Privacy Policy

1. About this policy

Navri Mile Navryala Matrimony LLP (LLPIN AAF-9862), registered at 473, Fugewadi, Opp. Mega Mart, Pune, Maharashtra 411012, India, is the Data Fiduciary for the personal data described here. We operate the matrimonial platform at https://navrimilenavryala.com, an Android application for members, and an Android application for Suchaks (matchmakers).

This policy is version 2026-06-24, effective from 2026-06-24, last updated 2026-08-05. It is written to meet the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

A matrimonial profile is, by its nature, unusually revealing — it contains your religion, your caste, your family, your income, your health and your marital history. We have tried to describe exactly what happens to it, including the parts that are uncomfortable.

2. How your consent is recorded

You give consent when you tick the acceptance box and request a one-time password to verify your mobile number. At that moment we store, against your account: the type of consent (terms, privacy), the version string of the document you accepted, the date and time, your IP address, your browser or application identifier, and the language you were using.

This record is kept as evidence of consent for as long as your account exists. You may withdraw consent at any time, as described in clause 12. Withdrawing consent does not make our earlier lawful processing unlawful.

3. Personal data we collect — identity and account

• Your name and, where the profile is not your own, your relationship to the candidate (self, parent or guardian, sibling, relative, friend, other).
• Mobile number (and an optional backup number), and the date it was verified. The mobile number is your login identifier.
• Email address, if you give one, and the date it was verified.
• Password, stored only as a one-way cryptographic hash — we never see it and cannot recover it.
• Language preference and notification preferences.
• Your plan, plan status, start and expiry dates.
• A referral code, and if you arrived through a referral, the referring account, the IP address of your registration, and the campaign parameters in the link you clicked.

4. Personal data we collect — the candidate profile

This is the core of a matrimonial profile. Much of it falls into categories that deserve special care, and we treat it accordingly.

• Identity and demographics: full name, date of birth, time of birth, gender, mother tongue.
• Religion, caste and sub-caste — both your own, and the religion and caste you are willing to consider in a partner.
• Marital status and complete marital history: year of marriage, year of separation, year of divorce, legal status of a divorce, year of a spouse's death, and any note you add.
• Children: their gender, age, and who they live with.
• Location: your current residence down to village or city level, through the state, district and taluka hierarchy, plus a free-text address line; native place; and place of work.
• Education: degrees, specialisation, university and year.
• Occupation and employment: designation, employer name, type of employer, place of work, and career history.
• Income: your annual income (as an exact amount, a range, or a band), the currency and period, and whether you have marked it private. Family income is recorded separately.
• Property and assets: whether you own a house, flat or agricultural land, the area of land, agricultural income, estimated values and ownership type.
• Physical attributes: height, weight, complexion, build, blood group.
• Health and disability: whether you have a physical, hearing or vision condition or prefer not to say, and whether you use spectacles or contact lenses.
• Lifestyle: diet, smoking and drinking.
• Horoscope and birth details: place of birth, rashi, nakshatra, charan, gan, nadi, yoni, varna, vashya, rashi lord, mangal dosh status, devak, kul, gotra and birth weekday.
• Any pending or past court case you choose to disclose: type, court, case number, stage and next hearing date.
• Free text you write about yourself, your expectations, and any additional notes.
• Your partner preferences: age, height, income, education, marital status, location, diet, religion, caste, occupation, and how strictly each applies.

Some of this — religion, caste, health, disability, marital history, litigation and financial details — is sensitive. We collect it because a marriage proposal in this community is genuinely decided on these facts. We do not use it for advertising, we do not sell it, and we do not profile you for any purpose other than suggesting matches.

5. Personal data about other people that you give us

A matrimonial profile is unavoidably about a family, not only about one person. When you fill in a profile you give us personal data about people other than yourself, including:

• your father and mother — their names, occupations, notes about them, and up to three mobile numbers each;
• your brothers and sisters — names, gender, marital status, occupation, city, address and up to three contact numbers each, and the same for their spouses;
• your children — name, gender, age and who they live with;
• other relatives — the relationship, a free-text description, and a contact number;
• the families your family is already connected to by marriage — surnames and places.

When you enter these details you confirm that you are entitled to share them and that the person concerned knows. Please do not enter a phone number belonging to someone who would not want it here. Those numbers are also used to reach a candidate for consent when a Suchak asks to represent them, so an incorrect number causes a real person to receive a message that was never meant for them.

If your details appear on someone else's profile and you did not agree to that, write to our Grievance Officer at supportnavri@gmail.com and we will remove them.

