the purposes in this policy and that you've told them about it.

13.2 We use an emergency contact's details only to reach them if something happens on your Trip.

14. Security, breaches, and grievances

14.1 Security. We use reasonable security safeguards to protect personal data, including encryption, role-based access controls so staff and Creators see only what their role requires, private storage for sensitive documents such as KYC images and profile photos (with short-lived access links), and logging of access to sensitive data. No system is completely secure, but we work to protect your data and keep these measures under review.

14.2 Breaches. If a personal data breach affects you, we'll tell you without undue delay, along with what happened, the likely consequences, what we're doing about it, and what you can do. We'll also report it to the Data Protection Board of India as the law requires.

14.3 Grievance Officer. If you have a question or complaint about how we handle your personal data, contact our Grievance Officer:

Name: Chirag Kohli
Designation: Chief Executive Officer
Email: privacy@lytt.life
Address: Lytt Culture Labs Private Limited, I-201 JMD Gardens, Sector 33, Sohna Road, Gurgaon 122018, Haryana, India

We'll acknowledge your complaint within 48 hours and aim to resolve it within one month.

14.4 Data Protection Board of India. If you're not satisfied with our response, you can complain to the Data Protection Board of India once you've used our grievance process.

15. Children

15.1 The Platform is only for people aged 18 and over, and every person on a booking must be 18 or over (Terms of Service, Section 2). We don't knowingly collect personal data from anyone under 18. If we learn we have, we'll delete it.

16. Links to other services

16.1 The Platform links to services we don't control, such as Instagram, YouTube, and WhatsApp. Their own privacy policies apply when you use them.

17. Changes to this policy

17.1 We may update this policy from time to time. We'll post the new version here with a new "Last updated" date. If a change materially affects how we use your data, we'll tell you in advance by email or on the Platform, and ask for your consent again where the law requires it.

18. Contact us

18.1 For any question about this policy or your data, email privacy@lytt.life, or write to us at the address in Section 14.3.