Privacy Policy

Sanjog — matrimony app for brides, grooms and their families
Package com.free_matrimony.myappname · Last updated 6 October 2026

This policy explains what Sanjog collects, why, who else sees it, how long it is kept, and how you close your account. It describes the app as it is actually built — every statement below corresponds to something the service really does.

Sanjog is operated from India. The app is available on Android, on iOS and as a website at sanjog.lazycode.ai; where a section applies to only one of those, it says so.

1. What we collect, and why

Your account

• Mobile number and/or email address — this is how you sign in and how we tell one member from another.
• If you use Sign in with Google: the stable account identifier Google issues for you, and the verified email address on that Google account.
• If you verify a mobile number by SMS: the identifier Firebase Authentication issues for that number, so the same number reaches the same account next time.
• Whether the number and the address have been verified, and when.

Signing in safely

• One-time codes we email you are never stored in readable form — only a one-way hash of the code is kept, together with its expiry and how many attempts have been made.
• A log of code sends: the channel, the address or number it went to, and the IP address that asked. This exists to stop someone burning through messages at your address' expense, and for no other purpose.
• Your active sessions: a hash of each sign-in token, a device label, and the expiry. A sign-in lasts 15 minutes before it is refreshed, and a refresh is good for 30 days.

Your profile

• Who the profile is for (yourself, a son, a daughter, a sibling, a relative), full name, gender, age band and — if you provide it — date of birth.
• Community, city (or a city you type in), education, profession, company, income band or exact income, height, an "about" note and a family note.
• Your partner preferences: whether you are looking for a bride or a groom, and an age range.
• Your privacy choices: whether photos are private, and whether you want ID verification, kundli matching or a video introduction shown on your profile.

Photos, video and documents

• Profile photos you upload. Photos start out pending and are reviewed by a person before anyone else can see them.
• An optional video introduction, if you record one. Recording uses your microphone.
• Documents you submit for verification — identity, education, income.
• For each file we keep its storage location, type, size and a checksum.

Identity verification (Aadhaar)

Birth details, for kundli matching

• Only if you choose to use kundli matching: your date of birth, time of birth and place of birth.
• The birth place is matched against a fixed list of Indian cities held inside the app's own server, which supplies the coordinates and time zone. Nothing about your birth is sent to an outside astrology service — the chart is calculated on our own server.
• What the calculation produces is stored alongside it: nakshatra, rashi, lunar positions and a chart fingerprint, plus the Ashtakoota guna scores when your chart is matched with another member's.

Family members you invite

• The name, relation and role of anyone you invite to help with your search, and the mobile number or email address you enter for them.
• Please invite only people who are content to hear from Sanjog at that address.

What you do on Sanjog

• Interests you send, accept, decline or pass on; profiles you view; super interests; and a daily count of how many you have used.
• Conversations and the messages in them, including who sent each one and on whose behalf.
• Members you block, and reports you file about other members.

Notifications

• On Android and iOS: a push token, the platform, and a device name, so a notification can reach the right phone.
• On the web: the push endpoint your browser issues, the two encryption keys that go with it, and your browser's user-agent string.
• Your notification preferences — messages, activity, verification updates, and marketing.

Subscriptions and payments

• On Android: the product you bought, the purchase token Google Play issues, the subscription state, the expiry, and whether it will auto-renew.
• On the web: the order id, the amount in rupees, the payment id and the payment status returned by Razorpay.
• We never see or store your card number, UPI ID, bank details or Google account password. Those are handled entirely by Google Play or by Razorpay.

Location

Location is optional and is used for one thing: filling in your city during onboarding. If you tap "use my location", your device reads your coordinates and your device's own operating system turns them into a city name. Only the city name is sent to Sanjog — your coordinates are not. You can decline and type a city instead, and everything works the same.

Separately, like any online service, our servers see the network address your device connects from. We map it to an approximate location — a country, state and, roughly, a city — to understand where Sanjog is used and to spot misuse (for example, a profile that says one city while every sign-in comes from another). This is not GPS, needs no permission, is accurate to a region rather than a street, and is never shown to other members.

On your device

The app keeps your sign-in token and a copy of your profile on the device — in your browser's local storage on the web, and in the app's own storage on a phone — so you do not have to sign in every time. The web version registers a service worker to display push notifications.

