Privacy Policy

Deeni Sathi is operated by [your registered name], [your registered address] ("we", "us"). We decide why and how your personal data is processed (we are the "Data Fiduciary"). You are the "Data Principal".

In short: we ask for personal details only to run a marriage-matching service, we show other members only a limited part of them, we never sell your data, and you can download it or delete it at any time.

We collect only what the service needs:

• Account: your mobile number (used to sign in) and, if you choose to add one, a confirmed e-mail address.
• Biodata you fill in: name, date of birth, gender, height, weight, complexion, blood group, marital status, address (district, police station, post office, PIN, full address), education, profession and workplace, family details (who is alive, parents' professions, family religious and financial background), and your own written answers.
• Religious information: sect / fiqh followed, prayer and dress practice, Quran recitation, Deeni activity, hobbies, scholars and books. This is sensitive information (see section 6).
• Health: a yes/no answer to whether you have any mental or physical illness.
• Partner preferences: age and height ranges, marital status, fiqh, complexion, family financial status and your written expectations.
• Activity: interests you send, receive, accept or decline (and the short note you may attach), blocks and reports you make, notifications, and when you last used the site.
• Identity verification (optional): a photo or PDF of a government ID you upload to get the Verified badge.
• Payments: which credit pack you bought, the amount, and Razorpay's order and payment reference numbers. We never see or store your card, UPI PIN or bank details — those go directly to Razorpay.
• Technical: IP address and browser details when you sign in, give consent, or when security checks run; and the records needed to keep you signed in.
• Your consent history: what you agreed to, which version, and when.

We do not collect or show member photos. Everyone appears with a generic silhouette. Please do not put photos, phone numbers or social-media IDs in your written answers.

We use your data only for these purposes, on the basis of your consent given when you register, or where the law allows use without consent (for example, to meet legal obligations or prevent fraud):

• To create and show your biodata to suitable members, and to calculate a match percentage between you and other members.
• To let members send, receive, accept and decline interests, and to share contact details after both sides agree.
• To check biodata and ID documents so that profiles are genuine, and to give the Verified badge.
• To sign you in, keep your account secure, and prevent misuse, fraud and impersonation.
• To sell and account for credits, issue receipts, and meet tax and accounting rules.
• To send you service messages: approvals, interests, receipts and safety notices, in the app and by e-mail. We do not send advertising.
• To handle reports, complaints and legal requests, and to improve the service.

Your biodata is shown only to members whose own biodata has been approved, who are of the opposite gender, and who meet each other's basic requirements (such as marital status). Blocked members never see you.

Other members can see everything in your biodata except the items in the next paragraph — for example your first name, age, district, education, profession, height, weight, marital status, fiqh, religious-practice and health answers, family details, written answers and partner preferences — and the Verified badge.

Other members cannot see: your surname, exact date of birth, police station, post office, PIN code and full address, mobile number, e-mail address or ID document.

Your full name and mobile number are revealed to another member only after you have accepted their interest (or they have accepted yours) and that member has chosen to use a credit to view them. This reveal is permanent for that person.

Our administrators can see your full biodata and, for verification, your ID document. Every view of an ID document is recorded in an audit log.

We do not sell your data and we do not show it to advertisers. We use a few service providers (called "processors") who handle data only on our instructions and for the purpose given:

• [SMS provider, e.g. MSG91]: sends and checks the SMS code when you sign in with your mobile number.
• Razorpay Software Private Limited: takes your payment and tells us it succeeded.
• Spaceship: the cloud servers where the service and its database run.
• An e-mail delivery provider: sends the e-mails you have asked for, to the address you confirmed.

We may disclose data where required by law, a court order or a competent authority, or to protect the safety of members or the rights of others. If the business changes hands, your data may pass to the new owner, who must honour this policy.

Information about religious belief and practice, and about health, is sensitive. We collect it only because a Muslim matrimony service cannot work without it, and only with your explicit consent (the tick-box at the end of the biodata form). You may leave optional questions unanswered.

If you upload an ID document: it is stored encrypted, only administrators can open it, every viewing is logged, it is used only to check your identity, and the file is permanently deleted 30 days after we approve or reject it. We keep only the fact that you were verified.

• While your account is active, we keep your biodata so the service can work.
• If you do not use the site for 90 days, your biodata is hidden automatically (we warn you at 75 days). It is not deleted, and one login brings it back.
• If you mark yourself "married" or hide your biodata, it stays stored but is invisible until you show it again.
• If you delete your account, your biodata is hidden at once. After a 30-day grace period (during which you can cancel) your personal data is permanently erased: biodata, preferences, interests, notes, notifications, consent records, ID records and files, and your mobile number and e-mail address.
• Payment records and the credit ledger are kept after deletion because tax and accounting law requires it. They are separated from your identity (no name, phone or e-mail).
• Security and audit logs are kept for as long as needed to investigate misuse. Backup copies are overwritten in the normal backup cycle (within [backup retention in days] days of erasure).

• Connections to the site are encrypted (HTTPS).
• Sign-in uses one-time codes sent to your phone; sessions can be ended and are cut off if a stolen sign-in token is replayed.
• ID documents are encrypted on disk; contact details are shown only after mutual consent and a credit.
• Administrator actions are recorded in an audit log; administrators have only the access their job needs.
• Automated checks limit repeated sign-in and payment attempts.

No system is perfectly secure. If a breach that affects your data occurs, we will inform you and the authorities as the law requires.

Under the DPDP Act you have the right to:

• Know what personal data we hold and how it is used — Settings → My data & privacy → Download my data gives you a copy as a file.
• Correct or complete your data — edit your biodata at any time (a rejected or new biodata is edited from the biodata page; to change details after approval, contact us).
• Erase your data — Settings → Delete my account (needs a code sent to your phone).
• Withdraw consent — deleting your account withdraws it. Withdrawing consent does not affect what was lawfully done before.
• Get your grievance heard — see section 14.
• Nominate another person to exercise your rights if you die or become unable to — write to us and we will record your nomination.

You must give accurate information, must not impersonate anyone, and must not make false or frivolous complaints.

We use only what is needed to run the site: a secure, HTTP-only cookie that keeps you signed in, and a small cookie that remembers your language. We do not use advertising or tracking cookies and do not run third-party analytics. If you sign in using Google's phone sign-in, Google reCAPTCHA runs on the sign-in page to block bots.

The service is for adults who are legally eligible to marry — at least 18 years for women and 21 for men. We do not knowingly collect data of anyone younger. If you believe a minor has registered, tell us and we will remove the profile.

Some of our providers (for example, sign-in and cloud services) may process data on servers outside India. We transfer data only to providers who protect it appropriately and only to countries not restricted by the Government of India under the DPDP Act.

If we change this policy in a way that matters, we will post the new version here with a new version number and date, and ask for your consent again where the law requires. The version you agreed to is recorded with your consent.

For any question, request or complaint about your personal data, or to exercise any right above, write to our Grievance Officer:

• Name: [Grievance Officer name]
• E-mail: [Grievance Officer e-mail]
• Phone: [Grievance Officer phone]
• Address: [Grievance Officer address]

We acknowledge requests within 3 working days and aim to resolve them within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India, as provided by the DPDP Act.

General contact: [contact e-mail], [contact phone].