Masti Lounge Privacy Policy

Effective date: 01 November 2026 · Last updated: 03 November 2026

1. Who we are and what this policy covers

Masti Lounge ('Masti Lounge', 'we', 'us') is operated by Techx Startup Corp., 7782 Benavon Rd, Mississauga, Ontario L4T 3G3, Canada. This policy explains what personal data we collect when you use the Masti Lounge mobile app and website (the 'App'), including Masti Hangout Club, Masti Blind Dating Club, Masti Love Birds Club, Masti Influencers Club, Masti Trips, Masti Plus and Masti Credits. It explains why we collect it, who we share it with, how long we keep it, and what choices you have.

We follow the Information Technology Act, 2000 and the rules under it, and the Digital Personal Data Protection Act, 2023 and its Rules, as they apply to us. We are based in Canada, so we also follow the Canadian privacy law that applies to us. Under data protection law we are the 'data fiduciary' for your personal data.

By creating an account and accepting our consent boxes, you agree to this policy. If you do not agree, please do not use the App.

2. The short version

• Masti Lounge is for people aged 18 and over only.
• We check your age with your date of birth and a live selfie, and confirm you with a code sent to your phone or email. We do not ask for Aadhaar or any other government ID.
• We do not sell your personal data. We show no third-party ads and use no ad trackers.
• Your photos are stored encrypted, and you can hide each photo.
• Location is shared only if you switch it on. It is approximate and ends automatically.
• Payments are handled by payment partners. We never see or store your full card number, CVV, UPI PIN or bank login.
• You can delete your account inside the App.

3. Data we collect

3.1 Data you give us

• Account details: name, email address, mobile number, and a password (stored only in hashed form).
• Profile: display name or username, gender, city, bio, 2 to 10 photos or an avatar, and your show or hide settings for each photo. Your age is not shown on your profile.
• Vibe quiz and preferences: mood, interests, purposes (which clubs), modes (date, friends, network), values, lifestyle, career, what you are looking for, language, and desi vibe badges. Optional preferences such as diet, drinking, smoking or faith are your choice and are shown only if you choose.
• Verification data: your date of birth, a live selfie, and a code sent to your phone or email. See section 5.
• Consents: your acceptance of our Terms and Privacy Policy, your 18+ declaration and your payment terms, stored with a time stamp.
• Messages and content: chats, voice notes, gifts, greeting and proposal cards, status or stories, posts and comments, profile prompts, support tickets and reports.
• Calls: voice and video calls run through our calling provider (LiveKit). We do not record calls.
• Tables and trips: seat requests, bookings, ratings and reviews, and for booked trips a traveller form (emergency contact, food preference, any allergy or health notes you choose to give, and your waiver acceptance).
• Trusted contacts: if you add someone to your trusted circle for SOS or share-my-plan, we store their name and phone number, so please add only people who agree.
• Payment records: amount, date, status, credits bought or spent, and reference IDs from Apple, Google and RevenueCat.
• Creators and brands: your niche, links to your social profiles, business name and GST number (for brands), and payout details, which are handled through our payment partner.

3.2 Data collected automatically

• Device and app information: device model, operating system, app version, language, IP address, a device identifier used to prevent fraud and repeat under-18 sign-ups, and crash logs.
• Usage events, such as sign-up, verification, matches, chats started and purchases. We use these to fix problems, improve the App and detect fraud.
• A push notification token so we can send you alerts you have allowed.
• Approximate location, only when you use a location feature (see section 6).

3.3 Sensitive data

Your face in photos and selfies, your gender, and any health or allergy notes you give for trips are sensitive. Please share only what you are comfortable with. Do not send ID numbers, bank details or passwords in chats. We will never ask you for them.

4. How we use your data

• To create and run your account, and to check that you are a real adult.
• To suggest matches, daily matches, compatibility scores, tables and trips.
• To provide chat, calls, gifts, tables, trips, posts and other features you use.
• For safety: automated tools and human reviewers check messages, photos, captions and listings, detect scams and fake accounts, review reports and enforce our Terms.
• To process payments, deliver credits and Masti Plus, handle refunds and keep accounting records.
• To send service messages such as OTPs, receipts, safety alerts and changes to our terms.
• To provide help and support.
• To improve and test the App using analytics and funnel reports.
• For AI features described in section 8.
• To follow the law and protect our rights and users.
• To send offers and news only if you have opted in. You can opt out at any time.

5. Selfie verification and age checks

• When you verify, you take a live selfie. An automated tool compares it with your profile photos to confirm they match, and we confirm your phone number with an OTP.
• We keep the selfie only while a team review is pending. We delete it right after the decision, and in any case within 30 days. It is never shown to other users. If the tool cannot decide, a trained member of our team reviews the selfie. Only authorised staff can access it.
• If you pass, we show a blue tick on your profile.
• You enter your date of birth at sign-up. It is locked after you enter it, and can only be changed through our support team. If you enter a date under 18, we block that phone number, email address and device for 30 days. To do this we keep only a scrambled code of each, made with a secret key so it cannot be turned back into the original. These blocks are deleted automatically after 30 days, and the blocked under-18 account itself is permanently erased after 30 days too. We do not keep the date of birth you typed, we use no face data for this, and we never block a shared Wi-Fi or mobile network. We use a scrambled network address only for daily sign-up limits and delete it after 24 hours. We never show your age or date of birth on your profile. If we have reason to believe you are not an adult, we may suspend or close your account.

