Privacy Policy

Gmatri is a Tamil-first matrimony service offered under the brand “Guruji Matrimony by Aditya Guruji”. It is run by a sole proprietorship: [to be confirmed], sole proprietor, trading as [to be confirmed], with its office at [to be confirmed] (“Gmatri”, “we”, “us” or “our”). We decide why and how your personal data is used, so we are the Data Fiduciary for it under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

This policy explains what personal data we collect through our website, our mobile apps and related services (the “Service”), why, who we share it with, where it is stored, how long we keep it, how we protect it, and your rights. It is written to meet the DPDP Act and the Digital Personal Data Protection Rules, 2025; the Information Technology Act, 2000 and — for as long as they apply — the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (the “IT Rules”).

A short version of this policy, in English and Tamil, is our privacy notice — the notice you accept when you sign up. Using the Service is also subject to our Terms of Service.

Here is each kind of personal data we collect and the specific purpose we use it for. Details marked “required” are needed to have an account or a profile; everything else is your choice.

Mobile number (required)

To create your account and sign you in with a one-time password (OTP) sent by SMS — or, for some numbers outside India, by WhatsApp; to keep one account per number; to send the account and service messages you allow; and — only as your contact settings allow — to share with members you have accepted.

Email address (optional)

For account recovery and verifying your email, receipts if paid features are introduced, and the email summaries you turn on.

Profile basics

Name, gender, date of birth, marital status and children (required); mother tongue, height, physical status (including, if you choose to say, that the member is differently abled), complexion and body type, diet, drinking and smoking habits, languages, interests, skills, your “about me” and prompt answers. To build the profile and show it to members, to check the minimum age for marriage (section 16), and to find matches.

Who created the profile (required)

Whether the profile is for yourself, a son, daughter, brother, sister, relative or friend; the creator’s name; and, if given, the phone number of the person the profile is for. To show on the profile who manages it, as matrimonial-site rules require, and to let that person claim the profile.

Religion and community

Religion, caste, sub-caste, gothram, kuladeivam, sect or jamaat, and whether you are open to other communities. Many families consider these when arranging a marriage, so we show them on your profile and use them in the searches and filters that members choose. Add only what you are comfortable sharing.

Where you live and your background

Country, state and city, native place, ancestral state, citizenship, residency status and willingness to relocate. To show on your profile and use in searches and matches. We do not use your device’s location.

Education and work

Highest qualification, field of study, college, type of employment, occupation, designation, employer, work city and annual income range. To show on your profile and use in searches and matches.

Family

Family type, status and values, family income, parents’ names and occupations, the number of brothers and sisters, a description of the family, a family contact number and whose number it is, the marriage timeline, how much the horoscope matters, and who makes the decision. To show on your profile; the family contact number is shared only as your contact settings allow.

Horoscope

Date, time and place of birth (with the map coordinates and time zone of that place), the chart we calculate from them (rasi, nakshatra, lagna, planetary positions and dasha periods), dosham details, and a link to an existing horoscope if you add one. To draw your horoscope and show the porutham reference to members. We calculate these on our own servers.

Partner preferences

The age, height, community, location, education and other preferences you set. To choose which profiles we show you.

Photos and voice introduction

Your profile photos (and where to centre them) and an optional recorded voice introduction. To show to members as your visibility settings allow. Photos are checked automatically when uploaded (section 4).

Your activity on Gmatri

Interests you send, receive and accept; shortlists, blocks and reports; photo and contact requests; the profiles you view and who viewed yours; your daily picks; and when you were last active or online. To run these features — for example, a member can see that you viewed their profile — and to keep members safe. Online and last-active status are shown only as your settings allow.

How you use Gmatri

Which Discover pages you open and how many profiles they showed, which filters were in force, how many results a search found (never what you searched for), and the card view you choose. Recorded by Gmatri itself — no third-party analytics — and linked to your account only to count visits, not to show anyone. To learn which features work and improve them. Kept 90 days.

