Privacy Policy

Spark ("we", "our", "us") is a dating platform operated in India. We are committed to protecting your personal data in compliance with the Digital Personal Data Protection (DPDP) Act, 2023.

Contact: support@sparkmatch.in

When you use Spark, we collect:

• Account data: Your name, email address, and Google ID (via Google OAuth sign-in).
• Profile data: Date of birth, gender, pronouns, bio (up to 500 characters), interests, and "looking for" preferences.
• Photos: Up to 6 profile photos you upload. Photos are stored in Supabase Storage and screened before publication.
• Location: Approximate GPS coordinates when you grant location permission. We apply a ±500m random offset before storage and never expose raw coordinates to other users.
• Usage data: Swipe actions (like/pass/super like), match history, messages, and reactions.
• Device data: Browser type, IP address, and session information for security and fraud prevention.

• To provide and improve the Spark service (matching, chat, discovery).
• To enforce safety rules (photo moderation, block/report handling).
• To enforce daily swipe limits and account integrity.
• To send transactional notifications (match expiry warnings, account deletion confirmation).
• We do not sell your data to third parties. We do not use your data for advertising.

Spark uses location to show you people nearby. Here is exactly what we do:

• Your GPS coordinates are fuzzed by a random ±500m offset before being stored in our database.
• Other users never see your coordinates. They only see a label such as "less than 1 km", "a few km away", or "nearby".
• Location updates are batched: we update at most every 10 minutes, and only if you have moved more than 200 meters.
• You can disable location visibility in Settings at any time. Your profile will no longer appear on the discovery map and no distance label will be shown to other users.

We share your data only with the following processors:

• Supabase: Our database and file storage provider. Data is stored in their infrastructure under a Data Processing Agreement.
• Google (Auth): We use Google OAuth for sign-in. Google provides your name, email, and account ID. We do not receive your Google password.
• Vercel / Railway: Our hosting infrastructure providers.
• Resend: Used for transactional emails only (match expiry, account deletion). No marketing emails.

• Active accounts: data retained for the duration of account activity.
• Deleted accounts: we perform a soft delete for 30 days. After 30 days, all personal data is permanently purged from our database and storage.
• Messages: permanently deleted when the associated match is purged.
• Photos: deleted from Supabase Storage when removed from your profile or when your account is purged.

As a data principal under India's Digital Personal Data Protection Act, you have the right to:

• Access your personal data by visiting your Profile page.
• Correct inaccurate data by editing your profile.
• Erase your data by using the "Delete Account" option in Settings. This initiates a 30-day soft-delete period followed by permanent purge.
• Withdraw consent at any time by deleting your account.
• Nominate a person to exercise your rights in case of death or incapacity (contact us to arrange).

To exercise rights or raise a grievance, contact: support@sparkmatch.in

Before a photo appears on your profile, it is automatically checked for inappropriate content. Photos that fail this check are rejected and never stored publicly. You are responsible for ensuring photos you upload depict only yourself and comply with our Terms of Service.

We use a session cookie to keep you signed in. See our Cookie Policy for details. We do not use advertising cookies or third-party tracking cookies.

Spark is strictly for users aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, please report it to support@sparkmatch.in and we will delete the account immediately.

We may update this policy periodically. When we make material changes, we will notify you via email or an in-app banner. Continued use of Spark after the effective date constitutes acceptance of the updated policy.