6. Photographs, documents and biodata files

• Profile photographs. On upload, every photograph is automatically re-encoded and resized, and is scanned by an automated moderation system for nudity and for other prohibited content. The result of that scan, the approval or rejection status, the reason for a rejection, and any later admin decision are stored alongside the photograph.
• Photographs that have been through moderation, together with the scan result and the final decision, may be retained in an internal dataset used to improve that moderation system.
• Identity documents, if you choose to apply for identity verification. We accept a photograph or PDF of a government identity document. It is stored on private storage that is not publicly reachable, and is reviewed by our staff against your profile photograph. We store the document file and the review outcome. We do not extract or store your Aadhaar number, PAN number or any other identity number as a separate field.
• Biodata documents. Where a printed or handwritten biodata is uploaded — by you, by a Suchak, or through our WhatsApp intake — we store the original file, the full text extracted from it, and the structured fields extracted from that text. Extraction is done partly by automated services, including services operated by third parties (clause 9).
• A Suchak uploads their own identity documents (for example Aadhaar and PAN images) when their account is verified, along with their photograph, office details, UPI id and payment QR image.
• Payment proof documents and receipts uploaded in connection with a Suchak's collections.

7. Activity, interaction and technical data

• Interests you send and receive, and their status; shortlists; profiles you hide or block; and profiles you have viewed and who has viewed you.
• Chat messages you send on the Platform, including the message text, any image sent in chat, and read and delivery status.
• Contact requests, contact grants, and a record of each time a contact number is revealed — which member revealed which profile's number, and when. This record exists both for your protection and to meter your plan's quota.
• Notifications we generate for you.
• Match scores, the reasons computed for them, and behavioural signals — such as which suggestions you skipped — used to rank future suggestions.
• Login sessions: your IP address, browser or application identifier, and last activity time.
• Every one-time password request: the mobile number, a hash of the OTP (never the OTP itself in readable form), the number of attempts, expiry, your IP address, your browser or application identifier, and your language.
• The date and time you were last active on the Platform.
• A device registration token for push notifications, and the platform and app it belongs to.
• API access tokens issued to your app, and when they were last used.
• Reports made about you or by you, moderation decisions, and internal risk flags.
• Every earlier value of a profile field you have changed. Our governance system keeps a history of changes — the old value, the new value, who changed it and from where — so that a disputed edit can be traced.

We do not use any advertising network, analytics SDK, crash-reporting service, or tracking pixel. There is no Google Analytics, no Meta Pixel, and no third-party advertising identifier on this Platform.

8. Location data

Your residence, native place and work location are stored as entries in a standard Indian administrative hierarchy — country, state, district, taluka, village or city — plus any free-text address line you type.

If you use the "use my current location" feature, your device sends us GPS coordinates. We forward those coordinates to the OpenStreetMap Foundation's Nominatim service to convert them into a place name. The coordinates are held only in a short-lived cache to answer that lookup; we do not write them into your profile.

We do not track your location in the background, and we do not derive your location from your IP address.

9. Companies we send your data to

We use the following third-party service providers. Each one is named because our code actually sends data to it. We do not sell your personal data to anyone, and we do not share it for advertising.

• Meta Platforms (WhatsApp Business / Cloud API) — we send your mobile number and the one-time password to Meta so that the OTP reaches you on WhatsApp, because WhatsApp is the only channel we use to deliver OTPs. Meta also carries our consent-request messages, notification and reminder messages, the WhatsApp-based biodata intake conversation, and any media exchanged in it. Where a message shows profile information — for example a name, education, occupation and district, with a link to a profile — that content passes through Meta.
• PayU Payments Private Limited — when you pay, we send your name, email address, mobile number, the amount, the plan identifier, a transaction reference and our internal account identifier to PayU. Your card number, CVV and UPI PIN are entered on PayU's own page and never reach our servers. We store PayU's response to the transaction.
• OpenAI — we send uploaded biodata documents (as images or text) for automated extraction of the fields in them; profile photographs for automated moderation; and the text of a help-centre question you send us, when the automated help assistant is enabled. Biodata content includes names, dates of birth, phone numbers, caste, addresses and family details.
• Sarvam AI — used for the same biodata document and text extraction as above, and for a limited automated comparison between two profile summaries used in match scoring. Which of Sarvam or OpenAI processes a given document depends on our current configuration; both may.
• Google LLC / Firebase — for push notifications we send your device registration token and the notification content to Firebase Cloud Messaging. If you sign in with Google, your Google identity token (which contains your email address) is sent back to Google for verification. On the Suchak application, mobile number verification may use Firebase Phone Authentication, in which case your mobile number is processed by Google. Our public pages also load fonts from Google, which means Google receives your IP address and browser identifier when you visit.
• OpenStreetMap Foundation — GPS coordinates, only when you use the "current location" feature, as described in clause 8.
• Content delivery networks (Bunny Fonts, jsDelivr, Cloudflare cdnjs) — these serve fonts and scripts on some pages, and therefore receive your IP address and browser identifier.
• Our email service provider (supportnavri@gmail.com domain) — where we send you an email, for example a password change alert.

