Legal

Privacy Policy

Last updated: 11 June 2026

The short version. Unfyltered runs on real things: your words, your photos, your plans. We collect what the product needs and not much else. Your phone number is never shown to anyone — it stays fully masked until both of you agree to share. We don't sell your data, we don't run ads, and when you delete your account, we actually delete it.

Unfyltered is operated by NETSPHERE TECHNOLOGIES, a sole proprietorship of Nikhil Sahu, based in Jabalpur, Madhya Pradesh, India ("Unfyltered", "we", "us"). We are the data fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have. It applies to the Unfyltered app on iOS and Android and to unfyltered.com.

By creating an account you consent to the processing described here. You can withdraw consent at any time — withdrawing it for data the app needs to function (like your phone number or location) means some or all of Unfyltered will stop working for you, and you can delete your account whenever you like.

1. What we collect

Things you give us

Things collected when you use the app

Things we deliberately don't collect

2. Why we use it

WhatWhy
Phone number, OTPCreating and securing your account; confirming account deletion
Profile, photos, prompts, QOTD answersShowing you to other people in discovery, The Drop, Nearby and events — that's the product
Date of birthKeeping Unfyltered strictly 18+ and showing your age
LocationShowing nearby people, your city's Drop wall, and events around you
MessagesDelivering your chats in real time and keeping them available to participants
Verification selfieConfirming your profile is really you (the "verified" badge)
Likes, views, activityBuilding your daily batch, powering matches, "Viewed you" and post-event connections
Purchase stateUnlocking Unfyltered+ features you paid for; publishing events and confirming tickets
Device tokenPush notifications (new matches, messages, The Drop going live, event reminders)
Reports, blocks, grievancesSafety, moderation and our legal obligations as an intermediary
Crash dataFixing bugs

Our legal basis is your consent, given when you sign up and when you grant specific permissions (location, notifications). Some processing happens for legitimate uses recognised by the DPDP Act — for example, complying with law, responding to legal orders, and protecting users when we investigate a safety report.

3. Who sees what inside the app

4. Who we share data with

We do not sell personal data, ever, and we do not share it with advertisers. We share data only with the service providers (data processors) that run parts of Unfyltered on our behalf, under contracts limiting their use to providing the service:

ProcessorWhat they handle
Cloudflare (R2)Storage of photos, event covers and verification selfies (accessed via short-lived signed links)
Google FirebasePush notifications (FCM) and crash reporting (Crashlytics)
RevenueCatSubscription status for Unfyltered+ (linked to a random account ID, not your phone number)
RazorpayPayments for event listing fees and tickets (Razorpay is an RBI-regulated payment aggregator)
MSG91Delivery of OTP SMS to your phone number

Beyond processors, we may disclose data: (a) to comply with Indian law, a court order, or a lawful request from a government agency; (b) to enforce our Terms and Community Guidelines, including sharing with law enforcement when we report suspected child sexual abuse or exploitation; and (c) if NETSPHERE TECHNOLOGIES is ever restructured or acquired, to the successor entity under this same policy.

5. Where your data lives (cross-border transfers)

Our servers are hosted in the European Union, and some processors listed above store data in the EU or the United States. The DPDP Act permits transfers of personal data outside India except to countries the Central Government specifically restricts; we do not transfer data to any restricted territory, and our processors are bound by contractual safeguards. Wherever your data is processed, this policy and Indian law govern our obligations to you.

6. How long we keep it

7. Your rights

Under the DPDP Act you have the right to:

We respond to rights requests at hello@unfyltered.com. If you're unsatisfied with our response, you may complain to our Grievance Officer and, after exhausting that route, to the Data Protection Board of India.

8. Children

Unfyltered is for adults — 18 and over, no exceptions. We verify age via date of birth at sign-up and lock it from later edits. We do not knowingly process data of anyone under 18; if we learn an account belongs to a minor, we suspend it immediately and erase the data. Reports of suspected underage users are treated as the highest-priority safety category — see our Community Guidelines.

9. Security

We use reasonable security safeguards appropriate to the data we hold: encryption in transit (TLS) everywhere, photos served through short-lived signed URLs rather than public links, phone numbers masked at the API level by design (the mask is the literal string sent to other users' devices — real digits are never transmitted until mutual consent), access controls on production systems, and verified webhooks for all payment events. No internet service can promise perfect security; if a breach affecting your personal data occurs, we will notify you and the Data Protection Board as the DPDP Act requires.

10. Changes to this policy

When we change this policy materially, we'll notify you in the app or by notification before the change takes effect, and update the date at the top. Continuing to use Unfyltered after the effective date means you accept the updated policy.

11. Contact & Grievance Officer

NETSPHERE TECHNOLOGIES (sole proprietor: Nikhil Sahu)
Jabalpur, Madhya Pradesh, India
General: hello@unfyltered.com

Grievance Officer: Nikhil Sahu — grievance@unfyltered.com
We acknowledge grievances within 24 hours and resolve them within 15 days. Full details: Grievance Redressal.