Privacy Policy — Dil Ka Rishta

Privacy Policy — Mobile App

Last updated: August 24, 2026 · Applies to Android (Google Play) and iOS builds of the Dil Ka Rishta Marriage app.

Quick summary — what this app is: A matrimonial (rishta) platform for adults (18+) in Pakistan and the Pakistani diaspora to find a marriage partner with family involvement. It is not a dating app. There is no in-app chat, messaging, file sharing, location sharing, or live media. Users see verified profiles, send a one-way "Interest" tap, and contact details become visible only after admin-side verification.

1. Who we are

Dil Ka Rishta (referred to as "we", "us", "our") owns and operates https://www.dilkarishta.com.pk and the mobile app distributed on Google Play as "Dil Ka Rishta Marriage". For privacy questions write to contact@dilkarishta.com.pk.

2. Purpose of the service

The service exists to help adult users and their families find a marriage partner. All interactions are intentionally limited so the app cannot be used for casual dating, hook-ups, or any non-marital purpose:

Profiles are family-friendly. Every photo is reviewed by our moderators.
There is no in-app chat, no DM, no group chat, no voice or video call.
There is no file, media, location, or audio sharing of any kind.
Users can only express interest with a one-way "Send Interest" tap.
Phone numbers are revealed only after admin verification of both parties.

3. Eligibility — 18+ only

The service is strictly for users aged 18 years or older. Sign-up requires a date of birth which is enforced on both the client and the server. Accounts that turn out to be under-18 are deleted on report.

4. What personal data we collect

4.1 At sign-up: name, email, mobile, date of birth, gender, city, country, CNIC number, password (bcrypt hashed), optional referral code.

4.2 After sign-up (optional): profile photo (admin-approved), family/education/profession fields, CNIC front/back + selfie for one-time verification kept in a private folder.

4.3 Automatically: IP address, device model, crash reports, anonymous analytics events, OneSignal Player ID (only if user accepts the notification prompt), and the device's Android Advertising ID (AAID) — read by (a) the OneSignal SDK for push-delivery deduplication and (b) the Google AdMob SDK to serve and measure the in-app ads described in section 9. We never attach your personal profile data to the AAID. You can reset or opt out from Device Settings → Google → Ads.

4.4 We never collect: precise GPS, contacts, SMS, call log, microphone, camera roll, Bluetooth, Wi-Fi list, biometric or health data.

5. How we use the data

Account verification (email + WhatsApp OTP)
Profile verification (CNIC + selfie reviewed by a human moderator)
Matchmaking based on preferences
Trust and safety (IP-based fraud prevention, report investigation)
Push notifications (only if opted in)
Service improvement via aggregated, anonymous analytics

We do not sell personal data and do not run profile-matching ads based on personal traits.

6. Safety controls inside the app

Block User — one tap to permanently block any profile.
Report Profile — one tap to flag fake, inappropriate, married-person, under-18 or scam content. Each report is admin-reviewed. A user cannot report the same profile twice in 7 days.
Photo moderation — admin approves every photo before it goes public.
Verification badges — only verified users have unblurred photos.
Self-deletion — Account → Delete My Profile (OTP gated).
No free-text messaging — no chat surface exists, so harassment and scams have no place to start.

7. How contact details become visible

A profile's mobile number is hidden by default. It only becomes visible when both parties are admin-verified, OR when the viewer has a paid package that includes contact viewing. Paid packages (Advance, Premium, VIP Matchmaking) can be purchased inside the app via Google Play Billing or on the website — see section 10.

8. Push notifications

Push notifications use OneSignal (Firebase Cloud Messaging for Android) and are opt-in only. The user can revoke permission at any time from device Settings → Apps → Dil Ka Rishta → Notifications.

The OneSignal SDK also reads the device's Android Advertising ID (AAID) to deduplicate notification delivery across reinstalls and to feed basic delivery analytics. OneSignal does not use it for advertising; ads in the app are served separately by Google AdMob (section 9).

9. Advertising

To keep the core service free, the app may display ads served by Google AdMob: a small banner at the bottom, an occasional full-screen (interstitial) ad, and occasionally an ad when returning to the app. Frequency is deliberately limited and ads are never shown on sensitive screens (login, registration, OTP, photo upload, payments). Paid members (Advance, Premium, VIP) enjoy an ad-free experience.

AdMob uses the device's Advertising ID and standard device signals to serve and measure ads; we do not pass any of your personal profile data (name, photos, CNIC, mobile, email) to AdMob or any other ad network. Users in the EEA, UK and Switzerland are shown a Google-certified consent form (CMP) before personalised ads are served, as required by the GDPR; declining consent limits ads to non-personalised or none, and the app remains fully usable. You can reset or opt out of the Advertising ID at Device Settings → Google → Ads.

10. Payments

Basic use is free. Optional paid packages (Advance, Premium, VIP Matchmaking) can be bought inside the app via Google Play Billing — Google processes the entire payment and we never see or store your card, wallet, or bank details; we receive only the order ID, product, and a purchase token to activate your package. On the website, packages can be paid via JazzCash, EasyPaisa, or bank transfer (verified manually by our team). A package purchased on either platform applies to the same account everywhere. Refunds for Play purchases follow Google Play's refund policy; for website payments contact contact@dilkarishta.com.pk.

11. Referral program

Every account is automatically assigned a unique 6-character referral code. If a new user signs up using your code, you may earn a commission on any future paid package they buy. The referrer never sees personally identifiable information about the people they referred — only their masked Profile ID and the package purchased.

Google Cloud Platform / Firebase — crash reporting and push notification delivery
OneSignal — push notification routing (reads Android Advertising ID for delivery deduplication only)
WhatsCRM.pk — WhatsApp OTP delivery via approved Meta template
Google Analytics 4 — anonymous in-app analytics
Google reCAPTCHA — bot prevention
Google AdMob — in-app advertising (banner / interstitial / app-open); consent-gated in EEA/UK/CH
Google Play Billing — in-app package purchases (Google processes the payment; we never see card details)

13. Data retention

Active accounts: retained while the account is active.
Self-deleted accounts: removed from search immediately; underlying row kept for 90 days for fraud and dispute resolution, then permanently scrubbed.
CNIC / selfie files: kept only as long as needed to maintain the verified badge.
Server logs (IP, user-agent): rotated every 30 days.

14. Your rights

Access your data — visible inside the app.
Correct any field by editing your profile.
Delete your account — two ways:
- From inside the app: Account → Delete My Profile (OTP gated, instant removal from search).
- Without logging in: use the public account deletion form at https://www.dilkarishta.com.pk/delete-request.php. Send the request from the same email that is on your account and we will action it within 7 days. A confirmation copy is emailed to you and to our team.
Withdraw consent for push notifications from device Settings or the Account screen.
Reset / opt out of the Advertising ID from Device Settings → Google → Ads.
Request a copy of all your data — email contact@dilkarishta.com.pk and we will send a ZIP within 30 days.

15. Security

All traffic uses HTTPS / TLS 1.2+. Passwords are stored using bcrypt with a per-row salt. CNIC and selfie images are stored in a private folder that is not directly accessible from the web. We follow OWASP-aligned practices for input validation, CSRF tokens, and access control on every administrative endpoint.

16. Children

The service is restricted to adults (18+) and is therefore not a "children's app" under the Google Play Families program or the US COPPA rule.

17. Changes to this policy

We will post any material change to this page and update the "Last updated" date at the top.

18. Contact

Dil Ka Rishta
Lahore, Pakistan
Email: contact@dilkarishta.com.pk
Website: https://www.dilkarishta.com.pk