Privacy Policy for NavuMilan

Last Updated: June 9, 2026

Welcome to NavuMilan (the "App" or "Website" or "Platform"). We are committed to protecting the privacy, confidentiality, and security of your personal data. This Privacy Policy is drafted in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Information Technology Act, 2000, and other applicable data protection rules and regulations.

This Platform (including the NavuMilan website and application) is owned and operated by MUKM CENTRE ("NavuMilan") in India (referred to as "we," "our," "us," or the "Data Fiduciary").

By registering an account, accessing, or using the App, you signify your clear affirmative action and give your explicit, voluntary consent to the collection, storage, and processing of your personal data as described in this Privacy Policy.

1. Roles under the DPDP Act, 2023

Data Fiduciary: MUKM CENTRE, which determines the purpose and means of processing your personal data.
Data Principal: You (the individual user whose personal data is collected and processed).
Consent Manager: Any authorized platform or service you may use to give, manage, review, or withdraw consent.

2. Information We Collect

To provide a secure, functional, and compatibility-based matrimonial matchmaking service, we collect the following categories of information:

A. Information Provided Directly by You (Personal Data)

Identity & Registration: Full Name, Date of Birth, Gender, and Profile Photos. Registration is authenticated strictly via your mobile number through a WhatsApp OTP verification flow.
Matrimonial Profile Data: Religion, Caste, Sub-caste (Paraganu, Mosad, Gaam), Diet, Height, Weight, Body Type, Complexion, Marital Status, Mother Tongue, Education, Occupation, and detailed Family Background (parents' names, parents' occupations, siblings, and family values).
No Biometrics Collected: We do not collect, scan, process, or store biometric details (such as facial geometry or fingerprints) on our servers or within the App. Any device-level authentication (face unlock/fingerprint lock) is handled entirely locally by your device’s operating system and is never transmitted to us.

B. Masked & Private Profile Data

To prevent harassment and unauthorized contact, the following fields are classified as Private Profile Data:

Mobile Number
Date of Birth
Annual Income
Profile Photo (Controlled)
Family Names
Native and Mosad
College Name
Company Name

These fields are hidden behind our "Privacy Lock" at the database layer (secured via database rules) and are only revealed to other users once a Mutual Connection is established between both parties.

C. Automatically Collected Data (Technical & Security Metadata)

Device Identifiers: Operating system type (Android/iOS), system version, device manufacturer, device model, and stable unique device identifiers (Android ID or Apple Identifier for Vendor) via our device info service.
Connection & IP Logging: Public IP addresses (fetched via secure services) and session timestamps.
Usage Metadata: Login history, session durations, interest logs (interests sent, received, accepted, or rejected), and interaction histories.

3. Lawful Purpose & Usage of Data

We process your personal data strictly for specified, lawful purposes (Section 6 of the DPDP Act) under your explicit consent:

Matchmaking & Compatibility: Displaying profiles to relevant matches and calculating compatibility percentages ("Match Scores") based on user preferences.
Security & Fraud Prevention: Detecting duplicate profiles, verifying mobile numbers via WhatsApp OTP, logging device metadata to block scrapers, and blacklisting fraudulent devices.
Sharing & Deep Linking: Generating secure shared profile URLs for member profiles.
Customer Support: Resolving support queries and technical tickets filed by you.

4. On-Device Local Processing (Privacy by Design)

On-Device Translation: To translate profile biographies into regional languages (e.g., English to Gujarati), we utilize on-device machine learning models. The translation process is executed entirely on your local device hardware, ensuring your profile biography text is never routed to external translation servers.
Screen Capture Protection: The application implements OS-level screenshot and screen recording blocking. While this prevents digital duplication within the app, you acknowledge that we cannot prevent physical photography of screens using external cameras.

5. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal data with third-party advertisers. We share information only under the following limited conditions:

With Matchmaking Connections (Privacy Lock): Basic matrimonial details are visible to registered users. However, your Private Profile Data (Mobile Number, Date of Birth, Annual Income, Profile Photo (Controlled), Family Names, Native and Mosad, College Name, and Company Name) is strictly restricted and only disclosed to users with whom you have confirmed an accepted Mutual Connection.
With Cloud Infrastructure Providers (Data Processors):
- Cloud Hosting & Database Infrastructure: For secure hosting, real-time databases, cloud functions, and secure media storage.
- SMS & WhatsApp Messaging Gateways: For transmitting authentication OTPs.
- Authorized Payment Processors: For processing subscription and premium payments. We do not store or process payment card details.
Compliance with Legal Obligations: We may disclose personal data to law enforcement agencies, government bodies, or courts if required to do so under the law (e.g., Section 69 of the IT Act) or to prevent immediate harm or fraud.

6. Your Rights as a Data Principal (DPDP Act, 2023)

Under the DPDP Act, you possess statutory rights over your personal data:

Right to Information & Access: You have the right to request summaries of the personal data we process and details of who we have shared it with. Most of this data is accessible directly in the "My Profile" tab.
Right to Correction, Completion, & Update: You can modify or complete your profile details at any time through the edit profile section of the App.
Right to Erasure (Account Deletion): You can request the permanent deletion of your account and all associated data via the in-app settings.
Right to Nominate: You have the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
Right to Withdraw Consent: You have the right to withdraw your consent to data processing at any time by deleting your account.

7. Data Retention & Mandatory Compliance Log

Live Database Purging: Once you delete your account, all personal details, profile photos, mutual connections, saved profiles, and device sessions are permanently wiped from our live databases.

Regulatory Archival Log: In strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, Information Technology Rules, 2021, and CERT-In guidelines, we retain a minimal Deletion Audit Log for a mandatory period of 180 days post-deletion. This log is stored in an encrypted, write-only database accessible only for forensic/regulatory purposes, and is automatically deleted after the retention period.

8. Children's Privacy

NavuMilan is strictly restricted to adults who are legally competent to marry under Indian law (18+ for females, 21+ for males). We do not knowingly collect, process, or store personal data of minors. If we discover that a minor has registered, the account will be immediately deleted.

9. Grievance Redressal

In accordance with Rule 3(11) of the Information Technology Rules, 2021 and the provisions of the DPDP Act, 2023, the contact details of our Grievance Officer are:

Designation: Grievance & Data Protection Officer, MUKM CENTRE
Contact Email: navumilan@gmail.com
Registered Address: Vadodara, Gujarat