Privacy policy

Version 2026-11-01. This policy explains how 2K Marriage processes your personal data as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

• Account data: phone number, email, sign-in identifiers, devices.
• Profile data you provide: personal details, education, career, family, lifestyle, values, Relationship DNA answers, partner preferences, photos and an optional video. Fields such as religion or community are optional and only ever taken from what you enter — we never infer sensitive characteristics.
• Verification data: documents you submit for optional identity, photo or employment checks. These are kept in restricted storage, visible only to authorised reviewers, and deleted 90 days after a decision.
• Activity: interests, connections and messages needed to run the service, and minimal pseudonymous usage events for operating it. Optional product analytics (PostHog) runs only after you allow it, and you can withdraw that in Settings → Consents at any time.
• No payment data: 2K Marriage is free. We do not collect card, UPI or bank details.

Why we use it (purposes and consent)

• To provide matchmaking: building your profile, computing mutual compatibility and showing recommendations.
• AI processing of your profile answers for explanations, smart search and assistants, with your consent (you can withdraw it in Settings; AI features then fall back to non-AI behaviour).
• Safety: preventing fraud, spam and abuse, with human review for serious decisions.
• Human review: our team reviews new profiles before they go live, and our matchmakers read profiles and partner preferences to hand-pick introductions.
• Customer support.
• Optional communications (marketing email, SMS, WhatsApp) only with your separate consent.

Who can see your data

• Profiles are visible only to signed-in members and never published on the open web. You control who sees photos, income and family details.
• Family members you invite see only what your chosen permissions allow.
• Our screening team and matchmakers can see your profile to review it and to choose introductions for you and for other members. Identity documents are seen only by authorised verification staff.
• Service providers who process data on our behalf: Supabase (database and file hosting), Anthropic (AI processing of profile text when enabled), Voyage AI (search embeddings when enabled), Resend (email), MSG91 (SMS), Meta (WhatsApp, if you opt in), Expo (push notifications), PostHog (product analytics, only if you opt in — pseudonymous usage events, never your name, contact details, profile text or messages).

Your rights

• Access and download a copy of your data from Settings.
• Correct or update your information at any time.
• Withdraw consent for optional processing.
• Delete your account; deletion completes after a 14-day grace period. Limited records are kept only where the law requires it.
• Nominate another person to exercise your rights in case of death or incapacity, and raise grievances with our Grievance Officer or the Data Protection Board of India.

Retention

Data-export archives are deleted after 7 days; verification documents 90 days after a decision; AI usage and analytics logs after 13 months; account data after deletion as described above.

Security

Encryption in transit and at rest, row-level access controls, private storage with time-limited links, mandatory multi-factor authentication for administrators and audit logging of administrative access. We will notify affected members and the Data Protection Board of a personal data breach as the law requires.

Children

The service is only for adults aged 18 and above. We do not knowingly process children’s data.