Legal
Privacy Policy
Last updated: 11 June 2026
The short version. Unfyltered runs on real things: your words, your photos, your plans. We collect what the product needs and not much else. Your phone number is never shown to anyone — it stays fully masked until both of you agree to share. We don't sell your data, we don't run ads, and when you delete your account, we actually delete it.
Unfyltered is operated by NETSPHERE TECHNOLOGIES, a sole proprietorship of Nikhil Sahu, based in Jabalpur, Madhya Pradesh, India ("Unfyltered", "we", "us"). We are the data fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have. It applies to the Unfyltered app on iOS and Android and to unfyltered.com.
By creating an account you consent to the processing described here. You can withdraw consent at any time — withdrawing it for data the app needs to function (like your phone number or location) means some or all of Unfyltered will stop working for you, and you can delete your account whenever you like.
1. What we collect
Things you give us
- Phone number. Your account is your phone number, verified by a one-time password (OTP) sent over SMS. Your number is never displayed to other users. Anywhere the app references it, others see only a mask (
+91 ••• ••• ••) until both of you explicitly consent to share — see "Number sharing" below. - Profile details. Display name, date of birth (used to verify you're 18+ and to show your age — your date of birth itself is never shown and cannot be changed after you set it), gender, who you're interested in, and optional fields: height, job title, company, education, hometown, religion, languages, drinking and smoking habits, and what you're looking for.
- Photos. Profile photos you upload (up to six), and — if you choose to get verified — a one-time selfie used solely to confirm your profile photos are really you. Verification selfies are reviewed by our team, are never shown on your profile, and are not used for anything else.
- Words. Your prompt answers, your Question of the Day answers (which appear on your city's Drop wall in the evening), messages you send in matches and event group chats, event listings you create as a host, and anything you write in reports or grievances.
- Preferences. Discovery filters such as age range, distance, verified-only, religion and language preferences, and who is allowed to send you number requests (everyone, your connections, or nobody).
Things collected when you use the app
- Location. With your permission, your device's precise location. We store it as a single geographic point plus your city, and use it to show people and events near you. Other users only ever see an approximate distance (e.g. "4.2 km away") — never your coordinates or a map position. Recency of activity is shown to others only in broad buckets ("today", "this week"), never as exact timestamps.
- Activity inside Unfyltered. Likes, passes, matches, RSVPs, event check-ins, number requests and responses, profile views (so the "Viewed you" feature works), and read state of your chats.
- Device data. A push-notification token (Firebase Cloud Messaging) and your app version, so we can deliver notifications and support your device correctly.
- Purchase state. If you subscribe to Unfyltered+, Apple or Google process the payment and RevenueCat tells us whether your subscription is active. If you pay for an event listing or ticket, Razorpay processes the payment and we keep the order record. We never see or store your card, UPI or banking details.
- Crash and diagnostics data. Crash reports via Firebase Crashlytics, used only to find and fix bugs. This data is not linked to your dating activity.
Things we deliberately don't collect
- No contact-list uploads. We never read your address book.
- No advertising identifiers, ad SDKs, or cross-app tracking.
- No background location — only when you use the app.
- No payment instrument details (cards, UPI handles, bank accounts).
2. Why we use it
| What | Why |
|---|---|
| Phone number, OTP | Creating and securing your account; confirming account deletion |
| Profile, photos, prompts, QOTD answers | Showing you to other people in discovery, The Drop, Nearby and events — that's the product |
| Date of birth | Keeping Unfyltered strictly 18+ and showing your age |
| Location | Showing nearby people, your city's Drop wall, and events around you |
| Messages | Delivering your chats in real time and keeping them available to participants |
| Verification selfie | Confirming your profile is really you (the "verified" badge) |
| Likes, views, activity | Building your daily batch, powering matches, "Viewed you" and post-event connections |
| Purchase state | Unlocking Unfyltered+ features you paid for; publishing events and confirming tickets |
| Device token | Push notifications (new matches, messages, The Drop going live, event reminders) |
| Reports, blocks, grievances | Safety, moderation and our legal obligations as an intermediary |
| Crash data | Fixing bugs |
Our legal basis is your consent, given when you sign up and when you grant specific permissions (location, notifications). Some processing happens for legitimate uses recognised by the DPDP Act — for example, complying with law, responding to legal orders, and protecting users when we investigate a safety report.
3. Who sees what inside the app
- Your profile (name, age, photos, prompts, optional details, approximate distance) is visible to people who encounter you through discovery, The Drop, likes, matches, Nearby, and events you both attend. Unfyltered is not a public directory — profiles are shown in these product contexts, not on the open web.
- Your Question of the Day answer appears on your city's Drop wall on the day you write it, attributed to your profile.
- Event attendee lists are visible to people going to the same event (and its host) once you RSVP.
