Privacy Policy

This Privacy Policy explains how Kashnova Enterprise ("Delulu", "we", "us"), Mumbai, Maharashtra, India, collects, uses, shares and protects your personal data when you use the Delulu mobile app and the website deluludate.com (together, the "Service"). We act as the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and we also follow the Information Technology Act, 2000 and the rules made under it.

1. Data we collect

Some profile details, such as who you want to meet, may reveal sensitive information like your sexual orientation. You choose whether to share these, and we only use them to run the Service.

We do not collect your contacts, call logs, SMS inbox (except reading the OTP when you allow it), or payment card details.

2. How we use your data

• To provide the Service: your profile, discovery, matches, chat and notifications.
• To keep members safe: checking photos, reviewing reports, and acting on accounts that break our Terms or Community Guidelines.
• To secure accounts and prevent fraud, spam, scams and fake profiles.
• To send you service messages, for example a login code, a warning, or the result of a report.
• To comply with the law and respond to lawful requests from authorities.

We do not sell your personal data, do not share it with advertisers, and do not use it for behavioural advertising.

3. Consent and legal basis

We process your personal data on the basis of the consent you give when you create an account and accept this policy, and for legitimate uses allowed by the DPDP Act, such as complying with law or responding to a medical emergency or threat to safety. You can withdraw consent at any time by deleting your account. Withdrawing consent does not affect processing done before it, and without it we cannot provide the Service to you.

4. Your chats

Chats on Delulu are end-to-end encrypted. Messages are locked on your phone and can only be unlocked on your match's phone. Our servers hold a locked message only until your match's phone collects it, and then delete it. A message that is never collected is deleted after 7 days. Chat history is stored on your phones, not with us, and does not move to a new phone.

If you report a conversation, you can choose to attach messages to the report. Only those attached messages are shared with our safety team.

5. Who we share data with

• Other members see your profile: name, age, approved photos, approximate distance and the details you choose to add. They never see your phone number or exact location.
• Service providers who process data for us under contract and only on our instructions: cloud hosting and storage; MSG91 (Walkover Web Solutions, India) for OTP SMS; Google Firebase Cloud Messaging for push notifications; Amazon Web Services (Rekognition) for automated photo checks.
• Authorities when required by law, a court order, or to protect someone's life or safety.
• A successor if our business is merged or sold, with this policy continuing to apply.

6. Where data is stored

Your data may be processed on servers in India or in other countries used by our service providers. Where data leaves India, we only use providers with strong security safeguards, and we follow any restrictions notified by the Government of India under the DPDP Act.

7. How long we keep data

• Active account: while your account is active.
• Deactivated account: your profile is hidden and your data is kept so you can come back by logging in.
• Deleted account: you are logged out and removed from the app immediately. Your personal data is permanently erased within 30 days.
• Safety records: reports and moderation records are kept for up to 1 year after deletion, to protect members and stop banned users from returning.
• Undelivered chat messages: deleted from our servers after 7 days.
• Records we must keep by law are kept for the period the law requires.

8. Your rights

Under the DPDP Act you have the right to:

• Access: ask for a summary of the personal data we hold about you and how we use it.
• Correction and erasure: edit your profile in the app at any time, or ask us to correct, complete or erase your data. You can delete your account from Profile → Settings → Delete account or from our delete account page.
• Withdraw consent: by deleting your account.
• Grievance redressal: complain to our Grievance Officer (section 13).
• Nominate: name another person to exercise your rights if you die or become unable to.
• Complain to the Data Protection Board of India if you are not satisfied with our response.

You can also turn off notifications and location access in your phone settings at any time. To use any right, write to supportdelulu@gmail.com from your phone, including the mobile number on your account.

9. Security

We use HTTPS for all traffic, end-to-end encryption for chats, short-lived login tokens, automatic logout on suspicious activity, and limited, logged staff access. No system is perfectly secure, so please keep your phone locked and tell us at supportdelulu@gmail.com if you notice anything unusual. If a personal data breach happens, we will inform affected users and the Data Protection Board as the law requires.

10. Children

Delulu is only for adults aged 18 and over. We do not knowingly collect data from anyone under 18, and we delete accounts we believe belong to a minor. See our Child Safety Standards.

11. This website

deluludate.com does not use cookies, analytics or advertising trackers, and loads no third-party scripts or fonts. Our hosting provider keeps standard server logs (such as IP address and browser type) for security, for a short period.

12. Changes to this policy

We may update this policy. If the changes are important, we will tell you in the app before they take effect. The date at the top shows the latest version.

13. Contact and Grievance Officer

In line with the IT Rules, 2021 and the DPDP Act:

We acknowledge complaints within 24 hours and resolve them within 15 days.