Privacy policy
Draft pending review by Indian counsel. This policy is not yet in force. Items marked [counsel to confirm] have not been checked by a lawyer.
Last updated: draft of 15 November 2026 [counsel to confirm the effective date]
MeAndWho Club is a private matchmaking service for adults who want a serious relationship. This policy explains what we collect, why, who else handles it, how long we keep it and what you can do about it.
Who we are
MeAndWho Club is run by Amrik Innovates (OPC) Private Limited, 376, Dharampuri, Solsinda, Sanwer, Indore, Madhya Pradesh 453551, India (“we”, “us”).
- General and privacy questions: ami@amrikinnovates.io
- Grievance Officer: Amrik Singh Khalsa, singhamrikkhalsa@gmail.com
Under India’s Digital Personal Data Protection Act, 2023 we are the data fiduciary for your personal data. [counsel to confirm which DPDP provisions apply on the effective date, and whether the IT Act s.43A and SPDI Rules 2011 wording is also needed until DPDP s.44 commences]
Who can use MeAndWho Club
You must be 18 or older. The service is for people in Bengaluru, plus members of our earlier matchmaking service who join with a code we give them. If we learn that a member is under 18, we close the account and delete its data as described in “Deleting your account”.
What we collect and why
We ask for your consent for each purpose separately, in the app, before we use your data for it. You can see and change every consent in Account > Privacy and my data. Some consents are needed to take part in matchmaking; the app marks which.
Things you give us
| What | Why we need it |
|---|---|
| Your mobile number | To sign you in with a one-time code. The code and your number are handled by Google’s Firebase Authentication. We never store your phone number. We keep only a Firebase user ID and the fact that your number was verified. |
| Date of birth | To check you are 18 or older and to match people within the ages they want. |
| First name or nickname | Shown on your introduction card and in chat. It is never sent to our AI. |
| Gender and who you’d like to meet | To find people who fit both of you. These are sensitive and are never shown on your card. |
| Assessment answers | Your answers about yourself and what you want in a partner, used for matching. Some are sensitive, such as religion and caste or community, and are optional. Caste or community never appears on an introduction card. An answer appears on your card only if you turn it on. |
| Your AI conversation | Your replies in the conversation with our AI matchmaker. See “How we use AI”. |
| A ChatGPT summary you paste (optional) | Our AI turns it into suggestions for you to confirm. We delete the pasted text straight away and keep only the suggestions you confirm. |
| Photos (2 to 6) | Shown on your introduction card if you pick them. We re-encode each photo, which removes hidden details such as where it was taken. |
| Messages | Text chat with people you’ve matched with. |
| Reports, blocks and appeals | To keep members safe and to review decisions. |
| Feedback after introductions (optional) | Private notes on how an introduction or date went, to improve matching. Never shown to the other person. |
| A friend’s first name (optional) | If you invite a friend, we keep their first name and a single-use code. We don’t ask for their phone number. Unused invites expire after 30 days. |
If you ask for early access on our website
If you leave your email address on meandwho.club to hear when the club opens, we keep that address, the city you chose to tell us (optional), the date, and which version of the notice on the form you agreed to. We use it only to write to you about the club opening. If you came to the form from a link in one of our posts, we also add one to that post’s sign-up count for the week. We don’t save which post with your email address. We don’t keep your IP address or device details with it, and it isn’t linked to a member account. To delete it, email us (see “Questions and complaints” below).
When you visit our website
Our website, meandwho.club, is hosted by Vercel. Like any web host, Vercel receives your IP address and browser details with each request, to deliver pages and protect the site from attacks. [counsel to confirm Vercel’s retention and location]
To learn which pages and posts are useful, the site’s own script counts visits. With each page it sends us: the page address; the kind of site you came from, such as Instagram or a search engine; the tag in the link you followed, such as which of our Instagram posts; whether the page is open inside the Instagram or Facebook app; which parts of the home page came into view; and steps on the early-access form, such as started or sent. We add these to daily totals and keep only the totals, for up to 2 years.
We don’t use cookies, we don’t give you an ID, and we don’t keep your IP address or browser details with these totals, so we can’t tell one visitor from another. To count a visit once and credit a sign-up to the right post, your browser keeps the link’s tag and a “counted” note in this tab until you close it. If you pick a light or dark theme, your browser remembers that choice; it is never sent to us. The totals are stored with our other data in AWS Mumbai and are not shared with advertisers or analytics companies.
If you open our site inside the Instagram or Facebook app, Meta’s in-app browser may collect information under Meta’s own privacy policy. We don’t control that. To avoid it, open the link in your phone’s browser. [counsel to confirm]
Your live selfie check and face pattern (biometric data)
Every member does a short live video selfie. It runs in a web page inside the app, and the video goes to Amazon Rekognition Face Liveness in AWS Mumbai to check that you are a real person who is present.
- No selfie images are kept. We set the check so that AWS keeps no images, and we store only the result (passed or not) and a confidence score.
- We keep a face pattern. This is a set of numbers that describes your face, not a photo. It is stored in Amazon Rekognition in AWS Mumbai. We use it for two things only: to stop one person from holding more than one account, and to check that your profile photos show you.
