This Privacy Policy explains how * ("we", "us", "our") collects, uses, stores, and protects personal data when you use Mykalar, our community app for the Mykalar community.
We are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and other applicable Indian laws.
By registering on Mykalar, you confirm that you have read this policy and give your free, specific, informed, unconditional, and unambiguous consent to the collection and use of your personal data as described here.
You can withdraw consent at any time. To withdraw consent, go to Settings → Delete Account, or contact our Grievance Officer at grievance@evaegetech.com. Withdrawing consent means we will anonymise or delete your personal data, but community content (posts, comments) will remain attributed to "Deleted User" to preserve community context.
We collect only what is necessary to provide the Mykalar community experience.
| Data | Why it's collected | Required? |
|---|---|---|
| Mobile phone number | Account creation and OTP login | Yes |
| First and last name | Community identity | Yes |
| Profile photo | Community recognition | Optional |
| Middle name | Profile completeness | Optional |
| Bio | Community introduction | Optional |
| Blood group | Emergency community support | Optional |
| Native place | Community connection | Optional |
| Marital status | Matrimony feature | Optional |
| Matrimony profile details | Matrimony matching | Optional |
| Business listing details | Community business directory | Optional |
We do not collect: precise GPS location (location is text only, entered by you), browsing history, contacts from your phone, financial information, or advertising identifiers.
We collect personal data for the following purposes, each of which requires your consent or is necessary to perform the services you requested:
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
We do not use your data for targeted advertising.
Verified community members can see your name, profile photo, bio, posts, comments, events, and business listings. You can control visibility of blood group and native place in Settings → Privacy.
Samiti Admins can view member profiles and manage community content. They cannot read your private chat messages — chats are end-to-end encrypted and are never accessible to administrators or *.
Our team can access account information for the purpose of support and legal compliance. We access the minimum data necessary and never access private chat messages.
We share only the minimum data necessary with the following sub-processors. Each is bound by a Data Processing Agreement (DPA) with *.
| Provider | Purpose | Data location | DPA |
|---|---|---|---|
| Supabase | Database and authentication infrastructure | AWS Asia Pacific (ap-south-1, Mumbai) | Supabase Privacy & DPA |
| Microsoft 365 | Email delivery for OTP and notifications | India / Asia Pacific data centres | Microsoft Trust Center |
| Google Play Store | App distribution | Google global infrastructure | Google Privacy Policy |
We may disclose personal data to government authorities or law enforcement when required by a valid legal order under Indian law.
Your private messages are end-to-end encrypted using AES-256-GCM. Only you and the person you are chatting with can read them. * cannot read your private messages.
| Data type | Retention period |
|---|---|
| Account and profile information | Until account deletion, then anonymised immediately |
| Posts, comments, reactions | Kept indefinitely, attributed to "Deleted User" after account deletion |
| Private chat messages | Until deleted by you or when both parties delete their accounts |
| OTP logs | 90 days (for security audit purposes) |
| Grievance records | 3 years (as required under IT Rules 2021) |
| Matrimony profiles | Until withdrawn by you or account deletion |
When you delete your account, your personal information (name, phone number, photo, bio, blood group, native place) is permanently removed. Posts and comments you created remain visible in the community attributed to "Deleted User" so that ongoing discussions are preserved.
Under the DPDP Act 2023, you have the following rights regarding your personal data:
To exercise any of these rights, contact: grievance@evaegetech.com
We will acknowledge your request within 24 hours and resolve it within 15 days.
Mykalar is intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has registered on Mykalar, please contact us at grievance@evaegetech.com and we will promptly investigate and remove the account.
We take reasonable technical and organisational measures to protect your personal data, including:
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
Data breach notification: In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the Data Protection Board of India within 72 hours of becoming aware of the breach, as required under the DPDP Act 2023. We will also inform all affected users through an in-app notification without undue delay, describing the nature of the breach, the data affected, and the steps we are taking.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you through the app and update the "Last updated" date at the top of this page.
If the changes require fresh consent under the DPDP Act, you will be asked to review and accept the updated policy the next time you open the app.
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated a Grievance Officer to address complaints and concerns about the processing of your personal data.
When writing to us, please include your registered phone number and a description of your concern so we can respond efficiently.
For general enquiries about this Privacy Policy or data protection matters: