DRAFT — needs lawyer review before launch (DPDP Act 2023 and Google Play requirements).

Privacy policy

Last updated: 5 October 2026. Data fiduciary: WhitePixel Designs Private Limited, Pune, Maharashtra, India.

What Pema is

Pema is a private matchmaking app for verified members of community networks. Each community's organisers check profiles before other members can see them.

Data we collect

• Account: mobile number (for sign-in by one-time password), app language.
• Profile: name, gender, date of birth, height, city, education, occupation, income range, family details, marital status, who the profile is for, and an "about" text.
• Sensitive details you choose to add: religion, community, caste or sub-community, mother tongue. These are used only to show your profile to members of your chosen community.
• Photos you upload, stored privately and shown only to verified members allowed by your photo setting.
• Activity: interests sent and received, messages, blocks, reports, shortlists.
• Device: push notification token, crash reports and anonymous usage analytics.
• Consent records: when you confirmed you are 18 or older and accepted these terms, and the declaration that the candidate agreed when a profile is created for someone else.

Why we use it

• To verify members and keep each community private.
• To show matches, deliver interests and messages, and send notifications.
• To keep members safe: reports, blocks, moderation, and preventing banned numbers from returning.
• To fix crashes and improve the app.

We do not sell your data or show advertising. Lock-screen notifications never include names or message text.

Who can see your data

• Verified members of your own community see your profile card and details, never your phone number.
• Your community's organisers see your profile to verify and moderate it.
• Service providers that host and run Pema (database and storage, SMS delivery, push notifications, crash reporting, analytics) under contract. Providers: Supabase (database, sign-in and file storage, hosted in Mumbai, India); Google Firebase (push notifications, crash reports and website hosting, Google infrastructure); PostHog (product analytics); MSG91 (SMS one-time passwords, India); Google Play (app distribution and, if offered, subscription billing).

How long we keep it

• Your profile, photos, interests and shortlists: until you delete your account.
• Messages you sent: the text is erased when you delete your account; the other member sees "Message removed".
• Report records, including a snapshot of the reported profile and any reported message: 2 years, as evidence for safety decisions.
• Organiser and admin action logs: 2 years.
• A keyed, one-way fingerprint of the phone number (not the number itself): 2 years, only if the account was banned or was under an open report when deleted, so a banned person cannot sign up again.
• Purchase and subscription records: for the period required by Indian tax and accounting law, without profile content.
• Banned accounts: profile, photos and message text are removed 30 days after the ban.

Your rights

• Access and correct your data in the app (My profile).
• Delete your account in the app (Me → Settings → Delete account) or on the account deletion page. Deletion is immediate and permanent.
• Withdraw consent by deleting your account.
• Nominate another person to exercise your rights, and complain to the Data Protection Board of India.

Profiles created for someone else

A parent or relative may create a profile for a candidate only after the candidate agrees to the profile and its photos being shared with community members. Organisers confirm this during verification.

Children

Pema is only for people aged 18 or older, and profiles must meet the legal marriage age (21 for men, 18 for women). See our child safety standards.

Grievance officer

Jeevan Bhalerao, pemaliveofficial@gmail.com, WhitePixel Designs Private Limited, Pune, Maharashtra, India. We acknowledge complaints within 24 hours and resolve them within 15 days.