1. Who We Are

Bluedate is the Data Fiduciary as defined under the DPDP Act, 2023. We determine the purpose and means of processing your personal data.

• Company name: Bluedate
• Registered in: India
• Contact: privacy@bluedate.io

2. Personal Data We Collect

We collect the following categories of personal data:

a) Data you provide directly

• Name, email address, phone number (WhatsApp)
• College / university name, year of study
• Gender, age, and date of birth
• Preferences, interests, and meet feedback
• Profile photographs (if any)

b) Data collected automatically

• IP address, browser type, device identifiers
• Pages visited, time spent, referral source
• Cookies and similar tracking technologies

c) Sensitive Personal Data or Information (SPDI)

Under the IT (SPDI) Rules, 2011, certain data such as your sexual preferences and biometric data are classified as sensitive. We collect only the minimum data necessary for matching and will obtain your explicit consent before processing any SPDI.

3. How We Use Your Data

We process your data only for the following specified, lawful purposes:

• To create and manage your account
• To generate your weekly curated match using our AI algorithm
• To send your match details via WhatsApp
• To improve matching accuracy based on your feedback
• To send service-related communications
• To comply with legal obligations under Indian law
• To prevent fraud, abuse, and ensure platform safety

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Data Sharing

Your personal data is shared strictly on a need-to-know basis:

• Your match: Only the information necessary to facilitate your meet (e.g., first name, college, contact details) is shared with your weekly match — and vice versa.
• Service providers: Trusted third-party vendors who assist us in operating the platform (e.g., cloud hosting, messaging), bound by confidentiality agreements.
• Law enforcement: When required by a court order, government authority, or applicable Indian law.

Your data is never publicly displayed on any profile or feed.

5. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide services. You may request deletion at any time (see Section 7). Upon account deletion, we will erase your personal data within 30 days, except where retention is required by law (e.g., financial records for 7 years under the Companies Act, 2013).

6. Cookies

We use essential cookies necessary for the functioning of our platform and analytics cookies to understand usage patterns. You may disable non-essential cookies through your browser settings. Continued use of the platform constitutes consent to essential cookies.

7. Your Rights under the DPDP Act, 2023

As a Data Principal under the DPDP Act, 2023, you have the following rights:

• Right to information: Know what personal data we process and for what purpose.
• Right to access: Obtain a summary of your personal data held by us.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data.
• Right to grievance redressal: Raise concerns with our Grievance Officer.
• Right to nominate: Nominate another person to exercise your rights in the event of death or incapacity.
• Right to withdraw consent: Withdraw consent at any time; withdrawal does not affect lawfulness of prior processing.

To exercise any of these rights, write to us at privacy@bluedate.io. We will respond within 30 days.

8. Security

We implement reasonable security practices as mandated by the IT (SPDI) Rules, 2011, including encryption in transit (TLS), access controls, and periodic security audits. While we take all reasonable steps to protect your data, no transmission over the internet is 100% secure.

9. Children's Privacy

Bluedate is intended for users aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor has provided us with data, we will delete it immediately. Parents or guardians may contact us at privacy@bluedate.io.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer:

• Name: Grievance Officer, Bluedate
• Email: grievance@bluedate.io
• Response time: Within 15 days of receipt of complaint

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-app notice. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

12. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising shall be subject to the exclusive jurisdiction of the courts located in India.