Privacy Policy
Last updated: June 2026
1. Introduction
FindMyNikah ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our matrimonial platform and services.
We operate in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and other applicable data protection laws. By using our services, you consent to the practices described in this policy.
2. Data Fiduciary
FindMyNikah acts as a Data Fiduciary under the DPDP Act, 2023. We determine the purpose and means of processing your personal data. We are committed to processing your data lawfully, fairly, and in a transparent manner.
Entity: FindMyNikah
Contact: privacy@findmynikah.com
3. Information We Collect
We collect the following categories of personal data:
| Category | Data Points | Required |
|---|---|---|
| Account Data | Email address, phone number, username | Yes |
| Profile Data | Full name, age, date of birth, gender, height, profile photos | Yes |
| Religious Data | Religion, madhab (school of Islamic jurisprudence), religiosity level, fasting, salah frequency, Quran reading habits, hijab/beard preference | Yes |
| Personal Data | Marital status, education, field of study, occupation, employment, annual income, languages spoken, hobbies, bio | Partial |
| Location Data | City, state, country, citizenship | Yes |
| Family Data | Family details, partner preferences (provided by you) | Optional |
| Verification Data | Government-issued ID (deleted after verification), LinkedIn profile URL | Optional |
| Communications | Messages sent through the platform, proposals, match interactions | Yes (when used) |
| Payment Data | Transaction records, subscription status (card details are never stored by us — processed by Razorpay) | Yes (for paid plans) |
| Device & Log Data | IP address, browser type, device type, operating system, access timestamps | Automatic |
| Usage Data | Pages visited, features used, match interactions, profile views (anonymized) | Automatic |
4. Purpose of Processing
We process your personal data for the following specific purposes:
Provide and operate the matrimonial platform
Account creation, profile management, authentication, customer support
AI matching and compatibility scoring
Analyzing profile data to generate match suggestions and compatibility scores
Display your profile to potential matches
Per your visibility settings (Public, Verified Only, Sisters-Only, Private)
Process payments and manage subscriptions
Billing, refunds, subscription management through Razorpay
Detect and prevent abuse
Fraud prevention, fake profile detection, harassment prevention, security monitoring
Communicate with you
Account notifications, service updates, match notifications, OTP delivery
Legal compliance
Complying with applicable laws, responding to legal process, enforcing our terms
5. How We Obtain Consent
We obtain your consent through clear affirmative action when you:
- Create an account (explicit consent checkbox)
- Provide optional profile data (religious preferences, family details)
- Enable optional features (Wali involvement, photo sharing)
- Grant notification permissions
Withdrawing consent: You can withdraw consent at any time by:
- Updating your profile settings (for optional data categories)
- Disabling features in your account settings
- Contacting our Grievance Officer at grievance@findmynikah.com
- Deleting your account (Settings > Account > Delete Account)
Withdrawal of consent for essential data (name, email, gender, age) may result in account deletion, as this data is necessary to provide the service.
6. Data Protection & Security
We implement industry-standard technical and organizational measures to protect your data:
- Encryption in transit: TLS 1.3 for all data transfers
- Encryption at rest: AES-256 encryption for stored data
- End-to-end encryption: All messages are encrypted end-to-end
- Photo protection: Watermarked, blurred by default, screenshot blocking on supported devices
- Access controls: Role-based access, least privilege principle, audit logging
- Infrastructure: Hosted on Oracle Cloud with SOC 2 compliance
7. Third-Party Recipients
We share personal data with the following third-party service providers for the purposes described below. We do not sell your personal data to anyone.
| Recipient | Purpose | Data Shared |
|---|---|---|
| Razorpay | Payment processing | Email, transaction amount, subscription plan |
| Brevo (Sendinblue) | Transactional email (OTP, notifications) | Email address |
| MSG91 | SMS OTP delivery | Phone number |
| Oracle Cloud Object Storage | Photo storage | Profile photos, blurred versions, thumbnails |
| OpenAI | AI matching (GPT-4o-mini) | Anonymized profile data for compatibility scoring |
| Cloudflare | CDN, DDoS protection, SSL | IP address, request metadata |
| Bugsnag | Error tracking (production only) | Error logs, device info (anonymized) |
8. Data Retention
We retain personal data for the following periods:
| Data Category | Retention Period |
|---|---|
| Profile data | Account lifetime + 30 days after deletion |
| Messages | 1 year from date sent, then deleted |
| Payment records | 7 years (Indian tax/legal requirements) |
| Verification data (ID) | Deleted immediately after verification |
| Usage analytics | 2 years (anonymized) |
| Security/access logs | 1 year (DPDP Act requirement) |
| Device & log data | 90 days |
9. Data Localization
Your personal data is stored on servers located in India (Oracle Cloud Infrastructure, Mumbai region). We do not transfer your personal data to countries outside India except as described in Section 7 (third-party recipients) and where necessary for payment processing. Where cross-border transfers occur, we ensure appropriate safeguards are in place as required under the DPDP Act, 2023.
10. Data Breach Notification
In the event of a personal data breach, we will:
- Notify affected users within 72 hours of discovering the breach via email and in-app notification
- Notify the relevant data protection authority as required under the DPDP Act, 2023
- Provide information about the nature of the breach, data affected, and remedial measures taken
- Implement measures to mitigate the impact and prevent recurrence
11. Your Rights as a Data Principal
Under the DPDP Act, 2023, you have the right to:
- Access — Obtain confirmation of whether your personal data is being processed and access to such data
- Correction — Request correction of inaccurate or incomplete personal data
- Erasure — Request deletion of your personal data within 7 days
- Grievance Redressal — Escalate unresolved complaints to our Grievance Officer
- Nominate — Nominate a person to exercise your rights in case of your death or incapacity
To exercise these rights, contact our Grievance Officer at grievance@findmynikah.com or use the in-app settings (Settings > Privacy & Data).
12. Data Sharing
We do not sell, trade, or share your personal data with third parties except:
- With your explicit consent (e.g., sharing your profile with a match)
- To comply with legal obligations, court orders, or government requests
- To protect our rights, privacy, safety, or property
- In connection with a merger, acquisition, or sale of assets (with prior notice)
- With the third-party recipients listed in Section 7 for the stated purposes
We may share anonymized, aggregated data for research purposes that does not identify individual users.
13. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy.
14. Children's Privacy
FindMyNikah is not intended for users under 18. We do not knowingly collect data from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete such information promptly. Parents or guardians who believe a minor has provided us with data should contact us immediately at grievance@findmynikah.com.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date and, where appropriate, by email notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.
16. Contact & Grievance Officer
For any questions about this Privacy Policy or to exercise your data principal rights, contact our Grievance Officer at grievance@findmynikah.com.
We aim to acknowledge all complaints within 24 hours and resolve them within 30 days of receipt. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India as constituted under the DPDP Act, 2023.
For IT Act, 2000 related matters, you may also contact the Cyber Crime Cell or the Indian Computer Emergency Response Team (CERT-In).