- Number sharing is double-consent by design. Your phone number is masked everywhere. If someone requests your number, you choose to accept or decline. Only when you accept do both of you see each other's real numbers. Until then, nobody — match, host, or attendee — can see it.
- Blocking someone removes you from each other's view in both directions, immediately.
4. Who we share data with
We do not sell personal data, ever, and we do not share it with advertisers. We share data only with the service providers (data processors) that run parts of Unfyltered on our behalf, under contracts limiting their use to providing the service:
| Processor | What they handle |
|---|---|
| Cloudflare (R2) | Storage of photos, event covers and verification selfies (accessed via short-lived signed links) |
| Google Firebase | Push notifications (FCM) and crash reporting (Crashlytics) |
| RevenueCat | Subscription status for Unfyltered+ (linked to a random account ID, not your phone number) |
| Razorpay | Payments for event listing fees and tickets (Razorpay is an RBI-regulated payment aggregator) |
| MSG91 | Delivery of OTP SMS to your phone number |
Beyond processors, we may disclose data: (a) to comply with Indian law, a court order, or a lawful request from a government agency; (b) to enforce our Terms and Community Guidelines, including sharing with law enforcement when we report suspected child sexual abuse or exploitation; and (c) if NETSPHERE TECHNOLOGIES is ever restructured or acquired, to the successor entity under this same policy.
5. Where your data lives (cross-border transfers)
Our servers are hosted in the European Union, and some processors listed above store data in the EU or the United States. The DPDP Act permits transfers of personal data outside India except to countries the Central Government specifically restricts; we do not transfer data to any restricted territory, and our processors are bound by contractual safeguards. Wherever your data is processed, this policy and Indian law govern our obligations to you.
6. How long we keep it
- While your account is active, we keep your data so the product works.
- When you delete your account (in the app, confirmed by OTP), your profile is removed and you stop appearing to other people straight away, and you are signed out on every device. For safety, fraud prevention and to meet our legal obligations, we keep a record of your account on our servers after deletion. It is never shown to other people, and you can create a new account with the same number later.
- Chats: messages you sent may remain visible to the people you sent them to (a conversation belongs to all its participants), but they are no longer attributed to an active profile after you delete your account.
- What this includes: records we are legally required to keep (such as payment and tax records) and safety records (reports, bans, blocks) that help us stop banned or removed users from returning. We never show any of this to other users.
- Verification selfies are kept only as long as needed to review and defend the verification decision.
7. Your rights
Under the DPDP Act you have the right to:
- Access — a summary of the personal data we hold about you and how it has been processed.
- Correction and updating — edit your profile, photos, prompts and preferences any time in the app (You → Edit profile). For anything you can't edit yourself, write to us.
- Erasure — delete your account in the app (You → Settings → Delete account), or ask us to erase specific data that is no longer needed.
- Grievance redressal — raise a complaint in the app (You → Help & grievances) or with our Grievance Officer (below). Details, timelines and escalation are on our Grievance Redressal page.
- Nominate — name a person to exercise these rights for you if you die or are incapacitated.
- Withdraw consent — as easily as you gave it. Once the Government of India operationalises registered Consent Managers under the DPDP Act, you will be able to manage your consents to Unfyltered through one; until then, contact us directly and we will honour your request.
We respond to rights requests at hello@unfyltered.com. If you're unsatisfied with our response, you may complain to our Grievance Officer and, after exhausting that route, to the Data Protection Board of India.
8. Children
Unfyltered is for adults — 18 and over, no exceptions. We verify age via date of birth at sign-up and lock it from later edits. We do not knowingly process data of anyone under 18; if we learn an account belongs to a minor, we suspend it immediately and erase the data. Reports of suspected underage users are treated as the highest-priority safety category — see our Community Guidelines.
9. Security
We use reasonable security safeguards appropriate to the data we hold: encryption in transit (TLS) everywhere, photos served through short-lived signed URLs rather than public links, phone numbers masked at the API level by design (the mask is the literal string sent to other users' devices — real digits are never transmitted until mutual consent), access controls on production systems, and verified webhooks for all payment events. No internet service can promise perfect security; if a breach affecting your personal data occurs, we will notify you and the Data Protection Board as the DPDP Act requires.
10. Changes to this policy
When we change this policy materially, we'll notify you in the app or by notification before the change takes effect, and update the date at the top. Continuing to use Unfyltered after the effective date means you accept the updated policy.
11. Contact & Grievance Officer
NETSPHERE TECHNOLOGIES (sole proprietor: Nikhil Sahu)
Jabalpur, Madhya Pradesh, India
General: hello@unfyltered.com
Grievance Officer: Nikhil Sahu — grievance@unfyltered.com
We acknowledge grievances within 24 hours and resolve them within 15 days. Full details: Grievance Redressal.