Legal

Privacy Policy

Last updated 4 July 2026

He & Me ("He & Me", "we", "us", "our") is a dating and social app for LGBTQ+ adults (18+) in India, operated by [OPERATOR_NAME]. This Privacy Policy explains what personal data we collect, how we use, share, store, and protect it, and the rights and choices you have. It is written to align with the Digital Personal Data Protection Act, 2023 (DPDP) and the Information Technology Act, 2000.

We process your personal data based on your consent, which you give through the in-app consent step (the "By continuing you agree…" action shown at sign-in) and by using the app. You may withdraw consent at any time by writing to us or by deleting your account; withdrawal stops processing for the related purpose, and some features may then stop working. If you do not agree with this Policy, do not use He & Me.

1. Who we are

He & Me is operated by [OPERATOR_NAME], [REGISTERED_ADDRESS]. For any privacy question or request, contact support@heandme.in or our Grievance Officer (§12).

2. Information we collect

a. Information you give us

• Account: your mobile number (for OTP sign-in) and/or, if you use Google Sign-In, your Google email, name, and account identifier.
• Profile: display name, age/date of birth, position, weight (optional), height (optional), bio (optional), city, and profile photos if/when you add them.
• Messages & media: chat messages and any photos you share, stored to deliver them between you and the recipient.
• Safety signals: users you block, mute, or report, and the reason you give.

b. Collected automatically

• Location: with your permission, approximate or precise device location, to show nearby people and distance. Without permission, we use the city you select. You can revoke this any time in device settings.
• Usage & device: online/last-active status, app activity, a push-notification token, and standard technical data (IP address, device model, OS, network) — used to run the service, prevent fraud, and improve performance.

c. From third parties

• Basic profile info from Google if you use Google Sign-In; transaction status from a payment provider if/when paid plans launch.

d. Sensitive information. Because He & Me is an LGBTQ+ app, your use of it may imply information about your sexual orientation. We treat this as sensitive, do not sell it, and do not use it for advertising. What you put in your profile is your choice.

3. How we use your information

To create and operate your account and profile; show nearby people and enable discovery, chat, block, mute, and report; deliver messages and notifications; keep the community safe (review reports, enforce our Terms, prevent abuse and fraud); provide support; send service and (where permitted) promotional communications; and comply with law. We do not sell your personal data or use it for third-party advertising.

4. How we share your information

• With other users: your profile and approximate distance are visible to other users. Your phone number and email are never shown to other users.
• Service providers (processors), only to run the app, under confidentiality and security obligations:
  • Supabase — database & file storage — https://supabase.com/privacy
  • Upstash — presence/session data — https://upstash.com/trust
  • Google Firebase / Google Sign-In — push notifications & authentication — https://firebase.google.com/support/privacy
  • MSG91 (when enabled) — SMS OTP — https://msg91.com/legal/privacy-policy
  • Razorpay (when paid plans launch) — payments (they handle card data directly; we don't store card numbers) — https://razorpay.com/privacy/
  • Agora (when calls launch) — real-time audio/video — https://www.agora.io/en/privacy-policy/
• Law & safety: we may disclose data where required by law or to protect the rights, safety, or property of users, the public, or He & Me.
• Business transfer: in a merger, acquisition, or sale of assets, data may transfer to the successor, subject to law and appropriate safeguards.
• Automated processing: we may use automated systems for recommendations, fraud/abuse detection, and performance. We do not make solely-automated decisions with legal effect on you.

5. Data retention

We keep your data only as long as needed to provide the Services, comply with law, resolve disputes, prevent fraud, and keep the platform safe. If your account is inactive for a prolonged period, we may retain your data for a reasonable period unless you request deletion. When you delete your account (Settings → Account → Delete Account), we remove your profile, messages, and associated data from our active systems; limited records may be retained where required by law or for safety/fraud-prevention, after which they are deleted, anonymised, or securely archived.

6. Your rights and choices

Subject to applicable law, you may: access your data; correct/update it (much of it directly in the app); delete your account and data; withdraw consent; and request a summary of your personal data and the categories of third parties it has been shared with. To exercise these, use the in-app controls or contact support@heandme.in / our Grievance Officer (§12). You can also control location and notifications in your device settings, and deactivate (hide) your profile without deleting it.

7. Security

We use reasonable technical and organisational measures, including encryption in transit and at rest, role-based access control and least-privilege access, secure authentication, and hashed credentials. Access is limited to authorised personnel under confidentiality obligations, and we conduct periodic security reviews. No system is 100% secure, but we work to protect your information and improve our safeguards.

8. Breach detection & notification

We monitor system logs, access records, and security alerts to detect unauthorised activity. If a personal-data breach occurs, we will take reasonable steps to contain and investigate it and will notify affected users and the competent authorities as required under applicable law.

9. Communications

We may contact you via in-app notifications, push, email, or SMS for account, security (OTP), and service messages, and — where permitted — promotional messages. You can opt out of promotional messages any time; essential service messages will still be sent.

10. Children

He & Me is strictly for adults 18 and older. We do not knowingly collect data from anyone under 18 and will remove any account we learn belongs to a minor. See our Safety & Child Protection Policy.

11. International

He & Me serves users in India. Your data may be processed and stored by our providers in data centres that may be located outside India, with appropriate protections in place.

12. Grievance Officer / data-protection contact

For any grievance about this Policy or the processing of your personal data:

• Grievance Officer: [GRIEVANCE_OFFICER_NAME]
• Email: support@heandme.in
• Address: [REGISTERED_ADDRESS]

We acknowledge within 24 hours and endeavour to resolve within 15 days, per applicable law. If you are not satisfied, you may approach the appropriate authority after exhausting our grievance process.

13. Changes

We may update this Policy; we will post the new version with an updated date and, where appropriate, notify you in-app. Continued use means you accept the revised Policy.