Privacy notice

Tuluna Bari is a matrimonial service for people of Tuluva background, operated by Halovane Studios, Monis Complex, Main Road, Shankerpura Post, Udupi TQ, Karnataka ("we", "us"). Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data described here.

This notice covers the website, the member app and the Android app. It should be read with our terms of use, cookie policy and refund policy.

When you create an account: your email address, date of birth, preferred language, and your agreement to these policies with the date and version.

On your profile, only what you choose to add: names, gender, who you are looking for, height, marital status, children, mother tongue, current city, native place, education, profession, employer, an income range, a description of yourself, family details, cultural and horoscope answers, partner preferences, photos, and an optional contact phone number. Questions about faith and horoscope are asked only after you agree to them separately, and every question can be answered "Prefer not to say".

When you use the service: the interests you send and receive, matches, shortlists, people you block, reports, messages, support requests and attachments, survey answers, notification choices, and the devices you allow to receive notifications.

To keep accounts secure: sign-in records, active sessions, passkeys and authenticator settings, IP address, browser and device type, and security events. On pages that show other members, we record attempts to take a screenshot that the browser can detect, so our safety team can act on misuse.

If you verify your identity: only the result of the check: whether it passed, the type of document (for example, passport), the issuing country, and a yes or no for whether the date of birth on the document matches your account. If it does not match, our safety team’s record notes the age shown on the document, not the date.

We never store identity documents. You upload your document and selfie directly to our verification partner, Didit. We do not store the document, photos of it, your selfie, the document number, or the address or date of birth printed on it. Didit handles them under its own privacy policy.

If you buy a membership: the package, amount, coupon, payment reference and the last 4 digits of your UPI transaction ID. We never receive your UPI PIN or bank login.

We never ask for your home address, and we never work out your community, faith, family or status from your name, native place, photos or anything else. Photos are re-processed on upload, which removes hidden location and camera details.

• Sell, rent or trade your personal data.
• Show you advertising, or allow advertising or tracking cookies on the service.
• Use your profile, photos or messages to train AI models.
• Show your phone number to another member, whatever your settings, matches or verification.
• Store your identity document, its number or your selfie.
• Read your conversations. Messages reach our team only when a member includes them in a report.

Other members see your profile according to the audience you choose for each detail and each photo: members, verified members, matches, people you approve, or nobody. Your email address is never shown, and your phone number is never shown. If you want someone to have your number, you can share it yourself in a conversation.

Our team does not browse members’ information. Trained staff see only what a specific task needs, and each view of restricted details is written to an audit trail that cannot be quietly changed:

• reviewing new profiles and photos before anyone else sees them;
• answering a support request you send;
• confirming a payment you submitted;
• investigating a report, including any messages the reporter chose to include.

Authorities receive information only when Indian law requires it, and only what the request lawfully covers.

Purpose

Creating your account and running the matrimonial service you signed up for

Basis under the DPDP Act, 2023

Your consent

Purpose

Showing your profile to the audiences you choose, suggestions and search

Basis under the DPDP Act, 2023

Your consent

Purpose

Faith, community and horoscope questions

Basis under the DPDP Act, 2023

Your separate consent, which you can withdraw

Purpose

Identity verification and date of birth checks

Basis under the DPDP Act, 2023

Your consent, and keeping minors off the service

Purpose

Memberships, payments and tax records

Basis under the DPDP Act, 2023

Your consent, and compliance with tax law

Purpose

Security, fraud prevention, reports and enforcement

Basis under the DPDP Act, 2023

Legitimate uses, including compliance with law

Purpose

Sign-in codes, account notices and the notifications you allow

Basis under the DPDP Act, 2023

Your consent

Purpose

Understanding overall traffic to the website

Basis under the DPDP Act, 2023

Aggregate, cookieless analytics with no personal identifiers

We run our own servers, database, file storage and analytics. A few specialist services receive the minimum they need:

Service

Didit (identity verification)

What it receives

Your ID document and selfie, which you upload to Didit directly, and your date of birth for comparison. Didit tells us only the result.

