Privacy policy

• Who we are
• What we collect and why
• Consent
• Who we share with
• Where data is kept
• How long we keep it
• Your rights
• Age
• Security
• Contact and complaints

Who we are

M IN is provided by Rentuku Technologies LLC, a Connecticut (United States) limited liability company ("we", "us"). We are the Data Fiduciary for the personal data described here. This policy covers the M IN app on iPhone and Android and the websites sayim.in and min.sayim.in. Our Data Protection contact is support@sayim.in.

What we collect and why

Each item below lists the personal data and the specified purpose we use it for. We don't use it for anything else without asking you.

1. Account

Data: name, email address or phone number, password or passkey, verification details that confirm you are a real person, and account-security records (devices you signed in from, sign-in times, approximate sign-in location).
Purpose: to create and secure your account, verify that you are a real adult, and warn you about sign-ins that weren't you.

2. Profile

Data: display name, photos, a short bio, interests, and your general area (for example "Gachibowli").
Purpose: to show other verified users who they'd be meeting. Photos pass through moderation, sometimes by a person, before they're shown.

3. Plans

Data: plans you host and join: title, time, place, spots, meeting spot if set, who asked to join and who was accepted.
Purpose: to show plans to people nearby and to run the plan and its chat. The list of who joined is visible only inside the plan.

4. Messages (encrypted; we cannot read them)

Data: plan chats and private conversations, including voice notes, photos, reactions and secret messages, are end-to-end encrypted. The keys stay on your phone. Our servers hold the encrypted messages only until they're delivered and cannot read their contents. We keep the minimum needed to deliver them: who a message is for, when it was sent, and its size.
Purpose: delivery. If you report a message, your phone sends us the readable text of that message, with your consent, so we can act on the report.

5. Approximate location

Data: your location rounded to the neighbourhood level, never exact coordinates, and only while you use the app. Live location, when you choose to share it in a plan chat, goes encrypted to the people in that chat for the time you pick and is not stored afterwards.
Purpose: to show you plans nearby, and to help people in a plan find each other on the day. You can turn location off in your phone settings and search by area instead.

6. Device and diagnostic data (support tickets only)

Data: device model, OS version, app version and recent technical logs, attached only when you send a support ticket or shake to report. You see the attachment before you send it and can remove it. We do not run usage analytics.
Purpose: to work out what went wrong and fix it.

7. Support and grievance correspondence

Data: emails, tickets and reports you send us, and our replies.
Purpose: to help you, act on reports, and keep the record the law requires.

Consent

We process your personal data on the basis of your consent, which you give in the app when you create your account and, for location, when you allow the permission on your phone. Consent is free, specific, informed and unconditional, and you can withdraw it as easily as you gave it:

• Withdraw all consent: delete your account in the app (You → Account → Delete account). Processing stops and your data is erased as set out under retention below, except where we must keep something by law.
• Withdraw location consent: turn off location for M IN in your phone's settings.

Where the law lets us process without consent for certain legitimate uses, such as responding to a legal order or a medical emergency, we will do only what that use requires.

Who we share with

• Other users see your profile, the plans you host and, inside a plan, that you're in it. People you block see none of it.
• Data Processors who run our infrastructure on our instructions: cloud hosting and databases, push notifications, email delivery, and photo moderation. They can't read your encrypted messages.
• Authorities, where the law requires or to prevent serious harm. We share only what we have; encrypted message contents are not something we hold in readable form.

We do not sell personal data, we do not show advertising, and we do not share data with advertisers or data brokers.

Where data is kept

Your data is stored and processed on Google Cloud, Mumbai (asia-south1), in India. Some processors (for example push-notification and email delivery, and our team when working from outside India) may process limited data outside India. Such transfers are made only to countries not restricted by the Central Government under the Act, and with the same protections described here.

How long we keep it

• Account, profile and plans: while your account exists, then erased within 30 days of deletion.
• Encrypted messages: on our servers until delivered to every device in the chat, then deleted. Secret messages are deleted once seen.
• Approximate location: replaced each time you open the app; not kept as a history.
• Live location: not stored after the share ends.
• Account-security records: 90 days.
• Support tickets and diagnostics: 12 months after the ticket is closed.
• Reports, grievances and moderation decisions: as long as needed to enforce our guidelines and meet the record-keeping required under the IT Rules, 2021, including after the accounts involved are deleted.
• If you don't use M IN for 3 years and the law no longer requires us to keep your data, we erase it.

Your rights as a Data Principal

• Access: a summary of the personal data we hold about you, how we process it, and who we've shared it with. You → Privacy → Request my data, or email us. We reply within 30 days.
• Correction and completion: edit your profile any time in the app, or ask us to correct anything else.
• Erasure: delete your account in the app, or ask us. We erase your data unless a law requires us to keep it.
• Withdraw consent: as described above.
• Grievance redressal: write to our Grievance Officer at support@sayim.in. We acknowledge within 24 hours and resolve within 15 days.
• Nominate: you can name someone to exercise these rights for you if you die or become incapacitated. Email support@sayim.in with their name and contact details, and we'll record it.

You also have duties under the Act: give us accurate information, don't impersonate anyone, and don't file false or frivolous complaints.

Age

M IN is for adults. You must be 18 or older to create an account. We don't knowingly collect personal data from anyone under 18; if we learn we have, we delete the account. If you believe someone under 18 is using M IN, tell us at support@sayim.in.

Security

We use end-to-end encryption for messages, encryption in transit and at rest for everything else, passkeys and two-step sign-in, and access controls so that only the few people who need to see support and moderation data can. If a breach affects your personal data, we'll tell you and the Data Protection Board of India as the Act requires.

Changes to this policy

If we change this policy in a way that matters, we'll tell you in the app before it takes effect. The date at the top always shows the current version.

Contact and complaints

Please contact us first; most things are sorted within a few days. If you're not satisfied with how we've handled a grievance, or we haven't responded within the time the law allows, you have the right to complain to the Data Protection Board of India, the body set up under the Digital Personal Data Protection Act, 2023.