[go: up one dir, main page]
KoimiloKoimiloLive

Privacy Policy

Last updated: October 21, 2026 • Effective Date: September 20, 2026

Koimilo ("we", "our", or "us"), accessible via https://koimilo.com, is committed to protecting your privacy. This Privacy Policy details our practices regarding the collection, use, disclosure, and protection of your personal information, including data collected via Google Sign-In, in compliance with the Digital Personal Data Protection (DPDP) Act 2023 and the Google API Services User Data Policy.

1. Information We Collect

We collect only the minimum necessary information required to provide an authentic, safe, and localized dating experience for adults in Bhilai and Durg:

  • Account Data: Email address, cryptographically hashed passwords (for email-based sign-in), display name, date of birth (to verify you are 18+), and phone number for SMS/OTP verification.
  • Profile & Preference Data: Bio, personal interests, college or campus affiliation, gender preference, city zone (Bhilai / Durg), and public profile photos you upload.
  • Communication Data: In-app chat messages, mutual match records, likes, and voice notes exchanged between consenting, matched users.
  • Safety & Moderation Logs: User reports, blocks, moderation flags, and device fingerprints used strictly to enforce community guidelines, prevent repeat ban evasion, and protect user safety.

2. Google User Data (Google Sign-In Disclosures)

Our application will access the data you have provided to us when you sign in with Google, limited strictly to your basic identity information (openid, email, and profile non-sensitive scopes).

Specific Google User Data Accessed & Processed:

  • Email Address (email scope): Used as your unique Koimilo account identifier for secure authentication and service communications.
  • Display Name & Profile Picture (profile scope): Used to pre-fill your public dating profile name and initial avatar.

Demographics & Phone Verification (Non-Google Data):

Koimilo does not request, access, or fetch your date of birth, gender, or phone number from Google APIs or Google accounts. Users provide their age, gender identity, dating preferences, and optional mobile verification directly and voluntarily inside Koimilo's onboarding interface.

What We Do NOT Access:

We do not request or access any sensitive or restricted Google user data (including Google People API sensitive data, Google Contacts, Google Drive files, Google Calendar events, Gmail messages, financial records, or location history).

How We Use Google User Data:

We will use your data to provide you with the services you requested, including authenticating your identity, creating your secure profile, preventing fraud and duplicate bot accounts, and enabling secure communication with matches.

3. Google API Services Limited Use Compliance

Koimilo strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements:

  • Limited Use Clause: Koimilo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • No Sale to Third Parties or Brokers: We will not sell your data to third parties. Under no circumstances do we sell, lease, or transfer Google user data to data brokers or information resellers.
  • No Advertising Use: We do not use or transfer Google user data for serving advertisements, including personalized, retargeted, targeted, or interest-based advertising.
  • No AI/ML Training: For AI/ML use cases, Koimilo explicitly affirms that Google user data and Google Workspace APIs are not used to develop, improve, or train generalized or non-personalized artificial intelligence (AI) and/or machine learning (ML) models.
  • No Credit or Lending Uses: Google user data is never used for determining credit-worthiness or for lending purposes.
  • No Unauthorized Transfers: We do not transfer or disclose your information to third parties for purposes other than providing or improving the core user-facing features of Koimilo.

4. Legal Grounds & Purposes of Processing

We process your personal information under the following legal bases:

  • Service Delivery: To display relevant local matches, enable real-time messaging, and facilitate voice calls.
  • Trust & Safety: To enforce community rules, conduct photo moderation, and investigate safety reports.
  • Legal Compliance: To comply with applicable Indian laws, including the Information Technology Act 2000 and the DPDP Act 2023.

5. Data Protection & Security Procedures

Security procedures are in place to protect the confidentiality of your data. We use encryption to protect your information both in transit and at rest:

  • Data in Transit: Encrypted using modern TLS 1.3 protocol.
  • Data at Rest: Encrypted using AES-256 standard encryption on enterprise-grade Supabase (PostgreSQL) databases.
  • Credentials: Passwords and authorization tokens are cryptographically hashed and salted before storage.
  • Row-Level Security: Strict database RLS policies guarantee users can only query authorized records.

6. Third-Party Sharing & Disclosures

We will not sell your data to third parties, but we may share it with our trusted partners who help us provide our services:

  • Database & Authentication: Supabase (PostgreSQL infrastructure).
  • Media & CDN Delivery: Cloudinary and Vercel edge networks.
  • Real-time Voice/Video: Agora RTC (voice notes and calls are peer-to-peer/ephemeral; no audio streams are stored).
  • Legal Compliance: If mandated by valid court orders or law enforcement agencies under applicable Indian jurisdiction.

We do not transfer or disclose your information to third parties for purposes other than providing and improving our application features.

7. Data Retention & Deletion Disclosures

We store your personal information for a period of time that is consistent with our business purposes. We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law. When the data retention period expires for a given type of data, we will delete or destroy it.

You may request for your data to be deleted by using either of the following methods:

  • In-App Deletion: You can permanently delete your account at any time by navigating to Settings → Account → Delete Account inside the app. All associated data is deleted immediately.
  • Email Deletion Request: You may request complete data erasure by emailing our support team at [email protected] with the subject "Account Deletion Request". Deletion requests are processed within 48 hours.
  • Revoking Google Sign-In Permissions: If you signed up via Google, you can revoke Koimilo's access to your Google account at any time directly from your Google Account Security Settings (https://myaccount.google.com/permissions).
  • Complete Purge: When your account is deleted, all personal data—including profile photos, chat transcripts, match history, phone numbers, and authentication tokens—is permanently wiped from our active databases.

8. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the following rights:

  • The right to access a summary of personal data being processed.
  • The right to correct, complete, or update inaccurate data.
  • The right to withdraw consent and request data erasure.
  • The right to readily available grievance redressal.

9. Contact & Grievance Officer

For privacy inquiries, data deletion requests, or grievances under the DPDP Act 2023, please contact our designated Grievance Officer:

Platform: Koimilo

Website: https://koimilo.com

Privacy Policy URL: https://koimilo.com/privacy

Email: [email protected]

Location: Bhilai & Durg, Chhattisgarh, India