We also use our own servers, located in India, and a photograph-moderation component that we operate ourselves.

For clarity, and because they are often assumed: we do not use any SMS gateway, any analytics or crash-reporting service, any advertising network, Apple or Facebook sign-in, or any third-party cloud photo storage. Your photographs and biodata files are stored on our own servers.

10. Who can see your data on the Platform

Not everything on your profile is visible to everyone. In summary:

• Other members can see your profile as your visibility settings allow. Your mobile number is not published openly.
• Your contact number is governed by a rule you choose — visible to anyone, only after you accept an interest, only to sufficiently well-matched profiles, or to no one. You may additionally require the viewer to be photo-verified or identity-verified. Beyond your rule, revealing a number normally also requires the viewer to hold a paid plan with a contact-reveal entitlement, and each reveal is recorded.
• A Suchak who represents you sees and can edit your full profile, exactly as you see it, including your stored contact numbers. This access exists only after you have accepted a consent request sent to a number already on your profile. Before you accept, the Suchak is shown nothing at all about you — not even your stored numbers — and cannot read or edit anything. Consent has an expiry date and you may revoke it at any time; access closes again immediately.
• Other Suchaks — those who do not represent you — see a masked version. Your name, your village, your detailed address and your mobile number are hidden by default. Your photograph is visible to them, because a matchmaker who cannot see a face cannot propose a match, and it carries a watermark naming the Suchak viewing it so that misuse can be traced. Only the Suchak who represents you may choose to reveal any of the four hidden items, and only for you. Search filters that could be used to guess a masked value — searching by name, or by an exact income range, or narrower than taluka — are refused.
• Our staff can see profile data where it is necessary to moderate content, review an identity document, investigate a complaint, resolve a data conflict or provide support. Staff actions on a profile are logged.
• Profiles created by the Platform for demonstration ("Showcase Profiles") may view your profile and interact with you automatically. They are not real people and no human reads your data through them; the interaction is generated by software. This is described in clause 9 of the Terms at https://navrimilenavryala.com/terms.

11. Why we use your data, and on what basis

We process your personal data on the basis of the consent you gave at signup, and for the specific purposes below. We do not use it for any incompatible purpose.

• To create and publish your profile, and to let other members and Suchaks find it.
• To verify your mobile number and to sign you in.
• To compute matches, scores, explanations and suggestions from your profile and your stated preferences.
• To let members express interest, exchange messages and — subject to clause 10 — exchange contact numbers.
• To operate the Suchak consent system, so that nobody is represented by a matchmaker they have not agreed to.
• To extract fields from an uploaded biodata document so that a profile can be created without retyping it.
• To moderate photographs and content, to detect fraud and duplicate profiles, and to protect members from harassment and abuse.
• To take payment, issue invoices and maintain financial records.
• To send you service messages, including OTPs, consent requests, interest and message notifications, and — where you have opted in — reminders.
• To answer your questions and handle your complaints.
• To comply with law, and to respond to a lawful order of a court or an authorised government agency.

12. Your rights

Under the Digital Personal Data Protection Act, 2023 you have the following rights. To exercise any of them, contact our Grievance Officer at supportnavri@gmail.com or telephone 91284 92284. We may verify your identity — normally by an OTP to your registered mobile number — before we act, so that nobody else can obtain or delete your data. We respond within 30 days.

• Access — a summary of the personal data we hold about you, how we are processing it, and the third parties we have shared it with.
• Correction and completion — you can edit most of your profile yourself in the app or on the website; for anything you cannot, write to us.
• Erasure — see clause 13.
• Withdrawal of consent — you may withdraw the consent you gave at signup, and you may separately revoke a consent you gave to a Suchak, which immediately ends that Suchak's access to your profile.
• Nomination — you may nominate a person to exercise these rights on your behalf if you die or become unable to act.
• Grievance redressal — a complaint route that does not depend on going to court, described at https://navrimilenavryala.com/grievance.

13. Deleting your account and your profile

You can delete your account yourself, from the member application: Settings, then Account, then Delete account. Step-by-step instructions are at https://navrimilenavryala.com/delete-account. If you cannot use the application, write to supportnavri@gmail.com, telephone 91284 92284, or write to 473, Fugewadi, Opp. Mega Mart, Pune, Maharashtra 411012, India, quoting the mobile number registered with us.

