This policy explains how Mera Match Ltd ("we") uses personal data when you use the Mera Match app and website. We are the data controller. Contact us at contact@meramatch.com. Mera Match is only for adults aged 18 or over.
| Data | Why | Legal basis (UK GDPR) |
|---|---|---|
| Email address and password (stored by our authentication provider in hashed form) | Create and secure your account, verify your email, password reset | Contract |
| Profile: first name, date of birth, gender, who you are interested in, city and country, occupation, relationship goal, languages, hobbies and optional lifestyle answers, About Me, icebreakers | Show your profile to suitable members and find matches | Contract |
| Optional South Asian background and any religion-related answers you choose to give | Matching preferences you ask us to use | Explicit consent (you can remove these at any time in your profile) |
| Photos you upload | Your profile; only shown to eligible signed-in members | Contract |
| Likes, passes, matches, Marriage Intents, messages, Our Love Story answers | Provide the service | Contract |
| Blocks and reports (including reports about you) | Keep members safe, investigate misuse | Legitimate interests (member safety); legal obligations |
| Purchase records: store, product, dates, store transaction ids (never card details) | Give you Premium or Match Unlocks, handle refunds, accounts and tax | Contract; legal obligation |
| Launch-offer and referral records, including a one-way code derived from your email address | Apply the launch promotion and referral rewards fairly and prevent duplicate accounts | Legitimate interests (fair promotions, fraud prevention) |
| Early registration on our website: email address, your confirmations (18+, Terms and Privacy), whether you asked for launch updates, confirmation and email-sending records, and a one-way code of your network address used only to stop abuse | Confirm your email, reserve your early place and launch rewards, send your welcome email and, if you asked, launch updates and profile reminders | Contract (your registration); consent for updates and reminders (unsubscribe any time with the link in any reminder) |
| Notification token (only if you allow notifications) | Tell you about matches, messages and refreshed Likes | Consent (you can turn notifications off in your phone settings) |
We do not use advertising trackers, we do not sell your data and we do not track you across other companies' apps or websites. We do not use your location from your device; we only use the city and country you type.
Other members see your profile as described in the app. Our service providers process data for us under contracts: Supabase (database, authentication and photo storage, hosted in London, UK), Cloudflare (website hosting), Apple and Google (in-app payments, which they process under their own privacy policies), Google Firebase (delivering notifications) and Resend (sending account, early-registration and reminder emails). Some providers may process data outside the UK; where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement/Addendum. We may disclose information where the law requires it or to protect someone from serious harm.
| Data | Kept for |
|---|---|
| Account, profile, photos, likes, matches, messages | Until you delete your account (deleted immediately, removed from backups within 30 days) |
| Reports made about an account | Up to 3 years after the account is deleted, with the account details removed except a one-way email code, so serious misuse can be investigated and banned members cannot simply return |
| Purchase and subscription records | 6 years (UK tax and accounting rules), without your profile |
| Early registration not confirmed | Deleted after 14 days |
| Confirmed early registration | Until you create your app account or the launch promotion ends; the network-address code is deleted after 30 days. Ask us at any time to delete it. |
| Launch-offer numbering (one-way email code) | Until the promotion and Founding Member scheme end, so one place is given per email address |
You can access, correct, download (Account & privacy → Download my data) and delete your data (Account & privacy → Delete my account, or see Delete account). You can object to processing based on legitimate interests, withdraw consent at any time, and ask us to restrict processing. Contact contact@meramatch.com; we reply within one month. You can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
Data is encrypted in transit. Members can only reach data through checked server functions; photos are in private storage. No system is perfectly secure, so never share passwords, bank details or your home address in messages.
Mera Match is not for anyone under 18. We remove accounts we believe belong to under-18s. Report a concern from any profile using "Under 18 concern".
We will tell you in the app before material changes take effect.