People in this category deserve a straight answer to the question “can this be used against me in court”, and most platforms bury it. This page is our answer.
Yes, a lawful order can reach what we hold. We are an Indian intermediary and we comply with valid legal process. Any platform telling you otherwise is either lying or is not subject to Indian law, and the second one will not help you when it matters.
That is precisely why we hold so little. The architecture is the protection, not the promise.
What we actually hold about you
| Data | Held? |
|---|---|
| Your legal name | No. Never stored on your profile, never shown to anyone. |
| Identity document image | Encrypted, deleted 30 days after review |
| Identity document number | Last 4 characters and a one-way hash only |
| Email address | Yes, while the account exists |
| Messages | Yes, until you delete them. Not end-to-end encrypted. |
| Photographs | Yes, until you delete them |
| IP and device logs | 90 days |
| Payment records | 8 years, required by tax law |
| Card number | No. Held by the payment gateway, never by us. |
Read that table as the real privacy policy. Anything marked “no” cannot be produced under any order, by anybody, ever — including by us if we wanted to.
What we require before disclosing anything
- A valid order from a competent Indian authority, issued under a lawful process — typically Section 91 of the Code of Criminal Procedure (now Section 94, Bharatiya Nagarik Suraksha Sanhita, 2023), a court order, or a direction under Section 69 of the Information Technology Act, 2000.
- It must be specific. We refuse bulk, speculative and fishing requests, and requests that do not identify the account and the data sought.
- It must come from the authority, on letterhead, through a verifiable channel. We do not act on an email from somebody claiming to be a police officer, and we do not act on requests from private investigators, employers or lawyers acting for a spouse.
What a spouse cannot do
This is the question we are actually asked. To be plain:
- A spouse, their lawyer or a private investigator cannot obtain your data by asking us. We refuse, every time, and we do not confirm or deny that an account exists.
- A divorce proceeding is a civil matter. It can produce a court order, and if a valid one is served we must comply — but it is an order from a judge, not a request from a party.
- Adultery is not a criminal offence in India (Joseph Shine, 2018), so there is no criminal investigation into it for which a police request could be made.
- We will not accept an order obtained by fraud or misrepresentation, and we scrutinise requests that appear to be a private dispute wearing a uniform.
Emergencies
Where there is a credible, immediate risk to somebody’s life or safety — including a threat of self-harm, or a threat against a member — we may disclose the minimum data necessary to the relevant authority without waiting for an order. We treat this narrowly and record every instance.
Telling you
We will notify you of a request for your data before we respond to it, so you have a chance to take your own legal advice, unless we are legally prohibited from telling you or there is an emergency as described above. If we are prohibited, we will tell you as soon as that prohibition ends.
Preservation
Where we are lawfully required to preserve data, we do so, and preservation may prevent immediate deletion of the specific account named. This is the one circumstance in which our deletion promise is suspended, and we will tell you that it has been unless prohibited.
Transparency
We intend to publish an annual transparency report stating how many requests we received, from whom, how many we complied with in whole or in part, and how many we refused. Until the first report is published, this paragraph stands as the commitment.
How to serve a request
Requests from authorities should be directed to the Grievance Officer via the grievance page, marked for the attention of the Nodal Officer. Requests that do not meet the standards above will be refused with reasons.
The honest bottom line
No platform can promise you that nothing will ever be disclosed. What a platform can do is make sure that what exists to be disclosed is as close to nothing as the service permits. That is the design decision behind every privacy choice on this site: no real names, masked photos, contact-stripping, short log retention, and deletion that actually deletes.