Privacy policy

Draft: this is starting text. It needs a lawyer's review and company details before launch.

[Company name] runs Coy and is responsible for your data under the Digital Personal Data Protection Act, 2023.

What we collect

• Your phone number, to log you in and to match you.
• An email address, only if you add one, so people who have it can find you.
• The phone numbers and emails you add, and the private names you give them.
• Payment records from Cashfree or the app stores. We never see your card or UPI details.
• A device token, if you allow notifications in the app, so we can send them to your phone.
• Whether you use the website, the home screen web app or a phone app, and when you last used it, so we can see how Coy is used.
• Basic technical logs, such as IP address, to stop abuse.

People who were added but haven't joined

If someone adds your number or email, we store it so we can tell you and check for a match. We may message you when someone adds you, and remind you each week while you're on a list. Every message has a link to stop all messages, and you can also opt out at Stop messages.

How we protect it

Phone numbers and emails are stored as keyed hashes for matching and encrypted for messaging. Names you write are encrypted. Only you see your list. We never show anyone who added them.

How long we keep it

Entries on a list are deleted 180 days after they were added, unless they become a match. Deleting your account deletes your number, your list and your matches straight away. People you matched with keep their side. We keep a record of contacts we've messaged or who opted out, so an opt-out keeps working.

Where it's stored

Our database and servers are in Singapore.

Who we share it with

Only the services that run the app: our SMS, WhatsApp, email and notification providers (including Google and Apple) to send messages, Cashfree and the app stores for payments, and our hosting providers. We don't sell data or show ads.

Your rights

You can see, correct or delete your data, withdraw consent, and complain to us or to the Data Protection Board of India. Write to [support email].

Age

Coy is only for people 18 or older. If we learn an account belongs to someone younger, we delete it.

Grievances

Grievance officer: to be named before launch. We acknowledge complaints within 24 hours and resolve them within 15 days.