Privacy Policy

Last updated: 20 June 2026

This Privacy Policy explains how CyphrX (“we”, “us”, “our”) collects, uses, shares, and protects your information when you use Kazar, our AI-powered matchmaking app, and related services (together, the “Service”). By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information you provide

• Account details: your mobile phone number, used to sign in via one-time password (OTP). We store it in a protected (hashed/encrypted) form.
• Profile details: your name, date of birth, gender, city and state, and attributes you choose to add — height, weight, diet, marital status, relationship intent, fitness level, drinking and smoking habits, languages, weekend plans, highest education, income range, intended timeline to settle, and a free-text bio.
• Photos: your profile photo(s) and a selfie used to verify that the photos are really you.
• Communications: messages you exchange with your matches, and search prompts you type to find people.
• Payment information: when you buy a membership or an Auto Match, payments are processed by the Apple App Store or Google Play; we receive confirmation and records of the transaction but do not store your card or banking details.

2. Information collected automatically

• Location: with your permission, your device’s precise location (GPS coordinates) to show you nearby matches and calculate distance. You can turn this off in your device settings.
• Usage & activity: your searches, likes/passes, matches, and subscription or purchase history.
• Device data: a push-notification token and basic device/app information needed to operate the app.

3. How we use your information

• To create your profile and find your most compatible matches.
• To verify your identity and that your photos are genuine, helping keep the community safe.
• To enable messaging between matched users.
• To process payments for memberships and Auto Match.
• To send you notifications (e.g., new matches and messages).
• To prevent fraud, abuse, and impersonation, and to enforce our Terms.
• To operate, maintain, and improve the Service.

4. How your information is shown to others

Kazar is a matchmaking service, so parts of your profile are shown to other members as part of how it works — your photo, age, location, and the attributes and bio you add. To protect you, your full name is hidden until you and another member mutually match, and we automatically remove phone numbers, social handles, and links from bios. You control what you put in your profile.

5. AI processing

To power matching and verification, your profile text and photos are processed by our AI provider (OpenAI). Specifically, your profile and bio text are converted into a numerical representation (an “embedding”) used to find compatible matches, and your photos are analysed to verify them and generate a short description. This processing is solely to provide the Service.

6. Service providers we share data with

We do not sell your personal data. We share it only with trusted providers who process it on our behalf to run the Service:

• Supabase — database and photo storage.
• Railway — backend hosting.
• OpenAI — AI matching and photo verification.
• Apple App Store & Google Play — in-app purchase and subscription billing.
• RevenueCat — managing in-app purchase and subscription status.
• 2Factor — sending login OTPs by SMS.
• Expo & Google Firebase — delivering push notifications.
• Netlify — hosting this website.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the public.

7. Data retention

We keep your information for as long as your account is active. You can delete your account at any time from the app (Profile → Delete Account), which removes your profile and associated data, except where we must retain certain records to meet legal, tax, security, or fraud-prevention obligations.

8. Security

We protect your data with measures such as encryption of sensitive identifiers, access controls, and secure, private storage of photos. No method of transmission or storage is 100% secure, but we work to safeguard your information and continuously improve our protections.

9. Your rights and choices

Consistent with India’s Digital Personal Data Protection Act, 2023, you can access and correct your information (by editing your profile), delete your account and data, withdraw consent (e.g., turn off location), and raise grievances. To exercise any right or ask a question, contact us using the details below.

10. Children

The Service is only for individuals 18 years or older. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.

11. International transfers

Some of our providers (such as OpenAI) process data on servers outside India. Where your data is transferred internationally, we take steps to ensure it remains protected in line with applicable law.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date. Continued use of the Service after changes means you accept the updated policy.

13. Contact us

For any privacy questions, requests, or grievances, contact our privacy team at privacy@cyphrx.com. We aim to respond within a reasonable time and in accordance with applicable law.