Chats

Text messages, voice notes, and when messages were delivered and read. To deliver your messages. They are checked automatically, and our team reads a conversation only if it is reported (section 4).

Identity verification (optional)

The type of ID document you choose (Aadhaar, passport, PAN, voter ID, driving licence or other), a photo of that document, a selfie, the liveness and face-match scores from our automated check, and the outcome. To check that you are a real person whose face matches the document, and to show the Verified badge. We do not type in or store your ID number separately, but the photo shows what is printed on the card — for Aadhaar, please upload a masked Aadhaar (only the last four digits visible). We delete these images as soon as the check is decided (section 10).

Your settings

Language, notification choices, photo and contact visibility, and display preferences. To apply your choices.

Device and technical data

Sign-in sessions (the kind of device and platform), a push-notification token for the app, your IP address, and technical details in error reports. To keep you signed in and your account secure, prevent misuse such as repeated OTP requests, deliver the notifications you allow, and fix faults.

Messages with us

What you tell us in complaints, requests and emails. To answer you and keep a record of how we handled it.

• Your device’s precise location (GPS), your contacts or your call logs.
• Card or bank details — nothing is sold through the Service today.
• Advertising identifiers. We use no advertising or third-party analytics trackers.

The app asks for your camera, photo library and microphone only when you choose to add a photo, an ID document, a voice introduction or a voice note, and for notifications only if you turn them on.

• Your profile is shown only to signed-in members, in matches and searches for a partner of your gender — not to the public or to search engines — and never to members you have blocked or while your profile is hidden.
• Your photos are shown as you choose: to everyone, only to members you have accepted, only to members whose request you approve, or to no one. Others see a blurred preview. We add a “Gmatri” watermark to profile photos and remove the location data hidden inside photo files.
• Your phone number and family contact number are shared only after you and the other member have accepted each other, or only once you approve their request, as you choose in Settings.

To keep members safe, some checks are automated:

• Photos are checked automatically when uploaded, for nudity, offensive content, AI-generated images and photos with no person in them. A photo can be refused or held for our team to review.
• Chat messages are checked automatically before delivery; messages with phone numbers, email addresses, links, social-media handles or abusive words are not delivered.
• If you ask to be verified, an automated check may compare your selfie with the photo on your ID document; our team reviews any result it cannot confirm.
• Limits on how often you can request an OTP or send interests protect members from spam and abuse.

If an automated check refuses your photo or your verification, you can ask our team to look at it again by writing to privacy@gmatri.in. When a profile or a conversation is reported, our back office team may review that profile and read that conversation to deal with the report. Anything you share with another member can be copied by them; please share with care.

We process your personal data on the basis of your consent under section 6 of the DPDP Act, which you give when you accept our privacy notice at sign-up and when you add each detail. You can withdraw it at any time (section 12).

Without consent, we process personal data only for the legitimate uses in section 7 of the DPDP Act — mainly to comply with a law, or with a judgment, decree or order (for example the IT Rules, or a lawful request from the police or a court); to respond to a medical emergency or a threat to someone’s life; and where you give us data voluntarily for a specific purpose and have not said you do not consent to its use — for example, when you write to us with a complaint, we use your details to answer it.

We use personal data only for these purposes:

• to create and secure your account and sign you in;
• to build your profile, show it to suitable members as your settings allow, and show you suitable profiles;
• to calculate your horoscope and the porutham reference;
• to run interests, requests, shortlists, chat, voice notes and the other features of the Service;
• to verify identity when you ask us to, and to detect and act on fake profiles, fraud, harassment and other misuse;
• to send you the service messages and notifications you allow (in the app, by push, SMS, WhatsApp or email);
• to answer your questions, requests and complaints;
• to fix faults and keep the Service working, using error reports with personal details removed; and
• to comply with the law and with lawful requests.

We never sell your personal data, and we never use it for advertising or share it with advertisers.

