Privacy Policy

01Who we are

Officer Saathi ("we", "us") is operated by Vizibly Technologies Private Limited, an Indian company with its registered office at W 2/6, West Patel Nagar, New Delhi 110008, India. We are the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

This policy covers the Officer Saathi mobile app, our website at officersaathi.com, and our support channels. By creating an account you consent to the processing described below. You can withdraw that consent at any time by deleting your account (section 9).

02What Officer Saathi is

Officer Saathi is a private, verified network for serving government officers, accomplished professionals and officers' adult sons and daughters. Members choose why they are here — marriage, professional networking, new friendships, same-city connections — and are introduced to other verified members on that basis. Every member is checked by a person before they appear to anyone.

Because of who our members are, we collect more identity information than an ordinary app, and we show less of it than an ordinary app. Both halves of that are described below.

03Data we collect

3.1 To create and verify your account

• Phone number. You sign in with a one-time code sent to your phone. Your number is held by our authentication provider and is never shown to other members.
• Identity details. Your name and date of birth. We store your age, not your birthday, on your profile.
• Government identity confirmation (DigiLocker). During signup you are asked to confirm your identity through DigiLocker / MeriPehchaan, a service of the Government of India. With your consent on DigiLocker's own screen, we receive your name, date of birth, gender, address and photograph as the government holds them. The photograph is deleted 90 days after your application is decided; the other fields stay on your record as the basis on which you were admitted.
• Selfie check. A short front-camera capture in which you follow a random prompt, so a reviewer can confirm you are a live person and the person in your photos. The frames are seen only by our verification team and are deleted 90 days after your application is decided.
• Service details (officers). Service, cadre, batch, rank, current posting, home town, employee code, and one proof of service — a service ID card, an appointment or posting order, a salary slip, or a departmental certificate. Optionally, you may find and claim your own row in the published civil list (see 3.5).
• Professional details (elite members). Profession, industry, company, title, city, education, income band and one proof of income.
• Family details (family referrals). Your relationship to the officer, the officer's name, your occupation, organisation, education and city, and a birth certificate naming the officer as your parent. If your parent is not on the app, you also give us your parent's service details, a document proving their service, and a phone number for them, so a reviewer can verify the chain. If your parent invited you, we record which officer invited you, the name they gave for you, and when they confirmed you.

3.2 Your profile

What you choose to add: photos, a short bio, prompt answers, interests, languages, education, a voice introduction, and — depending on the purpose you pick — bio-data (height, marital status, religion, mother tongue, community, diet, drinking, smoking, fitness), plans about children, family background (parents' occupations, siblings), horoscope details (time and place of birth, manglik status), preferences about a partner, and your professional focus, expertise, industries, career stage, experience and what you are open to. Every one of these sections is optional, several can be hidden with a switch on your profile, and the family and horoscope sections are never used to rank anyone.

Some of this — religion, community, horoscope, family — is information you may consider especially sensitive. You decide whether to add it. If you do, it is shown to other verified members on your profile exactly as you entered it, and used for nothing else.

3.3 Location

If you allow it, we take one approximate location fix (city-level accuracy) when you sign up or when you refresh it in Edit Profile. We never collect location in the background. Other members see your city and an approximate distance — never your coordinates. You can decline; the app works without it.

3.4 What you do in the app

• Requests and connections. Whom you pass, connect with, save or block; the purpose and note on each request; whether a Credit was attached.
• Conversations. Your messages, voice notes, photos, view-once photos, GIFs, reactions and replies with a connection. See section 6 for who can see them.
• Chat games and tools. In a marriage or friendship chat, what you play there: the dice questions rolled, your Match Meter and This or That answers, and your Two Truths and a Lie lines and guesses. In a Network chat, the asks, offers, coffee-chat times and introductions you send or answer. Game answers are private to the two of you — the other member sees your answer to a question only once they have given their own — and they are never shown on your profile, used for matching or recommendations, given to the assistant, or used for advertising.
• Circles. Your application to join a Circle, your answers (including anonymous ones), images, comments, endorsements and poll votes.
• Ratings. The 1–5 rating you give a connection, and the ones you receive. Only the count and the average are ever shown to anyone; individual ratings never leave our servers.
• Credits, Spotlight and Second Look. A ledger of what you earned and spent. Credits are earned by using the app, never bought, and have no cash value.
• Activity. Which days you opened the app (for your streak), and what you did in the Elimination Round.
• Support. Anything you write to us in Help & support.

3.5 Data from public records

For officers of the IAS, IPS and IFoS we keep a copy of the civil list published by the Department of Personnel & Training, so that you can find your own record during signup instead of typing it. Searching returns only name, batch and cadre; the full record is shown only for the row you claim as your own, and you can release a claim at any time. We do not use the list to build a directory of postings.

3.6 Device and technical data

Device model, operating system version, app version, a push-notification token if you allow notifications, and crash reports. Product analytics are collected against an anonymous identifier with no name, phone number or free text attached; we deliberately do not build per-person profiles in our analytics tool.

3.7 Screenshots

Screenshots and screen recordings are blocked inside the app. When a screenshot is attempted on a profile, a conversation, the Members deck or your requests, we record who attempted it, whose profile or conversation was on screen, which screen, and when. The person taking it sees a confidentiality notice. The person whose profile it was is not notified. The record exists so that an actual leak can be traced.

