Privacy Policy

What we collect

On the marketing site and waitlist:

• Email address you submit on the waitlist form.
• Theme preference (light/dark) stored in your browser local storage.

In the mobile app:

• Phone number for OTP login, or Google account identifier and email.
• Profile data: name, date of birth, gender, interests, prompts.
• Photos and related metadata you upload, including verification selfies where requested.
• Discovery, likes, matches, messages, blocks, and unmatch actions.
• Device and app data: device type, operating system, push token, diagnostic logs.
• Support correspondence.

We do not ask for precise GPS location. Distance preferences are set by you.

Purposes

We process personal data to create and secure accounts, match and connect users, deliver messages, moderate safety, review media, send push notifications, provide support, and comply with law. We do not sell personal data.

Consent

We request consent where required and process data only for the stated purposes. You can withdraw consent by deleting your account or contacting us. Withdrawal may limit or end service features.

Children

Thirki is for adults 18+. We do not knowingly collect or process data from anyone under 18. If we learn of such data, we delete it. We do not track or serve targeted advertising to children.

How categories, purposes, and recipients fit together

Account data (phone number for OTP login, or Google account identifier and email) is used to create, secure, and operate your account and to comply with law. It is processed on Microsoft Azure, with sign-in supported by Google Sign-In or our phone OTP provider where you use that method.

Profile data (name, date of birth, gender, interests, prompts) is used to operate the service and match and connect users. It is processed on Microsoft Azure.

Photos and related metadata you upload are used to operate profiles, connect users, and support safety and moderation. Uploaded photos are reviewed before they become visible to others. They are stored on Cloudflare R2 with account records on Microsoft Azure.

Activity data (discovery, likes, matches, messages, blocks, and unmatch actions) is used to deliver matching, chat, and safety and moderation features. It is processed on Microsoft Azure.

Device and app data (device type, operating system, push token, diagnostic logs) is used to operate the app, send push notifications, and support safety and fraud prevention. Push delivery uses Firebase Cloud Messaging (FCM), with app records on Microsoft Azure.

Support correspondence is used to provide support and comply with law. It is processed on Microsoft Azure.

Service providers

We use service providers for cloud hosting (Microsoft Azure), media storage (Cloudflare R2), Google Sign-In, OTP/SMS delivery through our phone OTP provider, and push notifications (Firebase Cloud Messaging). They process data only on our instructions and under contract. Personal data is processed in India or in provider regions, and transfers take place only where permitted under the DPDPA.

Retention

We keep different categories of data for different periods:

• Profile and activity data is kept while your account is active and until you delete your account, or until we close an account inactive for 24 months and delete or anonymize the data, subject to safety and legal needs below.
• Safety evidence (such as reports, blocks, and moderation records) is kept only as needed for safety, fraud prevention, dispute resolution, and legal compliance.
• Security and diagnostic logs are kept for up to one year.
• Backups are overwritten on a rolling basis, so deleted data disappears as backups cycle.

Your responsibility for what you share

You are responsible for information you choose to share with other users. Sharing personal, contact, or banking details with others is at your own risk. Do not post contact, banking, or payment details publicly in your profile, photos, or prompts.

Your rights

Subject to applicable law, you may request access, correction, and deletion of your personal data, withdraw consent, nominate another person for post-death handling where permitted, and raise a grievance. To delete your account, use “Delete account” in the app or follow our Account Deletion page. To make other requests, email us. We verify identity before acting.

Automated processing and companions

Companion replies in chat are generated by automated systems. Chat content is processed to produce those replies. Profile discovery uses your preferences and interactions.

Cookies and local storage

The site stores your theme preference in local storage. We do not use third-party advertising cookies on the marketing site. See our Cookie Policy.

Security

We use transport encryption and access controls and monitor for abuse. No system is perfectly secure. If we learn of a data breach affecting you, we will notify you as required by law.

Grievance and escalation

Contact our Grievance Officer for privacy questions or complaints. If unresolved, you may escalate to the Data Protection Board of India.

Changes

We may update this policy as the product evolves. The “Last updated” date will change when we do.

Contact

Questions about this policy or your data: contact@thirki.com.