We share personal data only with service providers that process it for us (our “Data Processors”), under contracts that limit them to our instructions and require them to protect it. Each receives only what it needs. Providers marked † may store or process data outside India (section 8).

Hosting

Our database and application run on servers in Bengaluru, India. They hold all the data described in this policy.

SMS and WhatsApp delivery — MSG91

Your phone number and the message (for example your OTP). WhatsApp messages for numbers outside India are delivered through Meta’s WhatsApp Business Platform†.

File storage — Cloudflare R2†

Photos, voice introductions and voice notes; identity-verification images, kept privately and never reachable through a public link; and our database backups.

Photo checks — Sightengine†

Each photo you upload, to check it for nudity, offensive content, AI generation and whether it shows a person.

Identity checks — Surepass

Your selfie and the photo of your ID document, only if you ask to be verified, to check liveness and compare the faces.

Push notifications — Google Firebase Cloud Messaging† and Apple Push Notification service†

Your device’s notification token and the text of the notification.

Error reports — Sentry†

Technical details of faults in the website, app and servers. We remove personal details such as names, IP addresses and form contents before reports are sent.

Email delivery

[to be confirmed]: your email address and the email we send you.

We also share personal data:

• within Gmatri, with the members of our back office team who need it to run the Service, moderate content and handle complaints;
• with the police, courts, regulators and other authorities when the law requires it or a lawful order asks for it, and to protect someone’s life or safety; and
• with whoever takes over the Service if the business is sold or incorporated — we will tell you before that happens, and this policy will continue to protect your data.

Your data is stored on servers in Bengaluru, India. Some of our providers (marked † in section 7) may store or process data outside India. We transfer personal data outside India only as section 16 of the DPDP Act allows — never to a country the Government of India has restricted — and only under contracts that require the provider to protect it.

Family-managed profiles. If you manage a profile for someone else, the personal data on it belongs to that member, and you must have their consent to add it (see section 4 of our Terms). The member can use every right in this policy directly — even if they do not hold the account — by writing to us.

Family members. Share details about your parents, brothers, sisters or other family members only if they are happy for you to. We use these details only to show on your profile as your settings allow.

Your account and profile

While your account is open. When you delete your account, your profile disappears from Gmatri at once and cannot be restored; your photos, voice introduction, voice notes and any identity images are deleted from storage at once; your phone number and email are removed from the account at once; and everything else is permanently erased within 30 days.

Chats

While both members’ accounts exist. When either member deletes their account, the conversation is erased for both within 30 days.

Identity verification

The ID and selfie images are deleted as soon as the check is decided (or when you delete your account, if it is still pending). The outcome — status, document type, dates and scores — is kept while your account exists.

One-time passwords

Stored only in scrambled (hashed) form and erased 7 days after use or expiry.

Notifications you have read

90 days.

Ended sign-in sessions

30 days after they end.

Profile views

90 days.

Daily picks

14 days.

How you use Gmatri (usage records)

90 days.

Security and audit logs, including IP addresses

365 days, including after an account is deleted.

Backups

Our database backups are kept for [to be confirmed]; deleted data disappears from them when they are overwritten.

If the law requires us to keep some information for longer — for example under the IT Rules, or to answer a lawful request from a court or a government agency — we keep only that information, only for that period and only for that purpose.

Under the DPDP Act you have the right to:

Access

Get a summary of your personal data, how we process it, and who we have shared it with (section 7 lists our providers). Settings → Your data → Export my data downloads a copy of your account and profile at any time; for anything else, write to us.

Correction, completion and updating

Edit your profile at any time. For anything you cannot change yourself, write to us.

Erasure

Remove any detail, photo or voice introduction from your profile, or delete your whole account from Settings → Your data → Delete account. Section 10 explains what happens and when.

Withdrawal of consent

At any time, as easily as you gave it — see section 12.

Grievance redressal

Have your complaints answered by our Grievance Officer — see section 13.

