Are Dating Apps Legal in India? IT Rules, DPDP and Age Checks

The short answer: yes, dating apps are legal in India. No Indian law bans online dating, matchmaking or apps built for it, and using one as an adult is not an offence. What the law does do is put duties on the app: how it handles complaints, what it does with your data, and, from 2027, how seriously it must treat the possibility that a user is under 18.

This guide is about the platform side. If your question is whether an affair itself is legal, that is a separate subject, covered in our explainer on the 2018 adultery judgment. The one-line version: adultery stopped being a crime when the Supreme Court decided Joseph Shine v. Union of India in 2018, but it is still a ground for divorce.

Why there is no "dating app law"

India regulates dating apps the same way it regulates most online services: through general laws that apply to any platform carrying user content and personal data. Three frameworks matter.

• The Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, which set out what a platform must do to keep its legal protection for what users post.
• The Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, which govern how your personal data is collected, used and deleted.
• App store policy, which is not law but decides whether an Android app can be distributed through Google Play at all.

Separately, ordinary criminal law applies to what people do on the apps: extortion (Bharatiya Nyaya Sanhita s.308), publishing intimate images without consent (IT Act s.66E and s.67A), and impersonation.

Duty 1: IT Rules 2021, grievance officers and takedowns

A dating app hosts profiles and messages that users create, so it is an intermediary. The IT Rules 2021, notified on 25 February 2021 and amended in October 2022, April 2023 and again in February 2026, require an intermediary to (per the MeitY consolidated text):

• Publish its rules, privacy policy and user agreement prominently, in English or a language in the Eighth Schedule of the user's choice (Rule 3(1)(a)).
• Name a Grievance Officer with contact details and a complaint mechanism, published prominently on the website or app (Rule 3(2)(a)).
• Acknowledge a complaint within 24 hours and resolve it within 7 days (Rule 3(2)(a)(i)). This was 15 days until the IT Amendment Rules, 2026 took effect on 20 February 2026.
• Act within 2 hours (24 hours before the 2026 amendment) on a complaint about content that shows a person's private areas, nudity or sexual acts, or impersonates them, including morphed images (Rule 3(2)(b)).

If the Grievance Officer does not resolve your complaint, you can appeal to a Grievance Appellate Committee within 30 days (Rule 3A). An intermediary that fails to observe the Rules loses the safe-harbour protection of Section 79 of the IT Act (Rule 7).

What this means for you: before you sign up anywhere, look for the Grievance Officer's name and a working contact. If an app does not publish one, that tells you how it will treat you when something goes wrong.

Duty 2: the DPDP Act and Rules, and the May 2027 deadline

The DPDP Rules, 2025 were notified on 14 November 2025, according to the Press Information Bureau, with an eighteen-month period for phased compliance. MediaNama reports the phases as: the Data Protection Board from 13 November 2025, Consent Manager rules from 13 November 2026, and the main operative provisions, including Section 9 on children's data, from 13 May 2027.

For a dating app, the provisions that bite are:

• Section 9: children's data. A "child" under the Act is anyone who has not completed 18 years (s.2(f)). Processing a child's data needs verifiable consent of a parent or lawful guardian, processing likely to harm a child's well-being is barred, and the Act prohibits tracking or behavioural monitoring of children and targeted advertising directed at them (Section 9 text).
• Rule 10: how parental consent is verified. MediaNama summarises it as requiring the platform to confirm that the adult claiming to be the parent is at least 18 and to confirm their identity, using its own verified records or DigiLocker-based government ID.
• Your rights as a user. Per PIB, you can ask for access to, correction of and erasure of your data, and a platform must respond to such requests within ninety days. It must also display a contact for data queries.
• Breach notification. When a breach happens, affected users must be told without delay, in plain language (PIB). See what to do after a dating app data breach.

The penalties

The Schedule to the DPDP Act sets maximum penalties per breach (Schedule text, confirmed by PIB):

Failure	Maximum penalty
Reasonable security safeguards, s.8(5)	Rs 250 crore
Notifying a personal data breach, s.8(6)	Rs 200 crore
Obligations for children's data, s.9	Rs 200 crore
Significant Data Fiduciary duties, s.10	Rs 150 crore
Any other provision of the Act or Rules	Rs 50 crore

What "verifiable age" may mean for dating apps

Here is the practical problem. An adult dating app has no lawful reason to hold a minor's data at all, and parental consent for a 16-year-old to use a dating app is not a realistic path. So the safe reading for a dating platform is not "collect parental consent" but "make sure minors do not get in". The Act does not spell out a specific age-verification method for dating apps, and this is our reading, not a regulator's.

In practice, the options run from weakest to strongest:

1. Self-declared date of birth. A checkbox. Easy to lie to. This is roughly what MediaNama reported WhatsApp testing with some Indian users in August 2026, a prompt asking people to add their date of birth because upcoming laws require it.
2. Store-level age signals. Relying on the app store to keep minors out (see Google Play below).
3. Selfie liveness checks that confirm a real person matches the photos, but not necessarily their age.
4. Government photo ID plus live selfie, reviewed by a person or a system. Strongest for age, most sensitive for privacy, because the platform now holds ID data it must protect under the same Act.

The more an app verifies, the more it has to lose in a breach.

Google Play's rule for dating apps

Google Play's Age-Restricted Content and Functionality policy says apps whose core functionality is to facilitate matchmaking or dating must use Play Console functionality and tools to block minors. Apps where dating is only an incidental feature are not required to block minors, provided they age-gate those features.

Google's 15 April 2026 policy announcement clarified that such incidental-dating apps need not use Restrict Minor Access in the Play Console if they maintain effective alternative age-verification mechanisms for the dating features, with at least 30 days to comply. This is a store rule, not Indian law, and it applies only to apps distributed through Google Play.

Regulators are watching, but have not banned the category

On 9 April 2026 the National Human Rights Commission issued a notice to MeitY over the extramarital dating app Gleeden, on a complaint by the Delhi-based Sewa Nyaya Utthan Foundation, asking the ministry to examine the app's legal standing and whether safeguards exist for women and minors, with a report due by 23 April 2026 (Global Dating Insights). A notice asks questions; it is not a ban. We could not find any public order banning dating apps as a category at the time of writing. The complaint's focus, fake identities and underage access, is exactly what the DPDP deadline will test.

Timeline

Date	What happened
25 Feb 2021	IT Rules 2021 notified (grievance officer, 24h acknowledgement, 15-day resolution)
28 Oct 2022	IT Rules amended; Grievance Appellate Committees created
20 Feb 2026	IT Amendment Rules, 2026 in force: intimate-image takedowns in 2 hours, grievances resolved in 7 days, court/government takedown orders in 3 hours
2023	DPDP Act, 2023 enacted
14 Nov 2025	DPDP Rules, 2025 notified; Data Protection Board provisions apply
9 Apr 2026	NHRC notice to MeitY over Gleeden
15 Apr 2026	Google Play clarifies age rules for incidental-dating apps
13 Nov 2026	Consent Manager provisions take effect (MediaNama)
13 May 2027	Main DPDP obligations, including s.9 children's data, take effect (MediaNama)

Before you trust any app

Check for a named Grievance Officer, a privacy policy that says what is kept and how to delete it, and a clear answer on how minors are kept out and what happens to your ID afterwards. For how we answer those questions on Parda, a web app for married adults, see how verification works (government photo ID plus a live selfie, checked by a person; it confirms identity and age, not marital status or behaviour) and our privacy page. For the wider safety picture, read are extramarital dating apps safe?