When

Only if you start identity verification

Service

Our email delivery provider

What it receives

Your email address and the email being sent

When

Sign-in codes, notices and emails you allow

Service

Browser push services (Google, Apple, Mozilla, Microsoft)

What it receives

An encrypted notification for your device; never message text

When

Only on devices where you turn notifications on

Service

Your UPI app and bank

What it receives

The payment you make to our UPI ID

When

When you pay for a membership

Some of these services may process information outside India. Each is used only for the purpose shown.

We host our own copy of Umami to understand overall traffic: which pages are visited, where visitors come from, approximate country, browser, device type, screen size and language. Umami sets no cookies and stores no identifier for you, so it cannot follow you across visits or other websites. For pages inside the member area, member and conversation identifiers are removed from the address before it is recorded. The data stays on our servers and is not shared.

• Your information is encrypted at rest. Email addresses, phone numbers, messages and report details are also encrypted field by field, with keys kept apart from the data.
• We hold no identity documents or selfies, so they cannot be exposed from our systems.
• Every connection uses TLS.
• Sign-in is by one-time email code or passkey, with optional authenticator codes. Staff must use an authenticator, and sensitive staff actions ask for a fresh code.
• Photos are served only through short-lived links tied to a signed-in session, and photos of other members carry the viewer’s member code.
• An append-only audit trail records staff access and changes, and detects tampering.

If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires, and report to CERT-In where required.

Information

Account, profile and photos

Kept for

Until you delete them or your account

Information

Messages

Kept for

Until you delete your account. The other person then sees "Message removed".

Information

Identity verification result (never the document or selfie)

Kept for

While your account exists

Information

One-time sign-in codes

Kept for

Up to 24 hours

Information

Payment records

Kept for

8 years, as tax law requires

Information

Reports and safety decisions

Kept for

Up to 3 years after the case is closed

Information

Banned accounts

Kept for

A one-way fingerprint of the email address (not the address), while the ban stands, to stop re-registration

Information

Security logs

Kept for

At least 180 days, as CERT-In directions require, and no longer than 1 year

Information

Analytics

Kept for

Aggregate figures only, with nothing that identifies you

You can delete your account at any time from Settings, Privacy. Your profile is hidden from everyone immediately and your other devices are signed out. You then have 1 day to change your mind. After that, your account, profile, photos, messages, interests, matches, notifications, support requests and survey answers are erased, and your email address, phone number and date of birth are removed.

Erasure is permanent. We cannot restore an erased account, even if you ask us to. Only the records the law requires us to keep (payments, and reports for a limited time) remain, and they no longer show you to anyone. A copy made in a backup before erasure is kept only until that backup expires and is never used to bring an account back.

Under the Digital Personal Data Protection Act, 2023 you can:

• get a summary of the personal data we hold about you and how it is used;
• correct or complete inaccurate information, most of which you can edit yourself;
• erase your information by deleting your account;
• withdraw a consent, such as for faith or horoscope questions, which erases those answers;
• nominate a person to exercise these rights if you die or cannot act yourself;
• raise a grievance with us, and then complain to the Data Protection Board of India if you are not satisfied.

To use any of these rights, email [email protected], or write to Halovane Studios (Tuluna Bari), Monis Complex, Main Road, Shankerpura Post, Udupi TQ, Karnataka.

Tuluna Bari is only for adults aged 18 or over. We do not knowingly allow anyone younger to hold an account. If an identity check shows a date of birth that does not match, or shows someone under 18, the account is paused at once and reviewed by our team.

When this notice changes, the date and version at the top change too. If a change affects how we use your information in a meaningful way, we will tell you in the app or by email before it takes effect, and ask for your agreement again where the law requires it.

Grievance Officer, Halovane Studios (Tuluna Bari), Monis Complex, Main Road, Shankerpura Post, Udupi TQ, Karnataka. Email [email protected].

We acknowledge every grievance within 24 hours and aim to resolve it within 15 days.