- If your face pattern looks like another member’s, a person on our team reviews it before anything happens to either account.
- The face pattern is deleted when you withdraw the “Live selfie check” consent or delete your account. Without it you can’t take part in matchmaking. [counsel to confirm that keeping the face pattern until consent is withdrawn or the account is deleted is acceptable; an older product document said templates would be deleted after verification]
ID badge through DigiLocker (optional)
If you choose the ID check, you sign in to DigiLocker through Setu, our verification partner. We read your date of birth and photo from your Aadhaar record, check that you are 18 or older, that the date of birth matches the one you gave us, and that the photo matches your live selfie.
- We never store your Aadhaar number or the document. We keep only the outcome: over 18 or not, whether the date of birth matched, and the face match score.
- The DigiLocker access is revoked straight after we read it.
[counsel to confirm the DigiLocker and Setu partner terms and any Aadhaar-related wording]
Things created while you use the service
| What | Why |
|---|---|
| Profile insights | Notes our AI suggests from your answers and conversation. Nothing is used until you confirm it, and the app keeps what you said apart from what the AI suggested. |
| Introductions | Who you were introduced to, match scores, the reason we gave, and each person’s answer. |
| Membership records | Your plan, the store’s reference for it and its dates. Payment itself is handled by Google Play or the App Store; we never see your card or UPI details. |
| Device push token | To send you notifications. Lock-screen text never includes names or message content. |
| Consent records | A history of what you agreed to or withdrew, and which version of the notice you saw. |
| Security logs | For each request to our service: the method, the address called, the result, the time taken and your IP address. We never log what you wrote. |
Voice typing
When you speak an answer instead of typing it, your phone’s own speech recognition turns it into text. When your phone can do this on the device, the audio stays on the phone. Otherwise your phone’s speech service (Google on Android, Apple on iPhone) processes it under their own privacy terms. The app tells you before that happens. We receive only the text, never the audio. [counsel to confirm the disclosure for the phone’s speech service]
What we don’t do
- We don’t sell your data.
- We don’t show ads, and the app has no advertising or analytics trackers. Our website counts visits without cookies and without identifying you; see “When you visit our website”.
- We don’t use your data to track you across other companies’ apps or websites.
How we use AI
Our AI matchmaker is Claude, made by Anthropic. It:
- asks you follow-up questions in the AI conversation and suggests notes for your profile;
- turns a ChatGPT summary you paste into suggestions;
- writes the short “why we think you’d get on” note on an introduction, from answers both people chose to share;
- suggests ideas for a first date, from the shared answers of the two people.
The AI never chats as you or for you, and it does not decide on its own who you meet. During the pilot, a person on our team approves every introduction before it reaches you. Both people must say yes before a chat opens.
What the AI receives: your answers, your conversation replies, a summary you paste, and for introductions the answers both people chose to share. What it never receives: your name, phone number, photos, face pattern or ID details.
Where AI processing happens: at present, AI requests go to Anthropic’s own service, which processes them outside India. [counsel to confirm the countries, Anthropic’s data retention and no-training terms, and the contract (DPA) that covers this transfer]
AI conversation memory: off by default. Without it, we delete each conversation’s messages when the conversation ends and keep only the notes you confirmed. If you turn on “Remember my AI conversations”, we keep them so the AI doesn’t repeat itself, until you turn it off or delete your account.
Who can see your data
Other members
When we introduce you to someone, they see your first name, your age, the photos you picked and the answers you chose to share. Nothing else. After you both say yes, they also see the messages you send them.
Our team
During the pilot our team is the founder, plus a backup reviewer for safety reports once one is named. When reviewing a proposed introduction, the founder sees both people’s approved profile details, the AI’s note and the match scores. Private answers, AI conversations and ID details are not shown there. Safety reports and the messages kept with them are seen only by people handling the report. Staff actions are recorded in an audit log.
