Privacy Policy — Dil Ka Rishta

Privacy Policy — Mobile App

Last updated: June 18, 2026 · Applies to Android (Google Play) and iOS builds of the Dil Ka Rishta Marriage app.

Quick summary — what this app is: A matrimonial (rishta) platform for adults (18+) in Pakistan and the Pakistani diaspora to find a marriage partner with family involvement. It is not a dating app. There is no in-app chat, messaging, file sharing, location sharing, or live media. Users see verified profiles, send a one-way "Interest" tap, and contact details become visible only after admin-side verification.

1. Who we are

Dil Ka Rishta (referred to as "we", "us", "our") owns and operates https://www.dilkarishta.com.pk and the mobile app distributed on Google Play as "Dil Ka Rishta Marriage". For privacy questions write to contact@dilkarishta.com.pk.

2. Purpose of the service

The service exists to help adult users and their families find a marriage partner. All interactions are intentionally limited so the app cannot be used for casual dating, hook-ups, or any non-marital purpose:

Profiles are family-friendly. Every photo is reviewed by our moderators.
There is no in-app chat, no DM, no group chat, no voice or video call.
There is no file, media, location, or audio sharing of any kind.
Users can only express interest with a one-way "Send Interest" tap.
Phone numbers are revealed only after admin verification of both parties.

3. Eligibility — 18+ only

The service is strictly for users aged 18 years or older. Sign-up requires a date of birth which is enforced on both the client and the server. Accounts that turn out to be under-18 are deleted on report.

4. What personal data we collect

4.1 At sign-up: name, email, mobile, date of birth, gender, city, country, CNIC number, password (bcrypt hashed), optional referral code.

4.2 After sign-up (optional): profile photo (admin-approved), family/education/profession fields, CNIC front/back + selfie for one-time verification kept in a private folder.

4.3 Automatically: IP address, device model, crash reports, anonymous analytics events, OneSignal Player ID (only if user accepts the notification prompt), and the device's Android Advertising ID (AAID) — read by the OneSignal SDK for push-delivery deduplication and basic analytics only. The AAID is never used to show ads or shared with any ad network. You can reset or opt out from Device Settings → Google → Ads.

4.4 We never collect: precise GPS, contacts, SMS, call log, microphone, camera roll, Bluetooth, Wi-Fi list, biometric or health data.

5. How we use the data

Account verification (email + WhatsApp OTP)
Profile verification (CNIC + selfie reviewed by a human moderator)
Matchmaking based on preferences
Trust and safety (IP-based fraud prevention, report investigation)
Push notifications (only if opted in)
Service improvement via aggregated, anonymous analytics

We do not sell personal data and do not run profile-matching ads based on personal traits.

6. Safety controls inside the app

Block User — one tap to permanently block any profile.
Report Profile — one tap to flag fake, inappropriate, married-person, under-18 or scam content. Each report is admin-reviewed. A user cannot report the same profile twice in 7 days.
Photo moderation — admin approves every photo before it goes public.
Verification badges — only verified users have unblurred photos.
Self-deletion — Account → Delete My Profile (OTP gated).
No free-text messaging — no chat surface exists, so harassment and scams have no place to start.

7. How contact details become visible

A profile's mobile number is hidden by default. It only becomes visible when both parties are admin-verified, OR when the viewer has a paid package that includes contact viewing (currently no paid plans exist; the app is free during the launch period).

8. Push notifications

Push notifications use OneSignal (Firebase Cloud Messaging for Android) and are opt-in only. The user can revoke permission at any time from device Settings → Apps → Dil Ka Rishta → Notifications.

The OneSignal SDK also reads the device's Android Advertising ID (AAID) to deduplicate notification delivery across reinstalls and to feed basic delivery analytics. The Advertising ID is not used to display ads and is not shared with any ad network.

9. Advertising

The app does not currently show any ads. The only third-party SDK in the current build that touches the device's Android Advertising ID (AAID) is OneSignal, and it reads the AAID purely for push-notification delivery deduplication (see section 8). We may, in the future, display Google AdMob banners to keep the service free. When that happens, this page will be updated and you will see a notice in the app. We will not pass any of your personal profile data (name, photos, CNIC, mobile, email) to AdMob or any other ad network.

10. Payments

The app is currently completely free. There is no in-app purchase and no Google Play Billing integration in the current build. If we introduce paid plans we will use Play Billing on the app and show a clear notice in advance.

11. Referral program

Every account is automatically assigned a unique 6-character referral code. If a new user signs up using your code, you may earn a commission on any future paid package they buy. The referrer never sees personally identifiable information about the people they referred — only their masked Profile ID and the package purchased.

Google Cloud Platform / Firebase — crash reporting and push notification delivery
OneSignal — push notification routing (reads Android Advertising ID for delivery deduplication only)
WhatsCRM.pk — WhatsApp OTP delivery via approved Meta template
Google Analytics 4 — anonymous in-app analytics
Google reCAPTCHA — bot prevention
Google AdMob — future, only after we announce it

13. Data retention

Active accounts: retained while the account is active.
Self-deleted accounts: removed from search immediately; underlying row kept for 90 days for fraud and dispute resolution, then permanently scrubbed.
CNIC / selfie files: kept only as long as needed to maintain the verified badge.
Server logs (IP, user-agent): rotated every 30 days.

14. Your rights

Access your data — visible inside the app.
Correct any field by editing your profile.
Delete your account — two ways:
- From inside the app: Account → Delete My Profile (OTP gated, instant removal from search).
- Without logging in: use the public account deletion form at https://www.dilkarishta.com.pk/delete-request.php. Send the request from the same email that is on your account and we will action it within 7 days. A confirmation copy is emailed to you and to our team.
Withdraw consent for push notifications from device Settings or the Account screen.
Reset / opt out of the Advertising ID from Device Settings → Google → Ads.
Request a copy of all your data — email contact@dilkarishta.com.pk and we will send a ZIP within 30 days.

15. Security

All traffic uses HTTPS / TLS 1.2+. Passwords are stored using bcrypt with a per-row salt. CNIC and selfie images are stored in a private folder that is not directly accessible from the web. We follow OWASP-aligned practices for input validation, CSRF tokens, and access control on every administrative endpoint.

16. Children

The service is restricted to adults (18+) and is therefore not a "children's app" under the Google Play Families program or the US COPPA rule.

17. Changes to this policy

We will post any material change to this page and update the "Last updated" date at the top.

18. Contact

Dil Ka Rishta
Lahore, Pakistan
Email: contact@dilkarishta.com.pk
Website: https://www.dilkarishta.com.pk