← Back to Home

Privacy Policy

Last updated: June 2025

Couple Sathi ("we", "our", or "us") is operated as a product of Couple Sathi Shop. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our app and website (couplesathi.com). By using our services, you agree to the practices described here.

This policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA).

1. Information we collect

• Account data: Email address, password (hashed — we never see it), display name, gender, and age provided during sign-up.
• Profile data: Profile photo (stored in Supabase Storage), couple link codes, and partner relationship data.
• Usage data: Cards played, roulette spins, mood check-ins, love letters, question-of-the-day answers, login streaks, and medals earned.
• Order data: Shipping address, items ordered, and payment references (we do not store card numbers — payments are processed by Razorpay).
• Device data: Push notification subscription tokens, browser type, and device type for app functionality.
• Chat messages: Messages sent within the couple chat feature are stored in our database to enable delivery to your partner.

2. How we use your information

• To provide and improve the Couple Sathi app and its features.
• To process orders placed through the Couple Sathi Shop.
• To send push notifications and partner alerts you have opted into.
• To compute streaks, leaderboards, and relationship statistics shown in the app.
• To send transactional emails (order confirmations, email verification).
• We do not sell your data to third parties or use it for advertising profiling.

3. Data storage and processors

Your data is stored using the following trusted third-party services:

• Supabase (database, authentication, file storage) — data stored on AWS infrastructure.
• Razorpay — payment processing. We only receive a payment reference ID; Razorpay handles all card data under PCI-DSS compliance.
• Vercel — app hosting and serverless functions.
• Resend (or similar) — transactional email delivery.

4. Your rights under the DPDPA 2023

As a data principal, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data via your Profile settings.
• Erase your data (right to erasure). You can delete your account from your Profile page. Deletion is permanent and irreversible.
• Withdraw consent at any time by deleting your account.
• Nominate a person to exercise these rights on your behalf in the event of death or incapacity.

To exercise any right, contact us at privacy@couplesathi.com. We will respond within 72 hours.

5. Data retention

We retain your data as long as your account is active. If you delete your account, all personal data is permanently erased from our systems within 30 days, except where we are required by law to retain certain records (e.g., order records for GST compliance — retained for 7 years in anonymised form).

6. Children's privacy

Couple Sathi is intended for users aged 18 and above. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately at privacy@couplesathi.com.

7. Push notifications

Push notifications are opt-in. You may withdraw your consent at any time through your device's notification settings or by disabling notifications in the app. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

8. Cookies and local storage

We use browser localStorage and sessionStorage to maintain your login session and app preferences. We do not use advertising cookies or third-party tracking cookies.

9. Security

We implement industry-standard security measures including HTTPS-only transmission, hashed passwords via Supabase Auth (bcrypt), and row-level security policies on our database. However, no method of transmission over the internet is 100% secure.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of the app after changes constitutes acceptance.

11. Grievance Officer

In accordance with the DPDPA 2023 and the IT Act 2000, you may contact our Grievance Officer: