Privacy policy

SamajMilan is an app for matrimonial introductions within a samaj, run by ZeniaPex Private Limited. Under India's Digital Personal Data Protection Act, 2023 (the DPDP Act), we decide why and how your personal data is used. In the Act's words we are the "Data Fiduciary", and we are responsible for your data.

Company

ZeniaPex Private Limited

CIN

U62013GJ2024PTC156483

Registered office

The company's registered office address will be published here before the app opens to the public.

Your samaj office, meaning the people your samaj has authorised, uses the app to approve profiles, check documents and look into reports. They can see only what this policy says they can.

This policy covers the SamajMilan app and this website. You accept it, together with the terms of service, when you register in the app. Read the terms of service

Your account

• Your mobile number. You sign in with it, and one-time codes (OTP) are sent to it.
• We never store a one-time code as it is. We keep a one-way scrambled form of it (a hash). A code is valid for 5 minutes and is removed once you sign in.
• Your app language, and your choices for WhatsApp and SMS alerts.

The profile

Details of the person the profile is for, whether that is you or your son, daughter, brother or sister:

• Name, gender, date of birth, current city, marital status and height.
• Education, occupation and, if you give it, an income range.
• A few words about the person, expectations from a partner, whether the family owns a house, and any plan to settle abroad.
• Who runs the profile: the person, a parent, a guardian, or together.
• Partner preferences and "My rules", such as who may contact you.

Samaj, pargana and family

• Your samaj, and your gol, pargana or village within it.
• Native village, taluka and district.
• Father's and mother's names and work, father's and mother's mosal (the mother's family village), and details of brothers and sisters.

Photos

The photos you choose. Each photo is saved afresh on upload, which removes hidden details such as location and camera data (EXIF), and a small blurred copy is made. If you prefer not to show a photo, you can pick an illustrated picture instead.

Documents for verification

Only if you provide them: an identity document (Aadhaar, PAN, driving licence, passport or voter ID); a school leaving certificate or community certificate for samaj membership; and an education certificate.

Aadhaar gets extra care. It is accepted only as a photo (JPG or PNG), not as a PDF. Before it is saved, a solid black band is placed across the full width of the part of the card where the 12-digit number is printed, and the original image is never stored. If you type the number, we keep only its last 4 digits and a one-way scrambled form of it (a salted hash). The full number is not stored anywhere. It is still best to cover the first 8 digits before you take the photo.

Your activity in the app

• Interests and introduction requests you send and receive, with any message in them.
• Connections, and chat messages after you connect.
• When you shared or revoked your number, and with whom.
• Profiles you save, your notes on them, and saved searches.
• Who viewed which profile and when. You can see how many times and when your profile was viewed, not who viewed it.
• Reports you make (the reason and any details you write) and blocks.
• Event registrations and entry passes.
• How many times your share links and biodata QR code were opened. Not who opened them.

Other people you add

If you list someone as a reference (name, phone number and relation), or add a relative's phone number to your Family Circle, we keep those details too. Please tell them first. A reference's details are seen only by you and your samaj office; if the number belongs to someone who uses the app, they are asked to confirm.

Consents and records

• What you agreed to: showing your profile for introductions, notices in the app, the terms of service, and WhatsApp or SMS alerts, with the policy version, the date, and the date of any withdrawal.
• A record of important actions (an audit log): profile approvals, who opened which document, number shares and revokes, privacy changes, data downloads and deletion requests.
• The internet (IP) address a profile was created from. Your samaj office cannot see it.
• A copy of each WhatsApp or SMS alert we send, and whether it was delivered.

What we do not collect

The app does not read your phone's contacts or your location. It asks only for internet access, and takes a photo or document only when you choose one yourself. There are no advertisements in the app and no advertising trackers.

This website has no forms: it never asks for your number or email, and it has no advertising or analytics trackers. It saves nothing in your browser. Like most websites, our server records technical details of each visit (IP address, the page asked for, browser type and time) for security and to fix problems.

• To sign you in and keep your account safe.
• To build the profile, send it to your samaj office for approval, and show it to members of your samaj once approved.
• To check documents and show separate badges for exactly what was checked.
• To suggest profiles and run searches using your preferences and "My rules".
• To deliver interests, introduction requests, connections and chats, and to share your number only when you choose to.
• To send notices in the app and, if you choose, on WhatsApp or SMS.
• For safety: to spot two profiles for one person (a profile with the same surname and date of birth as another is shown to the samaj office), to look into reports, to pause sign-in for a while after repeated wrong codes, and to apply daily limits.
• To keep the records the law requires, and to answer complaints and lawful requests.

We rely on the consent you give when you register. Records the law requires, such as the internet address a profile was created from, are kept as a legal duty.

We do not sell your data to anyone, and we do not use it for advertising.

Members of your samaj

• A profile is shown only after the samaj office approves it. Until then it stays hidden.
• Only members of your own samaj can open it, not people from other samaj. Turn on "My Pargana only" in "My rules" and only members of your pargana can.
• Members see the first name, age, city, height, education, occupation, the "about" text and expectations, and which checks are complete, each named on its own (for example mobile number or samaj membership). The full name only after you connect.
• You can hide the profile for a while, and close it once a marriage is fixed.

Details you control in the Privacy Center

Photos

Members of your samaj, or connections only. The Privacy Center also shows a third choice called "verified"; today it works exactly like "members of your samaj". Until a photo is approved, or wherever your setting does not allow it, others see only a blurred copy.Starts as: "verified" (today the same as members of your samaj)

Family and native place

Members of your samaj, or connections only.Starts as: connections only

Income

Nobody, or connections only.Starts as: nobody

Contact

Connections only, or nobody. Whatever you choose, a number never appears on a profile; it is shared only as described below.Starts as: connections only

How a number is shared

• A connection forms when one family sends an interest or an introduction request and the other accepts.
• Even then, each side's number shows to the other only when that side taps "Share my contact" itself.
• Every share is recorded: who, to whom, and when.
• Tap "Revoke contact" and the number leaves their screen straight away. But if someone already wrote it down, it cannot be taken back.
• For safety, a number cannot be shared more than 30 times in 24 hours.

Your samaj office

Your samaj office's authorised people can see the whole profile, for approval and safety. Only they see documents and references, never other members, and every time someone opens a document it is recorded. Identity, samaj and education documents are decided only by people appointed for verification, and nobody can decide on their own documents.

Family Circle

You can add up to 4 relatives to your Family Circle. They see only as much as you allow, and they can never see or share anyone's number.

Share links and the biodata QR code

If you create a share link or hand out your biodata QR code, anyone holding it sees a short card with details such as the first name, age, city, education, occupation, pargana, and which checks are complete, each named on its own. Never the phone number, income, documents or family details. You can revoke a share link at any time, and share links stop working when the profile is hidden, closed or deleted.

ZeniaPex and the law

ZeniaPex's authorised staff can access data as far as needed to run the service, keep it safe and help you. When the law requires it, such as a court order or a lawful request from the police, we provide the information required.

Servers

Your data is stored on Amazon Web Services servers in Mumbai, India.

Sign-in codes by SMS

2Factor (2factor.in) sends your one-time sign-in code by SMS. It receives your number and the code. If you turn on SMS alerts, those go through 2Factor too.

WhatsApp alerts

When WhatsApp alerts are switched on, they are sent through our group's ZeniaOne messaging service and delivered by WhatsApp (Meta). They receive your number and the text of the alert. No alert ever carries anyone's phone number.

Biodata lettering

The printable biodata page opened from the app, and the page a biodata QR code opens, load their lettering (fonts) from Google Fonts. So the browser that opens them contacts Google's servers.

We do not sell data, and we do not give it to advertisers or data brokers.

We keep your data while your account is open, so that your profile, connections and chats keep working.

