Privacy Notice
Version 2026-10-04
the operator of GARBAJodi (“we”) processes your personal data to run GARBAJodi. This notice explains what we collect, why, who receives it, how long we keep it, and your rights under the Digital Personal Data Protection Act, 2023.
What we collect and why
| Data | Purpose | How long |
|---|---|---|
| Account: email, password (stored only as a hash), display name | Sign-in, account emails (verification, password reset) | Until you delete your account; the email and sign-up date are kept 180 days after deletion, as the IT Rules require |
| Profile: name, age, gender, city, bio, interests, dance preferences, photos, optional intro video, optional college and course | Showing your profile and plans to other users, suggesting compatible people and plans | Until you change or delete it, or delete your account |
| Discovery settings: who you want to see (gender, age range), whether you appear | People-for-you suggestions, only if you turn discovery on | Until you change them or delete your account |
| College email (if you choose to verify it) | Confirming the college email badge | The verification result is kept; the email link expires in 1 hour |
| Plans, interests, jodis, messages, feedback you give | Running the service | Until deleted by you or with your account |
| Blocks and reports you make | Safety and moderation | Blocks until removed; reports and their evidence at least 180 days |
| Notifications, notification and email preferences, browser push registration | Sending the notifications you chose | Until you change them or delete your account |
| Consent records (which policy version you accepted and when) | Proving consent | Kept as a record of consent |
| Technical logs (request path, time, error details) | Security, fixing problems, detecting misuse | Up to 1 year |
We do not collect your date of birth, phone number, government ID, Aadhaar, precise location or contacts, and we do not use analytics or advertising trackers. We do not sell personal data. Suggestions use only dance preferences, event and timing, college, shared interests and verification badges; they do not use religion, caste, health or similar attributes.
What other users see
Other users see your name, age, city, bio, interests, dance preferences, photos, college (if added) and badges. They never see your email address. Public plans (title, place, time, your first name, age and college) can be seen by anyone, including people who are not signed in. You can make your profile private or stop appearing in suggestions in your settings.
Who processes data for us
- Cloud hosting and database (MongoDB Atlas) — stores the service’s data.
- Cloudinary — stores and delivers photos and videos.
- Email delivery (Resend or our SMTP provider) — sends account and notification emails.
- Your browser’s push service (only if you enable push notifications).
- Google (only if you choose “Sign in with Google”).
Your choices and rights
You can access and download your data, correct it, delete your account, withdraw optional consents (such as marketing email) and nominate someone to act for you. See Your data rights. We answer requests within 90 days at most. If you are not satisfied, you can complain to the Data Protection Board of India.
Security and breaches
Passwords are hashed; connections are encrypted; staff access to user data is role-limited and logged. If a personal data breach affects you, we will tell you and the Data Protection Board as the law requires.
Children
GARBAJodi is for people aged 18 or over. We do not knowingly process children’s data; accounts found to belong to minors are closed.
Contact
Privacy questions: the Grievance Officer form.