04How we use your data

• To verify you. A member of our team reads your documents, your selfie frames, your DigiLocker details and, where you claimed one, your civil-list record, and decides your application. Nothing is automated; nothing about your admission is decided by a model.
• To introduce you. Your profile text is converted into a numerical representation ("embedding") so that we can find members whose goals and backgrounds complement yours. The daily Picks and the order of the Members deck come from this, from the purposes you and they stated, from your stated preferences and must-haves, and from distance if you shared a location.
• To explain an introduction. For each daily Pick we generate two or three sentences on why you were introduced. To do this we send both members' name, headline and stated purpose to our AI provider.
• To answer your questions. Apna Saathi, the assistant in the app, can tell you how the app works and where your own account stands. When you ask it something, we send your question, the last few visible turns, and a summary of your own account (profile completion, verification state, streak, counts of requests and connections, and what is pending) to our AI provider. It is never given another member's information, and it never decides anything about your account.
• To keep the network safe. We screen Circle answers for a small set of terms (slurs, doxxing markers, solicitation of bribes, classified material) and hold matches for a person to read; we act on reports; we apply blocks in both directions on every surface; we investigate forged documents and impersonation.
• To run the service. Notifications you have turned on, daily budgets, Credits, Spotlight, streaks, support threads, and the deletion and pause controls.
• To improve the product, using aggregated analytics that cannot be tied back to you.

We do not sell personal data. We do not show advertising. We do not use your conversations, documents or photos to train machine-learning models, and our AI provider does not use data sent through its API to train its models.

05Who can see what

Your profile becomes visible to other members only once it is complete enough to be useful (currently 80%) and only after you are approved. Pausing your profile hides it from Members, Picks, Search and Spotlight while leaving everything else as it was.

06Conversations

Your chats are encrypted in transit and at rest and are visible only to you and the member you are connected with. They are not end-to-end encrypted: our systems can technically read them, which is what lets us deliver view-once photos, close inactive conversations and act on a report.

Our team does not read conversations in the ordinary course of running the service. A member of our safety team may open a specific thread only to investigate a report filed by you or the other member, to answer a support request you raised about it, or when we are compelled to by law. Access is limited to a small number of named staff.

A conversation in which neither member has written anything, played a game or used a chat tool for 14 days is closed. It is not deleted; it becomes read-only, both of you drop off each other's lists, and either of you may send a fresh request later. A view-once photo is deleted from our storage a few minutes after it has been opened.

07Sharing

We share personal data only with the parties below, only for the purpose stated, and under contracts that restrict them to that purpose.

We also disclose data when required by law, a court order or a lawful request from a government authority, and where permitted we will tell you first. If Officer Saathi is ever acquired or merged, this policy continues to apply to your data and you will be told before any change.

Cross-border transfer. Several of these providers store data outside India. By using the service you consent to that transfer. We do not transfer data to any country the Central Government has restricted under the DPDP Act.

08How long we keep it

Deleting your account (section 9) removes everything in the first three rows at the time of the request, not after a waiting period. We may keep a minimal record that an account existed and was deleted, and records we are legally required to retain (for example, a report we have referred to the police).

09Your rights and controls

Inside the app (the You tab) you can:

• edit or remove anything on your profile, and hide whole sections of it;
• pause your profile;
• turn each category of notification on or off;
• block any member (in both directions, everywhere) and report any profile, message, answer or reply;
• delete your own Circle answers and comments;
• delete your account. Your profile, connections, conversations, media, documents and login are removed at once and cannot be recovered.

Under the DPDP Act you also have the right to access a summary of the personal data we hold about you and how it has been processed, to correct or complete it, to have it erased, to nominate someone to exercise these rights if you are unable to, and to have a grievance heard. Write to legal@officersaathi.com from your registered phone number or a verified email; we will acknowledge within 24 hours and respond within 30 days, and we may ask you to confirm your identity first.

Grievance Officer. Lucky Rohilla, Vizibly Technologies Private Limited, W 2/6, West Patel Nagar, New Delhi 110008 — legal@officersaathi.com. If you are not satisfied with our response you may approach the Data Protection Board of India.

10Security

All traffic between the app and our servers uses TLS. Data and files are encrypted at rest by our infrastructure provider. Verification documents, selfie frames and DigiLocker data are visible only to our verification team and are kept apart from anything shown to members. Screenshots and recordings are blocked in the app and attempts are recorded. Access to production systems is limited to a small number of named people and protected by multi-factor authentication. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you and the Data Protection Board as the law requires.

11Children

Officer Saathi is for adults. You must be 18 or older, and we enforce this on the date of birth you give and the one DigiLocker confirms. If you believe someone under 18 has an account, email legal@officersaathi.com and we will remove it.

12Changes to this policy

If we make a material change we will tell you in the app and by notification at least 14 days before it takes effect. The date at the top is the current version. Continuing to use the service after that date means you accept the change; if you do not, you can delete your account.

13Contact

• Privacy, data requests, grievances: legal@officersaathi.com
• Safety: safety@officersaathi.com
• Everything else: support@officersaathi.com, or Help & support inside the app