Privacy Policy

1. What we collect

• Profile information you give us: display name, date of birth, gender and who you're interested in, bio, prompt answers, city, and photos you upload.
• Approximate location: a coordinate you share (for distance-based Discover) or your country, inferred from your network connection, when Global Mode is off. We don't collect continuous background location.
• Device and usage data: swipes, matches, messages, reports, app version, and general technical logs (IP address, device/browser type, crash reports) used to run and secure the service.
• Payment metadata: if you buy a subscription or power-up, our payment processor (Stripe) handles your card details directly, so we never see or store your full card number. We keep a record of what you bought, the amount, currency, and Stripe's reference IDs for that transaction.

2. Why we collect it

To run Discover and matching, to let you build and show a profile, to process payments for subscriptions and power-ups, to enforce Terms and investigate reports, to keep the service secure and prevent abuse, to send you transactional email (matches, safety notices, receipts), and to meet legal obligations.

3. Retention

We keep profile and account data for as long as your account is active. When you delete your account, we remove your profile, photos, and identifying data promptly, subject to the exceptions below. Aggregated, de-identified analytics may be retained longer. We keep payment transaction records for as long as required by Indian tax and accounting law (typically several years) even after account deletion, and we may retain limited data related to active reports, disputes, or legal holds until those are resolved.

4. Who we share it with

We share data with the processors that run the app, each under their own privacy and security terms:

• Supabase: our database, authentication, and photo storage provider.
• Stripe: payment processing for subscriptions and power-up purchases.
• Resend: transactional email delivery (match notices, receipts, safety emails).
• Vercel: application hosting and infrastructure.

We don't sell your personal data. We may disclose data if required by law, to respond to a valid legal request, or to protect the rights, safety, or property of Mehtch or our users.

5. Cookies and similar technology

We use strictly necessary cookies to keep you signed in and to remember basic preferences (like your theme). We don't use third-party advertising trackers on Mehtch today; if that changes, we'll update this policy first.

6. Your rights

You can view and edit most of your profile data directly in the app, and delete your account at any time from Settings. Depending on where you live, you may also have the right to request a copy of your data, ask us to correct it, or object to certain processing. To exercise any of these rights, contact us using the details in Section 8 below. We'll respond within a reasonable time and, for Grievance Officer requests, within 15 days as required by Indian law.

7. How to delete your account

Go to Settings → Delete account and confirm by typing DELETE. This removes your profile, photos, and inventory, and deletes your login. It does not un-send messages already read by a match, and we retain payment transaction records as described in Section 3.

8. Grievance Officer (IT Rules, 2021)

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the contact details of the Grievance Officer are provided below. [Placeholder: replace with real details before launch.]

9. Data Fiduciary contact (DPDP Act, 2023)

For matters relating to your personal data under the Digital Personal Data Protection Act, 2023, you can reach our Data Protection contact at the details below. [Placeholder: replace with real details before launch.]

10. Changes to this policy

We may update this policy from time to time. We'll post the updated version here with a new "last updated" date, and for material changes we'll make a reasonable effort to notify you in-app or by email.