Your profile stops being visible the moment you confirm. Nothing is erased for 30 days, so that you can cancel and get everything back exactly as it was. After that window the erase runs and cannot be undone by you, by us, or by support.

One consequence is worth stating plainly. Messages you sent to another member stay in that member's conversation, because that conversation is their record as much as yours. You are removed from it: your name, photograph and profile disappear from their view and your profile can no longer be opened, so you cannot be identified from what remains.

Similarly, a contact number another member unlocked before you left is already on their device. We erase it from our systems, but we cannot retrieve it from theirs.

What we keep, and why:

• Records we are required by law to keep, in particular payment, invoice and tax records, which are retained for 8 years.
• The record of your consent at signup, retained as evidence that consent was given.
• Records needed to defend or pursue a legal claim, or to comply with a court or government order, for as long as that need lasts.
• Change-history entries showing that a field was edited. These are part of our governance and dispute-resolution trail.
• Copies inside routine encrypted backups, which are overwritten on their own cycle.
• Data that is genuinely no longer identifiable, such as aggregate counts.

If you want the retained items reduced to the legal minimum, say so in your request and we will tell you exactly what we are obliged to keep and why.

14. How long we keep your data

We keep personal data only as long as the purpose it was collected for requires, and then for any period the law requires.

• An active profile and its data are kept for as long as your account is open.
• In-app notifications are automatically deleted after 90 days.
• Payment, invoice and tax records are kept for 8 years.
• Consent records — including Suchak consent records, with the IP address and device identifier captured at the time — are kept as evidence for as long as the account and any related claim period lasts.
• Uploaded biodata documents are kept while the intake is being processed and reviewed. Where a retention period is configured, the original file is deleted from storage at the end of it; the fields extracted from it remain on the profile they created.
• Identity verification documents are kept while the verification is valid, and are deleted on request once the verification is no longer relied on.
• Suchak accounts that were started but never completed and never used are deleted after 30 days.
• If your account has been inactive for more than 24 months you may ask us to close it, and we may contact you before doing so ourselves.

15. Security

We take reasonable security safeguards as required by Section 8(5) of the Digital Personal Data Protection Act, 2023.

• Passwords are stored only as one-way hashes. One-time passwords are stored as hashes and expire quickly.
• Identity documents, biodata files and payment proofs are stored on private storage that is not reachable by a public web address.
• The site and both applications communicate over encrypted connections.
• Access to member data by our staff is restricted by role, and administrative actions are logged.
• Contact numbers are masked by default in every cross-Suchak view, and search filters that could be used to reverse a mask are refused.
• When your password is changed, every other session and API token for your account is invalidated and you are notified.
• No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and every affected user, as required by law.

16. Where your data is stored

Our servers are located in India and your profile data, photographs and documents are stored there.

Some of the service providers named in clause 9 process data outside India. Where that happens, the transfer is limited to what that service needs — for example, a mobile number and an OTP sent to Meta, or a biodata document sent for automated extraction — and is subject to that provider's own obligations. We do not transfer personal data to any country to which such transfer is restricted by the Central Government.

17. Children

The Platform is not for children. A profile may only be created for a person who has reached the minimum legal age of marriage — 21 years for a man and 18 years for a woman — and this is enforced at registration and in every match query.

We do not knowingly collect the personal data of a child. If you believe a profile has been created for a person below the minimum age, tell us at supportnavri@gmail.com and we will remove it.

The one exception is that a member may record the gender, age and living arrangement of their own children. That information is provided by the parent for the purpose of an honest matrimonial disclosure, and no profile is created for the child.

18. Cookies and similar technologies

The website uses only the cookies it needs to work: a session cookie to keep you signed in, a security token cookie to prevent cross-site request forgery, and a cookie remembering whether you chose Marathi or English.

We do not use advertising cookies, tracking cookies or any third-party analytics cookie. Fonts and a small number of scripts are loaded from the content delivery networks named in clause 9, which see your IP address as a normal consequence of serving a file.

19. Changes to this policy

We may update this policy. The version and effective date at the top of this page always tell you which version applies. Where a change is material we will notify you through the Platform, and where the law requires it we will seek your consent again.

20. Contact us

For any question about this policy, or to exercise a right described in clause 12, contact our Grievance Officer. Full details and escalation routes are at https://navrimilenavryala.com/grievance.

Data Fiduciary

Navri Mile Navryala Matrimony LLP

Registered office

473, Fugewadi, Opp. Mega Mart, Pune, Maharashtra 411012, India

Grievance Officer

Shankar Pawar

Email

supportnavri@gmail.com

Telephone

91284 92284

Website

https://navrimilenavryala.com