1. About the Data Fiduciary

For the purposes of India's Digital Personal Data Protection Act, 2023, the "Data Fiduciary" for personal data processed through IC is operated under sole proprietor trading under the registered name "Invisible Community."

Udyam Registration Number: UDYAM-BR-24-0054345.

• GST Registration Number: Not applicable at this stage; to be added if and when obtained.
• Corporate Identification Number (CIN) / LLP Identification Number (LLPIN): Not applicable; IC is not currently incorporated as a company or LLP.
• On future incorporation as an LLP or Private Limited Company, the incorporated entity will become the Data Fiduciary for all personal data going forward, and this section will be updated to reflect the new registration details.

2. Scope

This policy applies to the IC mobile app, our website at www.invisiblecommunity.in , and related services that link to this policy. It does not apply to third-party websites, apps, or services that we do not control.

3. Information We Collect — and What We Deliberately Don't

We keep our data collection to the minimum needed to run a safe, location-based community app. We collect:

• Account information: name and email address (profile info).
• Date of birth: collected once, at sign-up, solely to verify you meet our minimum age requirement(18 years age).
• Location information: approximate or precise location, only while you have the app open and permission granted, used to show nearby users and communities.
• Usage and device data: crash logs, device type, operating system, and general analytics needed to keep the app reliable and secure.
• Safety reports: if you report or block another user, we log that action so our moderation process can review it.

What we do not collect or store:

• We do not read the content of your chats or community messages on all platforms. All Community chats are end to end encrypted. Community conversations exist for the life of that 48-hour community and are not retained by us afterward.
• We do not collect sensitive or special-category information — religious or spiritual beliefs, caste, health data, sexual orientation, political opinions, or similar — through onboarding, profile fields, or matching logic.
• We do not build behavioural or advertising profiles from your activity inside communities.

If a future feature would require collecting anything beyond this list, we'll update this policy first and, where the law requires it, ask for your explicit consent before turning it on.

4. How We Collect Information

• Directly from you when you register, complete onboarding, create or join a community, or contact us.
• Automatically when you use the app or website, including through basic analytics.
• From your device when you enable location or notification permissions.
• From authentication providers (Google or Apple), if you choose to sign in with them, subject to their own privacy policies.

5. How We Use Your Information

• Create and manage your account and authenticate you.
• Match you with nearby people and communities based on location.
• Operate core community features such as join requests and the 48-hour community lifecycle.
• Send service-related notifications, including join request updates and community activity.
• Maintain safety, review reports, enforce our community guidelines, and prevent abuse.
• Improve and secure the app and website to enhance security flaws.
• Respond to your questions and provide support at earliest.
• Comply with legal obligations under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), and protect our rights.

6. Safety Is the Design, Not an Afterthought

IC connects you with people nearby, so we've built safety controls directly into the product rather than relying on data retention to police it after the fact:

• Report or block any user, or exit a community, at any time from within the app.
• Reports are reviewed by our moderation team, and we may suspend or remove accounts that violate our community guidelines.
• Because we don't store chat content, moderation relies on in-the-moment reports and account-level signals rather than retrospective message logs — this is a deliberate trade-off in Favor of your privacy.
• We retain report and moderation records only for as long as necessary to investigate, respond to appeals, and meet legal obligations.
• We do not continuously publish your exact real-time location to other users in a way that enables live tracking outside the discovery experience described in the app.

7. Location Information

IC is an Intent Based Hyper-local Community app that helps Travellers, Individuals to share real & meaningful experiences.

Location is used only for discovery and matching while you are active in the app — it is not stored long-term or used to build a history of your movements. You control location permissions through your device settings. If you disable location access, some features may not work as intended.

8. How We Share Information

We do not sell your personal information for money, and we do not share it with third parties for cross-context behavioural advertising. We may share information only in these situations:

• With other users as part of the service, such as your name, general area, and the communities you create or join — never your chat content, since we don't retain it.
• With service providers who help us operate IC (hosting, authentication, analytics, email delivery), under contracts that require them to protect your data and use it only for the purposes we specify.
• When required by law, regulation, legal process, or a lawful government request.
• To protect the safety, rights, or property of IC, our users, or the public.
• In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations.
• With your consent or at your direction.

