Privacy Policy
Draft for review — not yet legal advice. Have this reviewed by counsel before public launch, especially the India DPDP Act 2023 obligations for sensitive personal data.
Purple ("Purple", "we", "us") is a mobile application for meeting people through written cards. This policy explains what personal data we collect, why, and the choices you have. By using Purple you agree to this policy. Purple is for adults 18 years and older.
Who we are
For any privacy question or request, contact privacy@purplechaamba.com.
Data we collect
- Phone number — to create your account and sign you in via one-time password (OTP).
- Gender identity and sexual orientation — to show you relevant people and be shown to relevant people. This is sensitive personal data and is used only for matching.
- Approximate location (postal PIN code) — to deliver and receive cards within your area. We do not collect precise GPS location.
- Photos you add to cards or your profile.
- Card content you write and messages you exchange.
- Basic usage and device data — for reliability, security, and abuse prevention.
How we use your data
- To operate Purple: authenticate you, distribute and deliver cards by area, and let you correspond.
- To send notifications you've enabled (e.g. a new letter).
- To keep the service safe — preventing spam, fraud, and abuse.
We do not sell your personal data, and we do not use it for third-party advertising.
Service providers
We share the minimum data needed with processors who run the service on our behalf:
- Google Firebase (Google) — phone authentication and push notifications.
- Cloudflare R2 — secure storage of card and profile photos.
- Google Cloud Platform — application hosting and database (hosted in India, Mumbai region).
Security
Data is encrypted in transit (TLS). Access to production systems is restricted and credential-gated. The database is not reachable from the public internet.
Retention
We keep your data while your account is active. If you delete your account (see below), we delete your personal data within 30 days, except where we must retain limited records to meet legal obligations or prevent abuse.
Your rights
You can request access to, correction of, or deletion of your personal data, and withdraw consent, by emailing privacy@purplechaamba.com. Under the India DPDP Act 2023 you may also nominate someone to exercise these rights and raise grievances with us first.
Account & data deletion
You can request deletion of your account and associated data at any time — see Support for the steps, or email privacy@purplechaamba.com.
Children
Purple is not for anyone under 18. We do not knowingly collect data from minors; if we learn we have, we delete it.
Changes
We'll update this page when our practices change and revise the "last updated" date above.