Service providers who handle data for us
| Provider | What they do | What data | Where |
|---|---|---|---|
| Vercel | Hosts our website and passes the early-access form to our server | IP address and browser details sent with each page request, and the form’s contents in transit | Outside India [counsel to confirm] |
| Amazon Web Services | Hosting, database, photo storage, live selfie check, face pattern, photo moderation, staff alert emails | Everything we store | India: Mumbai, with backups in Hyderabad |
| Anthropic | AI matchmaker (Claude) | Answers, conversation replies, pasted summaries, shared answers | Outside India [counsel to confirm] |
| Google (Firebase Authentication) | Sign-in with a one-time code | Your phone number | Outside India [counsel to confirm] |
| Setu | DigiLocker connection for the optional ID badge | Your DigiLocker sign-in and the record you share | India [counsel to confirm] |
| Expo | Delivers push notifications | Device push token and the generic notification text | Outside India [counsel to confirm] |
| Google Play, Apple App Store | Subscriptions and payments | Purchase records, under their own privacy policies | Their own locations |
Each provider handles data only to provide its service to us. [counsel to confirm that a data processing agreement is in place with each provider before launch]
When the law requires it
We may share data when the law, a court or a government authority requires it, or to protect someone from serious harm. [counsel to confirm the wording for disclosures under the IT Act and IT Rules 2021]
Where your data is stored
Our database, your photos, your face pattern and our logs are in AWS Mumbai (ap-south-1). Backups are copied to AWS Hyderabad (ap-south-2), also in India. The exceptions, processed outside India, are listed in the table above: sign-in codes (Google Firebase), push notifications (Expo), our website host (Vercel) and, at present, AI requests (Anthropic). Our website is hosted by Vercel, whose servers may be outside India. [counsel to confirm the cross-border transfer disclosure under DPDP s.16 and the SPDI Rules]
How long we keep it
| Data | How long |
|---|---|
| Your account, answers, profile, photos and settings | While your account is open. Deleted when you delete your account. |
| Face pattern | Until you withdraw the live selfie consent or delete your account |
| Live selfie check results | 1 year, to spot fraud (proposed) [counsel to confirm] |
| AI conversation messages | Deleted when each conversation ends, unless conversation memory is on |
| Pasted ChatGPT summary | Not stored |
| Website visit totals (no personal data) and sign-up counts per post | Up to 2 years (proposed) |
| Email address and optional city from the website’s early-access form | Until we have told you the club is open, or until you ask us to delete them, whichever is first (proposed) [counsel to confirm] |
| Messages you sent | Deleted with your account, except messages in a chat that was reported, which are kept hidden as safety evidence |
| Safety reports and appeal decisions | 3 years after the report is closed (proposed) [counsel to confirm against the IT Rules] |
| Membership and billing records | 8 years, for tax and accounting (proposed) [counsel to confirm] |
| Record of your privacy requests | 3 years, as proof we handled them (proposed) [counsel to confirm] |
| Consent history | While your account is open, then for a period to prove consent [counsel to confirm the period] |
| Security logs and audit log | 1 year (at least 180 days, as CERT-In requires) |
| Introductions that were decided | The member IDs and scores are kept, without the note, to check how well matching works [counsel to confirm] |
| Backups | Deleted on rotation after 35 days |
“Proposed” means the period has not yet been confirmed by counsel.
Your choices and rights
You can do most of this yourself in the app, under Account > Privacy and my data:
- See your consents and change them. Each one can be withdrawn on its own, as easily as it was given. Withdrawing a consent that matchmaking needs takes you out of matchmaking.
- Get a copy of your data. “Get a copy of my data” gives you what we hold about you.
- Correct your data. You can edit your answers and review, correct or remove the notes on your profile.
- Pause. Pausing stops new introductions. It does not pause a paid membership.
- Delete your account. See below.
- Complain. Write to the Grievance Officer (see “Questions and complaints”).
[counsel to confirm the full list of rights under DPDP s.11 to s.14, including the right to nominate someone to act for you, which the app does not offer yet, and the response time for requests made by email]
Deleting your account
In the app: Account > Privacy and my data > Delete my account. Deletion starts straight away. The app shows you each place your data is being deleted from and what we keep and why.
If you can’t use the app, email ami@amrikinnovates.io from the email address you want us to reply to, with the subject “Delete my account”. We will ask you to confirm the request before we act on it. [counsel to confirm how a member without the app proves the account is theirs, given that we don’t store phone numbers]
When you delete your account we delete your profile, answers, photos, face pattern, AI conversations, messages you sent, blocks, feedback and device tokens, and we delete your sign-in record at Firebase. We keep, with restricted access:
- safety reports and the evidence kept with them, for safety and legal obligations;
- membership and billing records, for tax and accounting;
- a record of your deletion request;
- the security and audit logs, which hold IDs, not your answers or messages;
- a placeholder account record (ID and status only) while those records refer to it.
Deleting your account does not cancel a subscription. Cancel it in Google Play or the App Store.
How we protect your data
- Your phone talks to our service over HTTPS.
- The database, photo storage and logs are encrypted with keys managed in AWS.
- Photo storage is private. Photos are shown through short-lived links that our service creates only for people allowed to see them.
- Verification data is kept in a separate part of the database that matching never reads.
- Staff access is limited to what each task needs, and staff actions are logged.
No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires. [counsel to confirm notification duties: CERT-In within 6 hours, and DPDP notice to affected members and the Data Protection Board]
Children
MeAndWho Club is only for people 18 and over. We don’t knowingly collect data from anyone under 18. If you think someone under 18 is using the app, report them in the app or email us.
Changes to this policy
When we change this policy, we update the date at the top and tell you in the app. If a change affects something you consented to, we ask for your consent again before it applies.
Questions and complaints
- Grievance Officer: Amrik Singh Khalsa, singhamrikkhalsa@gmail.com
- We acknowledge complaints within 24 hours and aim to resolve them within 7 days. [counsel to confirm against IT Rules 2021 Rule 3(2) as amended]
- Post: Amrik Innovates (OPC) Private Limited, 376, Dharampuri, Solsinda, Sanwer, Indore, Madhya Pradesh 453551
If you are not satisfied with our answer, you may be able to complain to the Data Protection Board of India once the relevant DPDP provisions are in force. [counsel to confirm]