9. Data Retention

Because we collect a deliberately narrow set of data, our retention periods are short:

• Account and profile information (name, email, DOB): retained while your account is active, and for up to 12 months after deletion to allow recovery, resolve disputes, and meet legal obligations.
• Community membership and chat content: chat content is not retained at all — it exists only for the active life of the community and is not stored by us afterward. Community metadata (that a community existed, its general location and timing) may be kept briefly for safety review.
• Safety, report, and moderation records: retained for up to 3 years, or longer where needed for an ongoing investigation, legal claim, or regulatory requirement.
• Device and usage/analytics data: retained in identifiable form for up to 24 months, after which it is deleted or aggregated so it no longer identifies you.

You may request account deletion at any time by contacting us (Section 15). Some information may remain in encrypted backups for a limited period, or where retention is required by law, until those backups naturally expire.

10. Data Breach Notification

If we become aware of a personal data breach that is likely to result in risk to you, we will assess the incident, take steps to contain and remediate it, and notify the relevant data protection authority (including the Data Protection Board of India, where applicable) as required by law. Where a breach poses a significant risk to you, we will notify affected users without undue delay, describing the nature of the breach, its likely consequences, and the measures taken or proposed.

11. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, or delete your personal information; withdraw consent; object to or restrict certain processing; and receive a copy of your data in a portable format where applicable.

You can update much of your profile information directly in the app. For other requests, contact support@invisiblecommunity.in or our Grievance Team (Section 15). We aim to respond to verified requests within the timelines required by applicable law (ordinarily within 30 days).

12. Children's Privacy

IC is intended for users who are 18 years of age or older. We collect date of birth specifically to enforce this, and we do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will suspend the account and delete associated personal information, except where limited retention is required for safety or legal purposes. If you believe a child has provided us with personal information, contact us at support@invisiblecommunity.in and we will investigate and delete it.

13. Additional Disclosures for Specific Regions

India (Digital Personal Data Protection Act, 2023)

• We act as the "Data Fiduciary" for personal data you provide through IC.
• We rely on your consent, and in limited cases legitimate uses recognized under the DPDP Act (such as safety and fraud prevention), as our basis for processing.
• You may withdraw consent at any time; withdrawal does not affect processing carried out before withdrawal.
• You have the right to access a summary of your personal data and the processing activities we carry out, to correction and erasure, to grievance redressal through our Grievance Team (Section 15), and to nominate another individual to exercise your rights in the event of death or incapacity.

European Economic Area and United Kingdom (GDPR/UK GDPR)

• Our legal bases for processing include your consent, performance of our contract with you (the IC terms), our legitimate interests (such as safety and service improvement), and compliance with legal obligations.
• You have the right to lodge a complaint with your local data protection authority.
• Where we transfer personal data outside the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses.

United States (including California CCPA/CPRA)

• In the past 12 months, we have not sold personal information for monetary consideration, and we do not share personal information with third parties for cross-context behavioural advertising.
• California residents have the right to know, delete, and correct personal information, and the right to non-discrimination for exercising these rights. To submit a request, contact support@invisiblecommunity.in with the subject line "California Privacy Request."
• We do not currently sell or share personal information as defined by the CCPA/CPRA; if this changes, we will provide a "Do Not Sell or Share My Personal Information" mechanism and update this policy in advance.

14. International Users

IC may be used by people in different countries. Your information may be processed in countries other than where you live, including India. Those countries may have different data protection laws than your home country. Where required, we take steps designed to provide appropriate safeguards for cross-border transfers.

15. Grievance Team and Contact Us

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Rules, 2021, we have appointed a Grievance Team to address your questions, complaints, or concerns about this policy or our handling of your personal information.

Grievance Team: Invisible Community

Email: team@invisiblecommunity.in

General support: support@invisiblecommunity.in

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page, update the "Last updated" date, and, where required by law, seek your fresh consent or provide advance notice before the changes take effect. Continued use of IC after changes become effective means you accept the revised policy.