Privacy

This explains what we hold about you, why, and what you can ask us to do with it. It is written to be read, not to protect us.

Who we are

Indian Christian Dating is operated by [LEGAL ENTITY NAME], based in [CITY, COUNTRY]. We are the data controller for everything described here. You can reach a person at [privacy@yourdomain].

What we collect

What you give us

• Account: your email address and password. The password is stored hashed — we never see it.
• Profile: your name, date of birth, gender, who you're looking for, where you live, where your family is from, languages, your church and how often you attend, your work and education, and what you write about yourself.
• Where you stand: marital status, children, how soon you hope to marry, your family's role, how you feel about other denominations and communities, alcohol, smoking, long distance.
• Photos: the images you upload.
• Messages: what you write to other members, and the notes you send with an expression of interest.
• Reports: if you report someone, what you tell us and who it's about.

What we record ourselves

• When you signed up, when you submitted your profile for review, and when we approved it.
• Who you expressed interest in, who you matched with, who you blocked.
• Whether you opted in to the newsletter.

How we use it

Beyond running the service and matching you, we analyse member data to understand how people use the site, to measure what works, and to improve how we match people — including by training our own matching and recommendation models on member data. We also use analytics and advertising tools that set cookies and collect usage data about your visits.

[LAWYER: this needs a lawful basis per purpose. Analytics and advertising almost certainly require prior consent (UK/EU PECR and GDPR, plus a cookie banner). Training models on profile data needs its own basis, and profile data includes religious belief — special category data, which requires explicit, separately-obtained consent for each purpose. Advertising use of religious belief is high risk and may not be lawful at all. Do not enable any of this before this section is reviewed.]

Your faith is sensitive data

Your denomination, church and attendance are religious beliefs, which UK, EU and several other privacy laws treat as a special category of personal data. You give them to us voluntarily, we use them only to match you and to show you to members you could realistically marry, and by submitting your profile you are giving explicit consent for that use. You can withdraw it by deleting your account.

Who can see what

• Before we approve you: nobody but you and the person reviewing your profile.
• After we approve you: approved members who match your gender preference can see your profile and photos. Members you have blocked cannot.
• Your email address: never shown to other members.
• Your photos: stored privately. Each view is granted a link that expires within the hour, so an image can't be passed around indefinitely — though anyone can still screenshot what they see.
• Your messages: readable by you and the person you're talking to. We can read them if a report is made, and only then.

Who handles data for us

These providers process data on our instructions and nothing else:

• Supabase — the database, sign-in, and photo storage.
• Vercel — runs the website.
• Resend — sends our emails.
• [FORM PROVIDER] — the newsletter signup on our public site.

Because our members are in different countries, your data may be stored or accessed outside your own, including in the EU, the US, the Gulf and India. Where the law requires a legal basis for that transfer, we rely on standard contractual clauses. [LAWYER: confirm transfer mechanism and add UK IDTA / EU SCC references.]

How long we keep it

• Your account: until you delete it.
• After you delete it: your profile, photos, messages and matches are removed immediately.
• Reports and blocks: kept after deletion, because they protect other members. We keep the minimum needed for that.
• Rejected applications: [RETENTION PERIOD] months, so we don't re-review the same application repeatedly.
• Email logs: our provider keeps delivery records for a short period.

Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, stop using it, or send it to you in a portable file. Most of this you can do yourself: edit your profile any time, and delete your account from Settings.

• In the UK and EU you can complain to your data protection authority — in the UK, the ICO.
• In California you have the right to know, delete, correct, and not be discriminated against for asking. We do not sell personal information.
• [LAWYER: confirm whether a UK/EU representative is required, and add the ICO registration number if we must register.]

Security

Traffic is encrypted. Access to member data is limited by database-level rules, not just by our app, so a bug in the website cannot expose one member's data to another. Photos are private by default. Admin access is limited to named people. No system is perfect — if a breach affects you, we will tell you, and we will tell the regulator where we must.

Age

This service is for adults. You must be 18 or over to hold a profile; the database itself refuses a younger date of birth. If we find an account belongs to someone under 18 we delete it.

Cookies

We use a cookie to keep you signed in, which the service cannot work without. We also use analytics and advertising cookies to understand how the site is used and to measure marketing. [LAWYER: in the UK and EU these require opt-in consent before they are set, which means a cookie banner and a way to withdraw consent. The app has neither yet.]

Changes

If we change how we use your data in a way that matters, we will update the date at the top and email members before it takes effect.