Who holds your data

Dilwish is operated by Wings4Vision, a sole proprietorship registered in India. Under the Digital Personal Data Protection Act, 2023 we are the data fiduciary for everything described below, and you are the data principal.

Our grievance officer, and how to reach them, is on the grievance officer page. We acknowledge a complaint within 24 hours and answer it within three working days.

What we collect

• Your mobile number, verified by a code before a profile can exist. Verification is not optional — it is most of what keeps fake profiles expensive.
• Your password, stored only in a scrambled form that cannot be turned back into the password. Nobody at Dilwish can see it.
• Profile details you enter: name, date of birth, height, marital status, religion, community, mother tongue, education, occupation, income band, location, family details, diet and lifestyle answers.
• Horoscope details — rashi, nakshatra, manglik status, and optionally birth time and place. Birth time and place are shown to nobody but you.
• Photographs you upload, and identity or education documents if you choose to be verified.
• Partner preferences, which are what the matching runs on.
• Your email address, only if you add one. Nothing is sent to it until you confirm it from the link we email.
• When you were last active in the app or on the website, updated every couple of minutes while you use it.
• Activity: profiles you viewed, interests and requests sent and received, messages, shortlists, saved searches, blocks and reports, and payment records.
• What you write to our support desk, and our replies.
• Technical records: the IP address and device description recorded when you sign in or give a consent, kept as evidence that a decision was actually made by you; the app version you use; and, if you allow notifications, the code your phone gives us to deliver them.
• Duplicate-account checks: a random code for the app or browser you use, your internet address, a fingerprint of each photo (not face recognition), and your parents’ names, family house name, address and the phone numbers on your profile, all kept scrambled. A moderator approving a profile is shown other accounts that share one of these, or the same name and date of birth, so one person cannot run several profiles or claim the free trial twice. Brothers and sisters share some of these, so a person decides, never the system. They are deleted with your account or the photo.

Who can see it

Other members see a member ID, not your phone number or email. You choose who can see your contact details, in Settings → Privacy: any approved member with a plan, paid or a free trial (the setting a new profile starts with), only members whose request you approve, or no one. Viewing a number uses one of that member’s plan unlocks, and is recorded. The candidate can withhold them entirely, which no payment overrides. You can also hide your profile from everyone, at any time.

When you open someone’s profile, they can see that you did, and you can see who opened yours. Shortlisting is private.

Members also see when you were last active, and an “Online” mark while you have used Dilwish in the last few minutes. A profile unused for six months stops appearing in searches and matches until you come back.

If your family made your profile, it is one profile with one sign-in, which your family manages and may share among family members. When they make it they confirm you know about it and agree. Other members see who created the profile and that a family runs it.

Photographs are never on a public link. Every image request is checked against who is asking, blurring happens on our servers rather than in the app, and full-size images carry an invisible mark identifying the viewer so a leak can be traced.

Our moderators see your profile, your photographs and any verification documents, because a person reviews every profile before it goes live. Access to caste, religion and horoscope data is logged.

What we will never do

We do not sell, rent, share or barter contact details — not to marriage bureaus, not to advertisers, not to anyone, at any price. This is the product, not a policy we could quietly change: the whole positioning of the platform is that your phone does not start ringing because you signed up.

Your phone number is stored encrypted. A copy of our database, on its own, does not contain it.

When a chat is reported

Nobody at Dilwish reads your conversations. The one exception is a report: when a member reports someone from inside a chat, the last 50 messages of that one conversation go to our safety team with the report, so they can see what actually happened. The member is told this before they send the report.

Messages, and the free-text parts of profiles, are checked automatically for phone numbers, email addresses, other messaging apps and requests for money — the usual first steps of a scam. A message that matches is still delivered and only marked; no person reads it because of that mark. In a profile, a match is pointed out to the moderator reviewing it, who may ask you to take it out.

Only the staff handling reports can open them, and every time they do is recorded. They are erased 90 days after the report is closed — unless the reported account was suspended, when they are kept as the record of why. Deleting either account deletes the report and its messages with it.

What we send you

Notifications about your own account and matches: interests and replies, requests, who viewed your number, a profile view from someone you had already shown interest in, decisions on your profile, photographs and verification, a plan about to end, and offers on plans you can buy. They are kept in your Notifications list for 90 days and sent to your phone if you allow notifications.

