Privacy Policy

1. Who We Are

Bibaho Hub ("we", "our", "us") is a trusted matrimony platform operated by Era Tech Ltd. We help South Asians worldwide find meaningful, values-driven life partnerships. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and all other applicable data protection laws.

Data Controller: Era Tech Ltd
Privacy contact: privacy@bibahoGhor.com

2. Age Restriction — Children's Privacy

Our Service is strictly intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you are under 18, please do not use the Matrimony app or this website.

If we become aware that we have inadvertently collected personal data from a person under 18, we will delete that account and all associated data immediately. If you believe a minor has created an account, please contact us at privacy@bibahoGhor.com.

3. Data We Collect

• Account information: Full name, date of birth, gender, email address, phone number.
• Profile information: Profile photos, videos, religion, education, profession, location, language preferences, and other matrimony details you choose to provide.
• Voice messages: Audio recordings you send to other members via in-app chat.
• Usage data: Screens visited, features used, search queries, match interactions, and activity logs.
• Payment data: Billing details processed securely through Stripe. We never store full card numbers on our servers.
• Device & technical data: Device ID, IP address, operating system version, app version, crash reports, and push notification tokens.
• Authentication data: Login method (email/password, Google, Apple). If you use Sign in with Apple or Google Sign-In, we receive only the data those providers share with us (typically name and email).
• Communications: Messages sent between members via our platform (stored encrypted).

4. Mobile App Permissions

The Matrimony app requests the following device permissions. All permissions are optional and requested only when you first use the related feature. You can revoke them at any time in your phone's Settings.

We do not access your contacts, location, or calendar. We do not use Apple's Advertising Identifier (IDFA) or track you across third-party apps or websites.

5. Push Notifications

We use push notifications to alert you about new matches, incoming messages, and important platform updates. To receive push notifications, you must grant permission when prompted by the app (iOS) or they are enabled by default (Android, revocable in Settings).

You can disable push notifications at any time in your phone's Settings → Notifications → Matrimony without affecting your ability to use the app.

6. How We Use Your Data

• To create and manage your account and profile.
• To match you with compatible profiles based on your preferences and our algorithm.
• To enable in-app messaging, voice messages, and other communication features.
• To process subscription payments and send receipts.
• To send important service notifications, security alerts, and push notifications.
• To detect and prevent fraud, abuse, and spam.
• To improve platform features and personalise your experience.
• To diagnose technical issues and crashes via Firebase Crashlytics.
• To comply with legal obligations.

7. Legal Basis for Processing (GDPR)

• Contract performance — to provide our services to you.
• Legitimate interests — to improve the platform, prevent fraud, and ensure security.
• Consent — for marketing communications, optional analytics cookies, and optional permissions (camera, microphone, photos).
• Legal obligation — to comply with applicable laws, including financial record-keeping requirements.

8. Third-Party Services & SDKs

The Matrimony app integrates the following third-party services. Each processes data under their own privacy policies and our data processing agreements with them.

Firebase services are operated by Google LLC. Data may be processed on Google's servers in the United States and other countries. See Section 10 for how we handle international transfers.

9. Data Safety Summary

This table mirrors the information declared in the Google Play Data Safety section and Apple App Store privacy nutrition labels.

We do not sell personal data. We do not use data for advertising to third parties.

10. International Data Transfers

We are based in the UK/EU. However, some of our third-party service providers (notably Google Firebase and Stripe) may process your data on servers located in the United States or other countries outside the European Economic Area (EEA).

Where data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on adequacy decisions where applicable.

11. Data Sharing

We do not sell your personal data. We may share data in the following circumstances:

• Other members — your profile information (photos, bio, preferences) is visible to other registered members according to your privacy settings.
• Service providers — Stripe, Firebase/Google, and our hosting infrastructure providers — all under strict data processing agreements (DPAs).
• Legal authorities — when required by law, court order, or to protect the safety of our users or the public.
• Business transfers — in the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity, with prior notice to you.

12. Data Retention & Account Deletion

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account:

• Your profile is immediately hidden from other members.
• All personal data (name, photos, messages, preferences) is permanently erased within 30 days.
• Transaction records may be retained for up to 7 years as required by financial regulations.
• Anonymised, aggregated usage statistics may be retained indefinitely.

You can request account deletion at any time directly in the app (Settings → Account → Delete Account) or by following the instructions on our Delete Account page.

13. Your Rights

Under the GDPR and UK data protection law, you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time (without affecting lawfulness of prior processing).

To exercise any of these rights, email privacy@bibahoGhor.com or use the in-app Settings. We will respond within 30 days.

14. California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share.
• Right to delete your personal information.
• Right to opt out of sale — we do not sell personal information.
• Right to non-discrimination — we will not discriminate against you for exercising these rights.

To submit a CCPA request, contact us at privacy@bibahoGhor.com.

15. App Tracking Transparency (iOS)

We do not use Apple's Advertising Identifier (IDFA) and we do not track you across third-party apps or websites for advertising purposes. Therefore, the Matrimony app does not present an App Tracking Transparency (ATT) prompt.

Analytics data collected via Firebase is anonymised and used solely to improve the app experience.

16. Cookies (Web)

On our website (bibahoGhor.com), we use essential cookies to keep the platform secure and functional. Optional analytics and marketing cookies require your consent, which you can manage at any time via the cookie banner or your browser settings.

The Matrimony mobile app does not use browser cookies.

17. Security

We use industry-standard security practices to protect your data:

• TLS encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Firebase security rules for real-time data.
• Regular security audits and penetration testing.

However, no system is completely infallible. We encourage you to use a strong, unique password and to report any security concerns to privacy@bibahoGhor.com.

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page will always reflect the most recent version.

19. Contact & Complaints

For privacy enquiries or to exercise your data rights, contact our Data Protection Officer:

Email: privacy@bibahoGhor.com
Company: Era Tech Ltd

If you are unhappy with how we handle your data, you have the right to lodge a complaint with your national supervisory authority — for example, the ICO (ico.org.uk) in the UK, or the relevant EU data protection authority in your country of residence.