Privacy Policy

DeshiFace helps South Asians find a serious partner. To do that well we need some personal information, and we take looking after it seriously. This policy explains what we collect, why, who we share it with and the rights you have under the EU General Data Protection Regulation (GDPR).

Who we are

DeshiFace is run by [COMPANY LEGAL NAME], a company registered in Portugal (NIPC [NUMBER]) at [REGISTERED ADDRESS]. We are the data controller for the information described here. You can reach us at [privacy@deshiface.com].

Right now: the waitlist

Before launch, the only personal information we collect is what you give us on the waitlist form:

• your email address,
• the country you live in,
• your gender, and
• what kind of relationship you are looking for.

We also record when you agreed to hear from us and which version of the wording you agreed to. We use this information only to invite you when DeshiFace opens in your country and to plan a balanced launch (for example, making sure there are enough members in each city before we open it). Our legal basis is your consent, which you can withdraw at any time by using the unsubscribe link in any email or by writing to us.

We keep waitlist details until you join the app, unsubscribe, or 24 months after you signed up, whichever comes first. Then we delete them.

When the app opens

When you create a DeshiFace account we will also process:

• Profile information you choose to add: name, date of birth, photos, city, languages, family origin, education, profession, height, lifestyle answers and prompts. We use this to show your profile to compatible members (contract).
• Verification selfies, used only to confirm you are the person in your photos. Only our moderation team can see them (legitimate interest in keeping members safe).
• Messages you send to matches, so we can deliver them, and so moderators can review a conversation if it is reported (contract and legitimate interest).
• Approximate location, rounded to about 1 km. We never show your exact location to anyone.

Sensitive information

Faith and anything you tell us about your health or sexuality are special-category data under GDPR. Sharing them is always optional, we only process them with your explicit consent, you choose whether they appear on your profile, and we never use them for advertising.

Who we share it with

We never sell your personal information. We share it only with service providers who help us run DeshiFace:

• Supabase (database, file storage and sign-in), hosted in the European Union;
• Vercel (website hosting);
• [Resend or other email provider] (sending emails);
• [Sentry] (error monitoring, with personal details removed where possible).
• Google Firebase Cloud Messaging and Apple Push Notification service (delivering notifications to your phone, if you turn them on).

Where a provider processes data outside the European Economic Area we rely on an adequacy decision (such as the EU-US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses. [Confirm transfer mechanism for each provider.]

Notifications

If you turn on notifications, we store a token for your device so we can tell you about new matches and messages. Notifications say who and what kind (“New message from Aanya”), never what was written. Turn them off any time in Me › Notifications or your phone’s settings.

Deleting your account

Me › Delete account hides your profile straight away and permanently deletes your account, photos, selfie and messages within 30 days. Reports about safety are kept without your details. See how to delete your account.

Cookies

This website uses only cookies that are strictly necessary for it to work. If we add analytics later, we will ask first, and rejecting will be exactly as easy as accepting.

Your rights

You can ask us at any time to:

• give you a copy of your data,
• correct it,
• delete it,
• restrict or object to how we use it,
• send it to you or another service in a portable format, or
• withdraw any consent you have given.

Email [privacy@deshiface.com] and we will reply within one month. You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or the authority where you live.

Age

DeshiFace is only for adults aged 18 and over. We delete any information we learn belongs to someone younger.

Changes

If we change this policy in a meaningful way we will tell you by email or in the app before the change takes effect. See also our Terms.