Privacy Policy

This Privacy Policy explains how SabiSanou, currently operated by Ayush Mutum, an individual based in India ("SabiSanou", "we"), collects, uses, stores, and protects your personal data, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

1. What we collect

• Your Google account name and email address (if you sign in with Google), or your email address alone (if you sign in with an email code) — SabiSanou does not use phone-number verification
• Profile information you provide: name, date of birth, gender, city/state, bio, interests, looking-for preference, and optional details like job title, education, marital status, and height
• Profile photos (1–5 images) you upload
• Usage data: likes, matches, messages, reports, blocks, profile views, and activity timestamps
• Video Chat data: match pairing records and call session metadata (who you were paired with and when) — we do not record or store the video or audio content of your calls, which travel directly between members' devices wherever possible
• Your selected songs for Video Chat, if you use the shared-music feature (we don't collect any audio from you — the song library is provided by us)
• Payment metadata from Razorpay (we never receive or store your card or UPI details)

2. How we use it

We use your data to operate SabiSanou: creating and authenticating your account, showing your profile to other members, matching and messaging, pairing and connecting Video Chat calls, processing payments, moderating content, investigating reports, and improving the product. We do not use your data to train third-party AI models beyond the transient moderation check described below.

3. Photo moderation

Every photo you upload is automatically checked before it's stored, to block nudity, violence, and images that don't contain a real person; your first photo is additionally checked to confirm it clearly shows a face. This check is performed by a third-party AI model (Google Gemini); your image is processed transiently for this check and is not retained by Google beyond the API call.

4. Authentication data

Signing in with Google is handled by Google's own OAuth sign-in flow — we receive only your name and email address from Google, never your Google password. If you sign in with an email code instead, we send a one-time code to your email address to verify you control it. Either way, your session is maintained using secure, HTTP-only cookies.

5. Retention

We retain your profile data for as long as your account is active, plus a limited period afterward where legally required (e.g. to investigate safety reports filed shortly before deletion). Message history is retained only for the duration of an active match. Video Chat session metadata (who you were paired with and when — not call content, which we never store) is retained for a limited period to allow reporting and safety investigation, then deleted.

6. Deletion

Deleting your account (Settings → Delete account) permanently and irreversibly removes your profile, photos, messages, likes, matches, and Video Chat history from our systems, including underlying storage — not just a status flag. This action cannot be undone.

7. Sharing

We do not sell your personal data. We share data only with the service providers we rely on to run SabiSanou, each bound by its own data protection obligations:

• Supabase — database, file storage, authentication, and the real-time connection used for messaging and Video Chat signaling
• Google — Sign-In (OAuth), for account authentication, and the Gemini API, for automated photo moderation (images are processed transiently and not retained by Google beyond the API call)
• Razorpay — payment processing for subscriptions and purchases
• Vercel — application hosting; standard request logs (e.g. IP address, timestamp) pass through it as part of serving the app

We may also disclose data where required by law, to respond to a valid legal request, or to protect the safety of our members.

8. Your rights

Under the DPDP Act, you have the right to access, correct, and erase your personal data, and to withdraw consent at any time. Most of this is self-service from within the app (edit your profile, manage your photos, or delete your account from Settings); for anything else, contact our Grievance Officer below.

9. Grievance Officer

In accordance with the DPDP Act, 2023:
Name: Ayush Mutum
Email: ayushmutum6@gmail.com
Response time: within 30 days of a written complaint.

10. Age

SabiSanou is for users 18 and older only. We do not knowingly collect data from minors.