6. Location sharing

• Location sharing is off by default.
• If you share location in a chat, we send your approximate location only to that match, for the time you choose (for example 15 minutes). You can stop sharing at any time, and it stops automatically when the time ends.
• City Lounges and trips use the city you enter and the venue details in a listing. They do not track you.
• If you press SOS and choose to send your location, our safety team receives an alert with your message and a map link to your current location. This location is not rounded: on Android it is about neighbourhood level, and on iPhone it can be precise if you allowed precise location. The app also opens your phone's own messaging app with your trusted contacts filled in, and nothing is sent to them until you press Send yourself. We do not share an SOS location with other members. If you use 'share my plan', your chosen friend receives the plan details you select.
• Each location-sharing record is kept for 30 days and then deleted. If you press SOS, the location in that alert is kept for 30 days, and then the coordinates are erased.

7. Payments

• Credits, gifts and Masti Plus are bought through the Apple App Store or Google Play, which process the payment, and we confirm purchases through RevenueCat. We do not currently take payments in the App for real-world services such as trips and event fees. If we add them, they will be handled by a payment partner, and we will name it here before we do.
• We receive a confirmation of payment (amount, status and a reference ID). We do not receive or store your full card, UPI PIN or bank login details.
• We keep a record of credits and transactions to deliver what you bought, handle refunds, prevent fraud and meet accounting and tax rules.
• Your payment partner's own privacy policy applies to the data it handles.

8. AI and automated tools

• We use AI services to moderate content (including Hinglish), translate the App, suggest date ideas and trip itineraries, create gift and card images, and read voice notes aloud.
• To do this, relevant text or content may be sent to our AI providers (currently OpenAI and Google). We choose provider settings that do not allow your data to be used to train their models, where such settings are available.
• Automated moderation can flag or limit content or accounts. You can ask for a human review through Help and Support.
• Compatibility scores and suggestions are guidance, not a promise of a good match.

9. Who we share your data with

• Other members: what you put on your profile, subject to your hide settings. In Masti Blind Dating Club, photos stay blurred until both people reveal. Chats are visible only to the people in them.
• Trip organizers and table hosts: the details needed to run an event you joined, such as your name, booking status and traveller form.
• Service providers who work for us under contract: Emergent (cloud hosting, database, file storage and email), SMS codes (Twilio), calls (LiveKit), purchases (Apple, Google, RevenueCat) and AI services (OpenAI, Google). We use no outside analytics or advertising tools.
• Government or law enforcement, when the law requires it, or when we believe it is needed to protect someone's safety.
• A buyer or successor, if our business is sold or merged. We will tell you if this changes who holds your data.
• Anyone else, only with your consent.

We do not sell or rent your personal data.

We are based in Canada, so your data is stored and processed outside India, including in Canada and in the countries where our providers run their systems, for example the United States. We use contracts and safeguards as required by law.

10. How long we keep your data

• While your account is active, we keep your data so the App works.
• If you delete your account (Profile, then Delete my account), we delete or anonymize your profile, photos, chats, posts, tickets, reports you filed, trip media, verification data and OTP records within 30 days. Deleted data leaves our backups when those backups expire on our hosting provider's schedule.
• We may keep limited records where the law or safety requires: payment and tax records for 6 years, or longer if tax law requires, and records of bans or serious safety reports for 3 years, to stop banned people coming back.

11. Your rights and choices

You can:

• Ask to see the personal data we hold about you.
• Correct or update it in Edit profile, or by contacting us.
• Delete your account and data.
• Withdraw your consent. Withdrawing is as easy as giving it, but some features may stop working.
• Nominate another person to exercise your rights if you die or cannot act.
• Hide individual photos, use Incognito or Pause, change notification settings, and block or report people.
• Raise a complaint with our Grievance Officer (section 17). If you are not satisfied, you may complain to the Data Protection Board of India where the law allows.

We reply to rights requests within 15 days and may ask you to verify your identity first.

12. Security

We use encryption in transit, encrypted storage for photos, hashed passwords, rate limits, role-based staff access and an activity log of staff actions. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires. Please keep your password private and log out of shared devices.

13. Children

Masti Lounge is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we find that a minor has an account, we will close it and delete the data.

14. WhatsApp community and other channels

Our Masti Lounge community on WhatsApp runs on WhatsApp's platform, and WhatsApp's own privacy policy applies. Group members may see each other's names and phone numbers. We will not add you to a group without your consent. Please do not share sensitive details in groups.

15. Cookies and similar technologies

Our website and App use only essential storage needed to log you in and keep the service working, plus basic usage statistics that we collect ourselves. We do not use advertising trackers.

16. Changes to this policy

We may update this policy. If the change is important, we will tell you in the App or by email before it takes effect, and ask for fresh consent where the law requires it. The date at the top shows the latest version. If another company in our group, for example an Indian affiliate, takes over running the App or part of it, we will tell you in advance and update this policy.

17. Contact and Grievance Officer

For questions, requests or complaints:

• Grievance Officer for members in India: Ram Babbar, Director, Techx Startup Corp. (we will update this when an India-based officer is appointed)
• Registered address: Techx Startup Corp., 7782 Benavon Rd, Mississauga, Ontario L4T 3G3, Canada.
• Email: contact@mastilounge.com
• General support: contact@mastilounge.com

We acknowledge complaints within 24 hours and aim to resolve them within 15 days, and in any case within the time the law requires.