2. Why we are allowed to hold it

In plain language:

• Because you asked us to run the service. Your account, your profile, your interests, your conversations and your subscription cannot exist without the data behind them.
• Because you consented. Aadhaar and other verification documents, birth details for kundli, photos, video, location and marketing email are all optional. You choose each one, and you can decline every one of them and still use Sanjog.
• Because we have a genuine interest in keeping the place safe. Reports, blocks, moderation decisions, the sign-in rate-limit log and our internal audit trail exist to stop abuse and fraud.
• Because the law requires it. Some records — a payment, a serious safety report — must be kept for a period even after you would rather they were gone.

3. Sensitive information

Three kinds of information here deserve to be called out.

• Government ID. Aadhaar submission is voluntary. The number is hashed and discarded; the card images are kept privately for review. Verification only ever produces a yes-or-no badge on your profile.
• Birth details. Date, time and place of birth are collected only if you use kundli matching, and only to compute a chart and a compatibility score. A guna score is shown to a member you are matched with; your birth time and place are not published on your profile.
• Photographs. If you switch photo privacy on, your photos are visible only to members whose interest you have accepted. Every photo is reviewed by a person before it goes live, so a reviewer sees it in every case.

4. Who else receives your data

We do not sell your personal data. These are the parties that receive some of it, and what each one gets:

• Google Cloud Storage — stores every photo, video and verification document. Files are served through short-lived signed links: five minutes for a private file such as a verification document, twenty minutes for a profile photo.
• Google Play (Google LLC) — handles Android purchases and receives your payment details directly. We send Google Play your purchase token to confirm that a subscription is real and current.
• Razorpay (and, where offered, Cashfree) — handles payments made on the website. The payment partner receives the payment details you enter there; we receive back only an order id, a payment id and a status.
• Google Sign-In and Firebase Authentication (Google LLC) — if you sign in with Google, or verify a mobile number by SMS. Google sees the sign-in and, for SMS verification, the mobile number.
• Expo Push Service — receives the push token for your phone and the text of each notification we send you, in order to deliver it. Behind Expo, Google's Firebase Cloud Messaging carries the notification to an Android device.
• Your browser's push service (Google, Mozilla, Microsoft or Apple, depending on the browser) — receives web push notifications, encrypted, for delivery to your browser.
• Google AdMob (Google) and Meta Audience Network (Meta Platforms) — serve the ads in the Android app. Sanjog uses one of them at a time. See section 5.
• Our email provider (Zoho) — carries our email to you, and therefore sees your email address and the contents of the message.
• Our own reviewers. A small number of trusted people at Sanjog review profiles, photos, verification documents and reports through an internal console. Every decision they take is written to an audit log.

We may also disclose data where the law compels it — a court order, a police request under the Information Technology Act, 2000 — or to protect someone from serious harm.

5. Advertising

Sanjog is free to use, and ads are part of how it is paid for.

• Ads are served by Google AdMob or Meta Audience Network (one at a time, as we choose), and only in the Android app. The website and the iOS app show no ads at all — Audience Network has no web version, and the iOS app is not registered with it.
• Meta's advertising code runs inside the Android app and requests each ad from Meta directly. In doing so it receives device and network information and a record of the ads you were shown and interacted with, under Meta's own terms rather than ours. Sanjog does not send Meta your name, your photos, your messages or anything you typed into your profile.
• When AdMob is the network, Google's advertising code runs inside the Android app and requests each ad from Google directly. In doing so it receives device and network information, including your advertising ID, and a record of the ads you were shown and interacted with, under Google's own terms rather than ours. Sanjog does not send Google your name, your photos, your messages or anything you typed into your profile.
• Consent. When AdMob is the network, the app uses Google's consent form (User Messaging Platform) before requesting ads, and shows it where the law requires your consent, for example in the European Economic Area and the UK. If consent is required and you do not give it, the app does not request ads. Where that applies, an Ad privacy options entry appears under Profile → Help & Legal so you can change your choice.
• Measuring the app. The Android app also includes Google's Firebase Analytics and Meta's App Events SDK, and the website may load Google Analytics and the Meta Pixel. This website uses Google Analytics to count visits. It does not send query strings or personal data. These record that the app was installed and opened, and which steps you complete — signing up, finishing a profile, sending an interest, opening a chat, taking a paid plan — together with a device identifier and, once you have built a profile, whether it is for a bride or a groom and whom it is for. We use this to see where people drop out and to measure the advertising that brought them here. When you are shown AdMob ads, Google can also report how those ads performed (such as impressions and estimated revenue) to Firebase Analytics so we can measure them. When the app crashes or hits an error, Google's Firebase Crashlytics collects a crash report — your device model, Android version, the app build and the error trace — so we can find and fix crashes; it contains no name, phone number, email, photos or messages. Your name, phone number, email, photos, messages and profile text are never sent to these services.
• Where you found us. When you install from a link we shared, the Android app reads the campaign tags that Google Play passes along with the install (for example the source, medium and campaign name) and the website records the same tags when you open it from such a link. We keep them with a random install identifier and, once you sign up, with your account, so we can tell which channels bring real members. We also count visits to our download page by campaign tag, country and device type. These records hold no name, phone number, email, photo or IP address.
• We run no other analytics, tracking or advertising code.