If you add and confirm an email, we send your matches once a week — up to six, without photographs. Every one of those emails has a link to stop them, and the same switch is in Privacy. Offers by email go only to members who switched on “Email updates”.

Who we send it to

Only the services needed to run the platform, and only what each one needs: an SMS provider for verification codes, a payment gateway for plan purchases (which handles card and UPI details directly — we never see them), object storage for photographs, push notification delivery, an email delivery service for the emails above, and crash reporting.

Today those are MSG91 (SMS), Razorpay (payments), Cloudflare (photograph storage), Google Firebase (notifications and app crash reports) and Sentry (website and server error reports). Some of them store or process data outside India, including in the United States. The DPDP Act allows that except to countries the Government of India restricts, and we will not use a provider in such a country.

Crash reporting tells us when the app has failed and what it was doing at the time — the screen, the device model, the error. It carries no name, no phone number and nothing from a profile.

The same service tells us when something looks like an attack — many failed sign-ins from one place, or one account reading far more profiles than a person would. Those alerts carry an account number and a scrambled form of the network address, never the address itself, and nothing from a profile.

We do not use advertising networks, and we do not use analytics that profile you or follow you to other apps and sites.

When the law requires it

We disclose data to the police, a court or a government agency only when Indian law requires us to, and only what the request lawfully covers. A report of a crime against a member — fraud, threats, impersonation — is the case where that is most likely.

How we protect it

• Everything between your phone or browser and our servers is encrypted.
• Your phone number is encrypted in our database, and your password is stored only in scrambled form.
• Photographs are kept in private storage and served only through short-lived links.
• Staff sign in to our admin panel with a password and a code from an authenticator app, see only what their role needs, and their access to caste, religion and horoscope data is logged.
• Backups are encrypted.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India, as the DPDP Act requires, with what happened and what you can do.

Consent, itemised

You agree to each use separately rather than in one block, and you can withdraw any optional one at any time from Privacy and your data. Withdrawing is exactly as easy as granting — one switch, same screen.

Three consents are required to run the service at all: the terms, this policy, and the handling of caste, religion and horoscope details. They cannot be withdrawn while the account exists, and rather than pretending otherwise we point you at deletion, which does withdraw them.

Your rights

• A copy of everything we hold about you, in a readable form, on demand.
• Correction of anything inaccurate — most of it you can edit yourself.
• Deletion of your account and data, including the photographs, which are erased from storage rather than hidden.
• Withdrawal of any optional consent.
• To nominate someone to exercise these rights if you cannot.
• To complain to our grievance officer, and to the Data Protection Board of India if we do not answer.

The first four you can do yourself, immediately, without asking anyone. For the others, write to our grievance officer. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

How long we keep it

Your profile and activity are kept while your account exists. When you delete it, the account, the profile, the messages and the photographs go — the image files are removed from storage, not merely de-listed.

Some things survive, and we would rather say so than have you discover it. Payment records are kept because financial records carry statutory retention and refunds and tax reconciliation depend on them; they are detached from your identity. The log of staff access to member data is kept with your identity removed, because an audit trail its own subject can erase is not an audit trail. Records of verification codes we sent — a scrambled form of the number, the time and the internet address — are kept for one year as security records and then deleted. If your account was suspended, or reports about it were still open when you deleted it, a scrambled code made from your phone number is kept with that fact, so deleting cannot be used to wipe a record and start again. And if you were given a free trial, scrambled codes made from your phone number and from the app or browser you used are kept, with the date, so they cannot claim a second trial after deleting and joining again; they cannot be turned back into the number and are used for nothing else. If you tell us why you are leaving, that reason is kept as a count, with nothing that says it was you.

Reports and blocks you made or received are deleted with your account.

We keep encrypted backups of the database so a failure does not lose everyone’s profile. Each backup is deleted after 30 days, so within 30 days of deleting your account, no copy of it remains in them either.

Children

This is a platform for marriage, and the legal minimum ages for marriage in India apply. Nobody under 18 may create a profile, and we do not knowingly hold data about anyone under 18. If we learn that a profile belongs to someone under the legal age, we remove it.

Changes

When this policy changes we bump its version and record which version you agreed to, so there is always an answer to “what did I actually consent to?”. Material changes are notified in the app rather than published silently.