Privacy policy
Version 2026-11-01. This policy explains how 2K Matrimony processes your personal data as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
What we collect
- Account data: phone number, email, sign-in identifiers, devices.
- Profile data you provide: personal details, education, career, family, lifestyle, values, Relationship DNA answers, partner preferences, photos and an optional video. Fields such as religion or community are optional and only ever taken from what you enter — we never infer sensitive characteristics.
- Verification data: documents you submit for optional identity, photo or employment checks. These are kept in restricted storage, visible only to authorised reviewers, and deleted 90 days after a decision.
- Activity: interests, connections and messages needed to run the service, and minimal pseudonymous usage events for operating it. Optional product analytics (PostHog) runs only after you allow it, and you can withdraw that in Settings → Consents at any time.
- Payments: plan, amount and invoice details. Card and UPI details are handled by our payment processor (Razorpay); we do not store them.
Why we use it (purposes and consent)
- To provide matchmaking: building your profile, computing mutual compatibility and showing recommendations.
- AI processing of your profile answers for explanations, smart search and assistants, with your consent (you can withdraw it in Settings; AI features then fall back to non-AI behaviour).
- Safety: preventing fraud, spam and abuse, with human review for serious decisions.
- Billing, tax compliance and customer support.
- Optional communications (marketing email, SMS, WhatsApp) only with your separate consent.
Who can see your data
- Profiles are visible only to signed-in members and never published on the open web. You control who sees photos, income and family details.
- Family members you invite see only what your chosen permissions allow.
- Service providers who process data on our behalf: Supabase (hosting, India region), Anthropic (AI processing of profile text when enabled), Voyage AI (search embeddings when enabled), Razorpay (payments), Resend (email), MSG91 (SMS), Meta (WhatsApp, if you opt in), Expo (push notifications), PostHog (product analytics, only if you opt in — pseudonymous usage events, never your name, contact details, profile text or messages).
Your rights
- Access and download a copy of your data from Settings.
- Correct or update your information at any time.
- Withdraw consent for optional processing.
- Delete your account; deletion completes after a 14-day grace period. Tax invoices are retained as required by law.
- Nominate another person to exercise your rights in case of death or incapacity, and raise grievances with our Grievance Officer or the Data Protection Board of India.
Retention
Data-export archives are deleted after 7 days; verification documents 90 days after a decision; AI usage and analytics logs after 13 months; account data after deletion as described above.
Security
Encryption in transit and at rest, row-level access controls, private storage with time-limited links, mandatory multi-factor authentication for administrators and audit logging of administrative access. We will notify affected members and the Data Protection Board of a personal data breach as the law requires.
Children
The service is only for adults aged 18 and above. We do not knowingly process children’s data.