Privacy Policy — Relay

This Policy applies to anyone who downloads, registers on, or uses the Relay App to find activity partners, join community sessions, or book venues. The App is intended for people aged 18 and over — see Section 10.

2.1 Information You Provide to Us

2.2 Information Collected Automatically

• Device information: device model, operating system, unique device identifiers, IP address, mobile network information.
• Usage data: app screens visited, features used, session duration, crash logs, and diagnostic data (via Sentry).
• Location data: with your permission, we use your approximate or precise location to suggest venues near you. You can disable location permissions at any time via device settings, though this limits that feature.
• Camera & photo library access: used only when you choose to take or upload a profile photo, or during the onboarding verification step.
• Push notification token: used to send you alerts about matches, messages, and booking updates. You can turn these off in your device settings.

2.3 Information from Third Parties

We may receive information about you from:

• Our payment processor, Razorpay (transaction status, payment success/failure);
• Our OTP provider, MSG91 (confirmation that your phone number was verified);
• Google/Firebase and Apple (push notification delivery, crash reporting, app store install attribution).

We use the information we collect to:

1. Create and manage your account, and confirm you meet our minimum age requirement;
2. Show your profile to other users as part of matching, and show you theirs;
3. Verify you're a real person during onboarding;
4. Enable chat between matched users and event groups;
5. Process bookings and payments for venues and sessions, and facilitate refunds;
6. Send match, message, and booking notifications;
7. Review reports of abuse, investigate violations of our Terms, and keep the platform safe — including blocking a user who reports or is reported;
8. Analyse app usage to improve features, fix bugs, and enhance performance;
9. Comply with applicable legal and regulatory obligations;
10. Send promotional or service communications, with an option to opt out at any time.

Where applicable, we process your personal data on the basis of: (a) your consent; (b) performance of these Terms of Service; (c) compliance with legal obligations; and (d) our legitimate interest in operating and securing the platform, including user safety.

We do not sell your personal information. We may share information with:

• Other Relay users — your profile (name, photos, bio, activities, and, once matched, your availability/booking details) is shown to other users as part of how matching and session planning works;
• Venue partners, limited to what's needed to fulfil a booking (who's attending, when, and the amount paid);
• Razorpay, our payment processor, to process payments and refunds — governed by its own privacy policy;
• MSG91, to deliver the OTP that verifies your phone number;
• Cloud hosting and infrastructure providers (including Supabase) who store data on our behalf under contractual confidentiality obligations;
• Analytics and crash-reporting providers (Sentry, Firebase) to help us monitor and improve app performance;
• Professional advisors (auditors, legal counsel) where necessary;
• Law enforcement or regulators, if required by law, court order, or government request, or to protect the rights, property, or safety of Relay, our users, or the public;
• Successors, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

The App integrates the following categories of third-party services:

• Supabase — authentication, database, file storage, and real-time chat delivery
• Razorpay — payment processing
• MSG91 — OTP delivery for phone verification
• Firebase Cloud Messaging (Google) — push notifications
• Sentry — crash reporting and performance monitoring

Each provider processes data under its own privacy policy; we require these providers to maintain appropriate safeguards.

We retain your information for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, accounting, or dispute-resolution requirements (typically up to [7 years] for payment/transaction records, in line with statutory requirements under Indian law). You may request earlier deletion of non-statutory data as described in Section 9 and our account deletion page.

We implement reasonable technical and organisational safeguards — including encryption in transit, access controls, and secure hosting — to protect your data from unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Delete your account and data yourself, any time, directly in the app (Profile → Legal & account → Delete my account), or see our dedicated account deletion page for what’s deleted versus retained;
• Withdraw consent for optional processing (e.g., marketing communications) at any time;
• Lodge a grievance with our Grievance Officer (Section 12) or, where applicable, with the Data Protection Board of India.

To exercise these rights, contact us at [email protected]. We will respond within the timelines prescribed by applicable law.

Relay is for adults only — you must be 18 or older to create an account, and the App checks your date of birth during onboarding and blocks anyone who doesn’t meet that requirement. We do not knowingly collect data from children. If we become aware that a minor has provided us personal data, we will delete it promptly.

Our servers/service providers may be located outside India. Where data is transferred internationally, we ensure such transfers are subject to appropriate safeguards consistent with applicable Indian data protection law.

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023, the Grievance Officer for Relay is:

Name: Designated Grievance Officer, ASTRAION CORE LLP
Email: [email protected]
Address: A-422, Plot No 119, Icpo, Ichr Society, Sector-35, Noida, Uttar Pradesh 201301, India
Response Timeline: We will acknowledge grievances within 24 hours and resolve them within 15 days (or as prescribed by applicable law).

You can manage or revoke these permissions anytime via your device Settings.

If another user makes you uncomfortable or breaks our rules, you can report or block them directly from their profile or a chat — see Settings → Blocked Users. Reports are reviewed by our team; we don’t publish who reported whom.

We may update this Privacy Policy from time to time. Material changes will be notified via the app or email. Continued use of the App after changes take effect constitutes acceptance of the revised Policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

ASTRAION CORE LLP
Email: [email protected]
Address: A-422, Plot No 119, Icpo, Ichr Society, Sector-35, Noida, Uttar Pradesh 201301, India