How to limit ad personalisation. On Android, open Settings → Privacy → Ads (the exact path varies by manufacturer) and choose Delete advertising ID or turn off ad personalisation. That setting is enforced by the operating system and applies to Sanjog like any other app. You can also avoid the ads entirely by using Sanjog on the web, or by taking one of the optional paid plans described in our Terms of Use.

6. How long we keep it

• Your account, profile, media and activity are kept for as long as your account is open.
• One-time codes expire 30 minutes after they are issued and are consumed on first use. The rate-limit log is retained as a rolling record of recent send attempts.
• Sign-in sessions expire on their own: 15 minutes for an access token, 30 days for a refresh.
• Signed links to files are valid for 5 or 20 minutes and then stop working.
• When you close your account, the account is retired immediately and your profile is withdrawn from the app — see section 7 for exactly what that does and does not remove.

7. Closing your account, and erasing your data

You can close your account from inside the app at any time. When you do, all of the following happen straight away:

• Your account is marked closed and your profile is withdrawn — other members can no longer find it, view it or contact you.
• Every sign-in session is revoked, including on any other device. The app signs you out and stops working with your old token.
• Your mobile number, email address, Google identifier and Firebase identifier are erased from the account record. This is deliberate and it is checked by the database itself: it means your own number and address are free again, so you can come back and open a fresh account with them whenever you like.

To be straightforward with you about what closing an account does not do: the underlying records — your uploaded photos and documents, your messages, your verification and kundli records — are retained in our systems rather than erased at that moment. If you want them erased as well, email us at the address below from the address or about the number on the account and say so, and we will delete them. We will confirm when it is done.

8. Marketing email

We may occasionally send you an email about Sanjog itself. Every such message carries a working unsubscribe link and a one-click unsubscribe header, and the link keeps working whether or not you are signed in and however long it has been. You can also turn marketing email off inside the app. Turning it off never stops the mail you actually need — a sign-in code, or a message about your own account, still reaches you.

9. Children

Sanjog is for adults looking for a marriage partner and is not intended for anyone under 18. The youngest age you can choose when creating a profile is the 21–24 band. If we learn that an account belongs to a minor we remove it and delete its data. Every profile and every conversation in the app carries a report control whose first two options are Child safety concern and Child sexual abuse or exploitation; those reports are queued ahead of everything else. Our full commitments are set out in our Child Safety Standards.

10. Your rights

You can:

• See and correct what we hold — your profile, preferences, privacy settings, verification status and notification choices are all editable in the app.
• Withdraw a consent — remove a photo or a video, turn photo privacy on, stop using kundli matching, turn off notifications, or unsubscribe from marketing email.
• Ask for a copy of your data, or ask us to delete it, by emailing the address below.
• Complain. If you are in India, you may raise a grievance with us first; if you are not satisfied, you may approach the relevant data protection or consumer authority in your jurisdiction.

11. Security

• Everything travels over HTTPS. Our mail is submitted over an encrypted connection, and a plaintext connection is refused outright in production.
• Sign-in codes, session tokens and Aadhaar numbers are stored only as one-way hashes, never in readable form.
• Photos, videos and documents are private by default and reachable only through short-lived signed links.
• Code verification is constant-time, codes lock after five wrong attempts, and both resends and fresh codes are rate limited per address and per network.
• No system is perfect. If we ever discover a breach that puts you at risk, we will tell you.

12. Changes to this policy

If we change what we collect or who receives it, we will update this page and change the date at the top. Material changes will be announced in the app.

13. Contact

Privacy questions, access requests and deletion requests: sanjog@lazycode.ai.

Child-safety matters, including for law enforcement, go to our designated contact soumya@lazycode.ai, as set out in our Child Safety Standards.

See also our Terms of Use, Refund & Cancellation Policy, Membership & Pricing, Contact Us and Child Safety Standards.