Privacy Policy

Umaang ("we", "us", "our") is a matrimony platform operated by Umaang Matrimony Services, incorporated in India. This policy explains how we collect, use, share, and safeguard your personal information when you use www.umaang.co or the Umaang mobile app (together the "Service").

By using the Service you agree to this policy. If you do not agree, please do not create an account.

A. You give us directly:

• Registration details — name, gender, date of birth, email, mobile number, password.
• Profile details — photos (up to 10), height, weight, religion, caste, mother tongue, education, profession, income range, family details, horoscope information, dietary preferences, location and PIN code.
• Partner preferences — age range, height range, religion, caste, education, location and other filters you set.
• KYC identifiers — Aadhaar number and PAN number are submitted to our KYC partner Digio (RBI/UIDAI licensed AUA); we store only the verification status, timestamp, and a masked reference — not the raw Aadhaar/PAN copy.
• Payment identifiers — Razorpay reference IDs. Card numbers, UPI IDs, CVVs are handled by Razorpay directly and are never stored on our servers.
• Communications — messages you send other members, connection requests, blocks, reports, referral codes shared.

B. Collected automatically:

• Device information — IP address, device model, OS version, browser, app version.
• Usage data — pages viewed, features used, timestamps, crash logs.
• Approximate location — city / PIN code you provide, and (with your permission) precise geolocation for the "Near me" feature. You can revoke permission any time.
• Cookies and similar technologies — session tokens (kept in browser storage) and analytics cookies.

C. From third parties:

• If you sign in with Google, we receive your Google email, name, and profile picture.
• Digio returns KYC pass/fail signals after verifying Aadhaar/PAN.
• Razorpay returns payment success/failure and settlement identifiers.

• To create your profile and show it to compatible prospects (opposite gender, matching preferences).
• To calculate a match percentage and, on request, a Guna Milan (horoscope) score.
• To verify identity through Aadhaar/PAN and reduce fake profiles.
• To send OTPs and transactional notifications by SMS, email, and web push.
• To process Premium subscription payments and Refer-and-Earn rewards.
• To keep the Service safe — detect abuse, spam, harassment, impersonation, fraud.
• To comply with applicable law, court orders, or requests from law enforcement.
• To improve the Service through anonymised analytics.

We do not sell your personal data. We do not use your photos or Aadhaar for advertising or model training.

Your data is shared only with the trusted service providers necessary to operate the Service:

• Digio — Aadhaar/PAN identity verification.
• Razorpay — payment processing for Premium plans.
• Twilio — SMS OTP delivery.
• Resend — transactional email delivery.
• Google — optional social sign-in and reCAPTCHA anti-bot.
• Cloud hosting (Emergent / MongoDB Atlas) — encrypted storage and compute.

Other Umaang members see only what your privacy settings allow — for example if you have "Hide name" enabled, prospects see your Member ID (USG####) instead of your full name until you accept their request.

We may disclose information if required by law, to protect rights and safety, or in a business transfer (with notice to you and this policy continuing to apply).

You can, at any time from the Umaang app:

• Edit or delete any profile field, photo, preference, or block list.
• Hide your name until you accept a request — go to Profile → Privacy toggle.
• Revoke geolocation permission from your browser/device settings.
• Download your data — email privacy@umaang.co and we will share a JSON export within 15 working days.
• Delete your account — Profile → Settings → Delete account. All personal data is erased within 30 days; anonymised analytics may be retained. Payment records are retained as required by Indian tax law (7 years).

Under India's Digital Personal Data Protection Act (DPDP Act, 2023) you have the right to access, correct, and erase your personal data, and to nominate someone to exercise these rights in the event of your death or incapacity. Write to our Grievance Officer at privacy@umaang.co to exercise any right — we will respond within 15 days.

We use TLS 1.2+ for all data in transit, bcrypt for passwords, encrypted storage for photos, and role-based access controls internally. However, no system is 100% secure — please never share your password, and use a unique one you don't reuse elsewhere.

If you suspect a security incident, email privacy@umaang.co immediately.

Active account data is retained while your account exists. On deletion, personal data is erased within 30 days. The following are retained longer where legally required: payment invoices (7 years, Indian tax law), KYC audit trails (5 years, RBI/UIDAI guidelines), abuse/fraud logs (2 years for platform safety).

Umaang is strictly for adults 18 years or older intending to marry. We do not knowingly onboard minors. If we discover an underage account, we delete it immediately. Parents/guardians can email privacy@umaang.co to report a suspected underage profile.

Our servers are located in India. If you access the Service from outside India, your data will be transferred to and processed in India. By using Umaang from outside India, you consent to this transfer.

We may update this policy from time to time. We will notify you of material changes by email or in-app banner at least 15 days before they take effect. Continued use after the effective date constitutes acceptance.

Under Rule 3(11) of the IT (Intermediary Guidelines) Rules 2021 and the DPDP Act 2023, our Grievance Officer is:

Questions or feedback? Reach us at privacy@umaang.co.