When you delete your account

• The moment you ask, the profile is hidden and nobody can see it.
• Deletion is final: once you ask, the account cannot be switched back on. The 14 days are only the wait before your details are removed for good.

After 14 days, in a run that happens every night at 3 am India time:

• Photo and document files are deleted.
• Family and native-place details, preferences, references, the Family Circle, saved searches, event passes, notices and data downloads are deleted.
• Name, date of birth, city and mobile number, and profile details such as education, work, height and income, are removed. Only "Deleted member" remains.
• The text you wrote in chats, interests and notes is removed.
• Every share link is switched off, and every consent is recorded as withdrawn.

What stays

• A record of when a profile was created and from which internet (IP) address. India's IT Rules, 2021 and the MeitY advisory for matrimonial websites ask for this to be kept even after an account is deleted, and we keep it for as long as the law requires.
• The audit log of important actions, without any personal remarks written about you.
• In other members' history, the fact that an interest, connection, block or report happened stays, now linked to "Deleted member" instead of your name.

Backups

A backup copy of the database is made every day, and only the last 14 copies are kept. So deleted details can remain in a backup for up to 14 days, after which they drop out on their own. Backups are used only to bring the service back after a failure.

Other time limits

• A one-time code is valid for 5 minutes and is removed once you sign in.
• The file made by "Export my data" can be opened for 24 hours.
• A share link works until you revoke it or until the expiry you chose.

See and download

The Privacy Center shows your consents and your "Privacy activity": how often your profile was viewed, how often your biodata was scanned, and when you shared or revoked your number. "Export my data" gives you the main details we hold about you in one file. For anything else, or for a list of whom we have shared your data with, write to the grievance officer.

Correct

You can change family and native-place details, preferences, "My rules" and privacy settings yourself in the app. To correct core details such as the name or date of birth, ask your samaj office; it can send the profile back to you for correction.

Withdraw consent

Under "Consents" in the Privacy Center, tap "Withdraw". Withdraw consent for introductions and the profile leaves search. Withdraw consent for WhatsApp and SMS alerts and every alert stops except sign-in codes. Withdrawing does not make earlier lawful use wrong.

Hide for a while

Turn on "Hide for a while" in the Privacy Center, and show the profile again whenever you like.

Delete

Tap "Delete account" in the Privacy Center. A way to ask for deletion without the app will be published on the account deletion page before the app opens to the public.Full details on deleting your account

Complain

Raise any complaint about your data with our grievance officer. If you are not satisfied with the answer, you can complain to the Data Protection Board of India.Grievance officer page

Nominate

To name someone who can use these rights for you after your death, or if you cannot act yourself, write to the grievance officer.

Where someone else made the profile, such as a parent, the person the profile is about can use these rights too.

When a profile is made, the app checks the date of birth and does not allow a profile for anyone under 18. We do not knowingly keep data about children. If a profile seems to belong to someone under 18, tap "Report" on it and it will be taken down. Our child safety standards

• Sign-in by one-time code: a code lasts 5 minutes, allows no more than 5 wrong tries, and after 10 wrong codes in an hour from one device or network, sign-in for that number from there is paused for an hour.
• One-time codes, share-link keys and Aadhaar numbers are kept only in a one-way scrambled form (a hash).
• The number area of an Aadhaar photo is covered before it is saved, and hidden details such as location are removed from photos and document images.
• Members can open profiles only within their own samaj, and a block works both ways.
• Documents are seen only by your samaj office's authorised people, and every view is recorded.
• Limits on how often a number can be shared, interests sent and sign-in codes requested, to prevent misuse.
• An audit log of important actions, so that anything that goes wrong can be looked into.

If a security breach affects your data, we will inform you and the Data Protection Board as the law requires.

The version is shown at the top of this page. In the app, each consent you give is stored with the version in force at the time, so it is clear which version you accepted. Where the law requires it, we will ask for your consent again.

• Terms of service
• Community guidelines