Nomination

Nominate one or more people to use these rights for you if you die or become unable to act because of unsoundness of mind or bodily infirmity. Write to privacy@gmatri.in with each nominee’s name and contact details; we will confirm that the request comes from you before we record it.

To use a right, use Settings or write to privacy@gmatri.in. We may ask you to confirm your identity first, for example with an OTP to your registered number. There is no charge. We reply within the times in section 13.

The DPDP Act also asks you, when you use these rights, not to impersonate anyone, not to hide important information, not to file false or frivolous complaints, and to give us only information that is true.

You can withdraw consent at any time, as easily as you gave it:

• for a single detail, photo or voice introduction — remove it in Edit profile;
• to stop being seen — turn on Hide my profile in Settings, or change who can see your photos and your number;
• for SMS, WhatsApp, email or push messages — turn them off in Settings → Notifications;
• for everything — Settings → Your data → Delete account;
• or by email — write to privacy@gmatri.in from the email on your account, or tell us your registered phone number, and we will act once we have confirmed it is you.

When you withdraw consent, we stop processing that data and erase it — and have our providers erase it — as section 10 describes, unless the law requires us to keep it. Withdrawal does not affect anything we did lawfully before it, and some features cannot work without certain data: for example, we cannot keep an account without a phone number.

Please raise any complaint about your personal data with our Grievance Officer first (section 19). We acknowledge every complaint within 24 hours and resolve it within 15 days of receiving it.

If you are not satisfied with our answer, or we do not answer in time, you can complain to the Data Protection Board of India under section 13 of the DPDP Act, online at www.dpb.gov.in. The Board expects you to use our grievance process first.

• All connections to the Service are encrypted in transit (HTTPS).
• One-time passwords and sign-in tokens are stored only in hashed form; sign-in sessions expire, and you can sign out of all devices from Settings.
• Photos are stripped of hidden location data, watermarked, and shown as blurred previews until you allow them to be seen.
• Identity documents are kept in private storage that is never reachable through a public link, are viewed only by authorised members of our team, every view is logged, and they are deleted once the check is decided.
• Our team’s access is limited by role and recorded in audit logs; reported conversations are opened only to handle a report, and each opening is logged.
• Rate limits protect against OTP abuse and spam, and error reports have personal details removed.
• Our database is backed up off-site regularly so it can be restored after a failure.

No system is completely secure. Please help by keeping your phone safe and never sharing your OTP.

If a personal data breach affects you, we will tell you without delay — in the app, by SMS or by email — in plain language: what happened and when, the likely consequences for you, what we are doing about it, what you can do to protect yourself, and whom to contact. We will also report it to the Data Protection Board of India, and to CERT-In where required, within the times the law sets.

Gmatri is only for adults. We do not knowingly collect personal data of children (anyone under 18), and profiles are allowed only for men aged 21 or over and women aged 18 or over — the minimum ages for marriage in India. If we learn that a profile belongs to someone below these ages, or that a child is using the Service, we delete it. If you think this has happened, please tell us at privacy@gmatri.in.

Our website uses only the cookies it needs to work: to keep you signed in and protect your session, to remember your language, and to remember your answers while you create a profile. It also keeps a few short-lived details in your browser’s storage — for example the phone number you are signing in with — so that a page refresh does not lose them. We use no advertising or third-party analytics cookies. You can clear cookies in your browser at any time, but you will then be signed out. In the app, your sign-in is kept in your device’s secure storage.

We will tell you about any material change to this policy — in the app, by SMS or by email — before it takes effect, and update the “Last updated” date above. If we want to use your data for a new purpose, we will ask for your consent first. At least once a year we will remind you of this policy and our Terms.

For any privacy question, request or complaint, contact our Grievance Officer:

Data protection contact: [to be confirmed]. Until this is confirmed, write to privacy@gmatri.in and our Grievance Officer will answer.

For general support, write to support@gmatri.in. If you live outside India, Indian law governs this policy; your local law may give you further rights, and you can use them by writing to us.