DRAFT — REQUIRES FINAL BUSINESS/LEGAL APPROVAL. Engineering draft written from the
actual Phase-1 architecture (2026-09-24). Not lawyer-reviewed. Values marked `[TO CONFIRM]`
must be supplied from company records before publication.
Operator: WEU Innovations Private Limited ([TO CONFIRM: registered address, CIN, grievance officer name/contact — DPDP Rules require a named contact])
Contact for privacy requests: [TO CONFIRM: privacy@magntc.com or equivalent]
Effective date: [TO CONFIRM]
Magntc is a dating app for people aged 18 and over. It notices when other members are
physically nearby using Bluetooth Low Energy, without ever recording or sharing where you
are. This policy describes what we hold, why, for how long, who receives it, and how you
can control it. It reflects how the app actually works today (Phase 1).
| Data | Why | Where it goes |
|---|---|---|
| Mobile number | To create and sign in to your account. The number is verified by Firebase Phone Authentication (Google); Magntc then issues its own session. Your number is stored as a keyed hash for sign-in and is never shown on your profile or to other members. | Google Firebase (verification only), Magntc servers |
| Profile — first name, date of birth (we store it to compute age; other people see only your age), gender, who you want to meet, intent, headline, bio, interests | To show your profile to eligible members and to apply their preferences and yours | Magntc servers; shown to members allowed to see you |
| Profile photos | To show on your profile. Every photo is re-encoded on our servers, GPS and camera metadata are removed, and it is checked by an automated safety filter (Google Cloud Vision SafeSearch) and, when the filter cannot decide, by a human moderator. Only approved photos are shown to others. | Stored in a private Cloudflare R2 bucket; image bytes are sent to Google Cloud Vision for the safety check; served to eligible members through short-lived links |
| Nearby presence (Bluetooth) | To notice members who are physically near you. Your phone broadcasts a rotating anonymous identifier that changes regularly and carries no profile data. Another member's phone can only turn that identifier into a profile by asking our servers, which check that both of you are eligible to see each other. Nobody is told your distance, direction, or location. We do not use GPS or location services for discovery. | Between phones (identifier only) and Magntc servers (resolution) |
| Encounters | To show who was recently nearby. Kept in coarse (hour-level) form on your phone and on our servers, and deleted automatically after a retention window (currently 14 days). | Your phone, Magntc servers |
| Likes and matches | To create matches and let you chat once both people have liked each other | Magntc servers; a like is revealed only on a mutual match |
| Messages (text, voice notes, photos sent in chat) | To deliver them to the person you matched with. Messages are protected in transit (TLS) and at rest on our servers; they are not end-to-end encrypted. Moderators do not read conversations unless a message is reported. | Magntc servers; the other participant |
| Push notification token | To send notifications (new match, new message) through Apple (APNs) and Google (FCM). Notification content never includes who reported whom. | Apple, Google |
| Blocks and reports | To keep people you blocked out of your experience and to let our moderators act on reports. Reports include the category and what you chose to write. | Magntc servers; moderators |
| Safety records | If a moderator restricts, suspends or bans an account, the decision, reason and time are recorded. | Magntc servers |
| Device and session | Device id and sign-in sessions, so you can see and sign out devices. | Magntc servers |
| Diagnostics | Server logs contain request paths and error types; they do not contain message content, photos or phone numbers. The apps do not include third-party analytics or advertising SDKs in Phase 1. | Magntc servers |
We do not collect precise location, contacts (except the one trusted contact you may
pick for Safe Date check-ins, which stays on your phone), or advertising identifiers.
Phase 1 uses phone verification only. Photo (selfie) verification is not offered yet; when
it is, it will have its own consent screen and its own section in this policy.
Your profile (name, age, photos, headline, bio, interests) is shown only to members who are
allowed to see you: adults, meeting your preferences and theirs, not blocked, and not hidden.
Your phone number, exact age of birth, location and messages are never shown to other members.
revokes every session and device, removes your profile, photos (including the stored
files), likes, matches and conversations from active use, and disconnects push. Some
records are kept for a limited period for safety and legal reasons: blocks, reports and
moderation decisions may be retained longer, by design, so that a removed account cannot
evade a block or a ban.
short retention period.
[TO CONFIRM]; the app will notclaim precise deletion times beyond what is implemented.
You can: view what we hold (Download your data in Privacy & Safety exports your account,
profile, matches, messages and safety records as a file), correct your profile at any time,
delete your account, and contact us at [TO CONFIRM] for anything else. If you are in India,
the Digital Personal Data Protection Act applies and you may raise a grievance with our
grievance officer [TO CONFIRM].
All traffic uses TLS; cleartext is refused by the apps. Sessions are revocable per device.
Photos are stored privately and served through short-lived signed links. Moderator access is
separate from user accounts and is audited. No system is perfectly secure; we will notify you
as required by law if a breach affects you.
Google (Firebase Phone Authentication, Firebase Cloud Messaging, Cloud Vision SafeSearch),
Apple (APNs push), Cloudflare (R2 profile-photo storage). Each receives only what its function
requires. Hosting: [TO CONFIRM: hosting provider/region of the API server].
Magntc is for adults. You must be 18 or over. Accounts reported as belonging to minors are
prioritised for review and removed.
We will publish changes here and, for material changes, in the app before they take effect.