OoruSuttu policies
Privacy policy
Version 2 · Mukherjee Alliances Infotech Private Limited
The short version. We collect what the app needs to work and almost nothing else. We never show anyone your distance or your location — only the name of an area. We do not sell your data. We do not use your messages for advertising, or for anything else. You can delete everything, from inside the app or from this website.
Who we are
OoruSuttu is operated by Mukherjee Alliances Infotech Private Limited, a private limited company registered in India at 2nd Floor, 5B Jabakusum House, 34 C. R. Avenue, Kolkata, West Bengal 700012, India. GSTIN 19AAJCM0985C1ZC.
For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here. Our contact for data protection questions is contact@oorusoul.com.
What we collect, and why
| Data | Why | Kept for |
|---|---|---|
| Email address, and whether you have confirmed it | It is your account, and it is the only identifier we hold. We send a confirmation link to it and record the date you used it. That confirmation is how we prevent a removed person from returning under a new name — an address nobody has proved they control is only a string somebody typed. Until you confirm it, some daily allowances are lower; nothing about safety, reporting, blocking or deletion is affected. | Until you delete your account |
| Date of birth | To enforce the 18+ requirement, and to show your age (never your date of birth) to others. | Until you delete your account |
| Profile: name, photos, prompts, interests, languages, intent | To build your profile and to rank who you see. | Until you delete your account |
| What you do for a living, if you say | Shown on your profile. Optional. | Until you delete your account or clear the field |
| Lifestyle answers — ten sliders (smoking, drinking, sleep, food and so on), if you answer | These are used in matching — your match score with another person is built from how closely your answers sit, together with shared interests and life stage. That is the opposite promise to the community and caste rows above, so it is stated separately: those are never used in matching, these are what matching is made of. Every slider is optional, an unanswered one is simply not counted, and each can be cleared with one tap at any time. | Until you delete your account or clear the answer |
| Religion, community and caste, if you say | All three are optional, and none of them affects who we think you match with. They are here for one reason: so that you can narrow who you see, and so that people looking for someone of their own community can find you. Our matching never reads them — leaving all three blank changes nothing about your results, your visibility, or anything else in the app. You can only ever say which ones you are open to, never which ones to hide — the app has no way to exclude a community or a caste, and we will not add one. Anyone who has left these blank still appears to everybody, because saying nothing is not the same as saying something disqualifying. | Until you delete your account or clear the field |
| Annual income, as a band, if you say | A band — "₹6–10 lakh" — never a figure, because a band is all a filter needs and a salary is more than we should hold. Optional, and never used in matching; it exists only so you can filter and be found. | Until you delete your account or clear the field |
| Two area choices (where you sleep, where you spend evenings) | To match you with people you could realistically meet. These are areas you pick from a list — never free text, and never a street address. | Until you delete your account |
| Location, when you open the app or use the map | Approximate location to check whether you are in the city we serve and to suggest which area to pick. This is the only reading that is ever stored, and we keep only the most recent one, never a history of where you have been: each reading replaces the last, so there is no trail to hand over, lose or be compelled to produce. Precise (GPS) location is used for two things and two things only — drawing your own dot on the map, and following your own journey when you ask for directions. A precise reading stays on your device and in the request that draws your route: it is never stored against your profile, never used to match you with anyone, and never shown to another person. If you refuse either permission, you pick your area yourself and everything else still works. | Replaced on each use; deleted with your account |
| Likes, passes, matches, messages | To run the product. | Until you delete your account, or the conversation ends |
| Notification token for this device (from Google Play services) | To deliver notifications — a message, a match, a like, or a post from someone you follow. The notification itself carries no message text: it carries the sender's name and an identifier, and the app fetches the rest after you tap it. | Until you sign out, uninstall, or delete your account; a token Google reports as dead is deleted immediately |
| Who you follow | To notify you when they post. A follow is not shown to the person you follow, there is no follower count anywhere in the app, and blocking deletes follows in both directions. | Until you unfollow, block, or delete your account |
| Whether your account is private, and when you made it private | A private account is not shown in anyone's match deck, is not shown a match deck, and serves no profile photos to anyone else. The feed, the people you follow, and your existing conversations keep working. | Until you turn it off, or delete your account |
| Technical logs (account identifier, timestamps, endpoint names) | Security, abuse investigation, and legal obligations. | 180 days |
What we do NOT collect
- No exclusion by community or caste. The app lets you say which communities or castes you are open to. It has no way to say which ones to hide, and we are not going to build one — the difference between those two is the whole reason the first is a preference and the second would be something else.
- No income figure. A band and nothing finer, because filtering is all it is for.
- Nobody learns where you are from us. We ask Android for approximate location — the network fix, accurate to about a kilometre — for everything that decides which area you are in, and we keep only your most recent reading, never a history of where you have been. The map asks for a precise fix to draw your own dot and to follow your own journey; that reading is never stored on your profile, never used to match you with anyone, and never sent to another person. We never show a distance between you and anyone else, because a distance that changes as people move can be used to work out where someone lives.
- No mobile number. We do not ask for one, we do not store one, and there is no SMS code anywhere in signing in. An account is an email address and a password.
- No Aadhaar, and no government identity document of any kind.
- No contacts, and no photo library scanning. The microphone is used only while you are recording a voice note or a video, and only after Android has asked you. Nothing listens in the background, and there is no always-on microphone anywhere in this app.
- Nothing from your messages is used for advertising or profiling. Message content is an input to nothing except delivering it to the person you sent it to, and safety review when someone reports it.
Where your data is held
Your profile, photos, messages and logs are stored on servers located in India.
One honest exception. Sign-in is handled by Firebase Authentication, a Google service. That means the email address you sign in with is also held by Google, on Google's infrastructure, which may be outside India. We use it only to verify that you control that address, and the confirmation mail is sent by that same service. If that matters to you, it is better that you know it now than discover it later.
Who we share it with
We do not sell personal data, and we do not share it for anyone else's advertising. We share only:
- with the companies named below, which process data on our instructions and for no purpose of their own;
- where the law requires it, or to respond to a lawful order.
These are every company that touches your data on our behalf, what we send them, and why. None of them may use it for anything else, and none of them receives it for advertising.
| Company | What we send | Why |
|---|---|---|
| Google (Firebase) | Your email address at sign-in, and a device token for notifications. | To check that a sign-in is really yours, and to deliver notifications. Push messages carry a title and a fixed short label such as “New message” — never the content of a message. |
| OpenAI | Photos and video frames you upload, at the moment you upload them. | To check automatically for nudity, graphic violence and other content we do not allow, before anybody else can see it. The image is checked and not kept by them for training. Written messages are never sent — not to OpenAI, not to anyone. |
| Sarvam AI | What you type to the in-app assistant, and any post you ask us to translate. | To answer you, and to translate between Kannada and English. Nothing is sent unless you ask for one of those two things. |
| Resend | Your email address, and the text of the mail itself. | To send you the verification link and account mail. Nothing else goes by email. |
| Hostinger | Everything, at rest. | They run the servers in India that hold the database and your photos. They do not read any of it. |
If we ever add another company to this list, this page changes before the change ships.
What other people can see
- Your name, age, photos, prompts and interests.
- The name of the area you chose — for example a neighbourhood name. Never a distance, never a map position, never an address.
- Whether you were active today or this week. Never a precise last-seen time.
Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you, and who we shared it with;
- correct or complete anything inaccurate;
- erase your data — see account deletion;
- withdraw a consent you gave, as easily as you gave it;
- nominate someone to exercise these rights if you die or become incapacitated.
Write to contact@oorusoul.com. We acknowledge within 24 hours and resolve within 15 days.
If something goes wrong
If personal data is exposed, we notify the Data Protection Board as soon as we become aware, provide a full description within 72 hours, and tell affected users within 72 hours. We also report qualifying security incidents to CERT-In within 6 hours, as required.
Children
OoruSuttu is for adults aged 18 and over. We do not knowingly allow anyone under 18 to create an account. If we find one, the account is removed and the data erased — we do not offer a parental-consent route, because we do not serve children at all. See our child safety standards.
Changes
This policy is versioned. When it changes materially we tell you in the app and record which version you were shown, and we notify you at least once a year regardless.