This policy explains how Cognitive Squad Pvt. Ltd. ("we", "us") handles personal data in the Know My NBR app for iOS and Android and on https://www.knowmynbr.com (together, the "Service"). It applies to everyone who uses the Service, wherever they are. We comply with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules, and we give the rights described below to all members.
1. Who is responsible
The data fiduciary (controller) is Cognitive Squad Pvt. Ltd., G M Road, Patna - 800004, Bihar, India. Questions, requests and complaints: contact@cognitivesquad.com.
2. Data we collect
You give us:
- Account details: email address, or your Apple or Google sign-in identifier, and your password if you sign up with email (stored only as a secure hash by Google Firebase Authentication).
- Profile: display name, username, date of birth (to confirm you are 18 or older), gender, bio, interests, languages and, only if you choose to add it, your sexual orientation and what you are looking for.
- Photos, videos, voice notes, posts, polls, stories, comments, albums and other content you upload.
- Messages you send in one-to-one chats and Circles, including view-once photos.
- Phone number, only if you choose to verify it. It is never shown to other members.
- Face check photos, only if you ask for the verified badge (a selfie plus gesture photos).
- Reports, support tickets and anything else you send us.
Collected when you use the Service:
- Approximate location: with your permission, the app reads your device location to show people and posts nearby. We store a coarse area (about 1 km) and your city, never your exact position, and other members see only a distance band or your city.
- Activity: profile views, follows, likes, connect requests, blocks and how you use features, so the app can work and stay safe.
- Purchases: which points pack or KnowMyNBR Plus plan you bought, the store transaction ID and its status. Card and bank details are handled only by Apple or Google; we never see them.
- Device and technical data: device model, operating system, app version, language, push notification token, IP address, crash and diagnostic logs.
3. How we use it
- To create and run your account and show your profile, posts and stories to the people you choose.
- To show people, posts and Circles near you and to send connect requests, chats and notifications.
- To process points purchases and Plus subscriptions and keep your wallet balance correct.
- To verify members (face check and optional phone check) and to prevent fake, duplicate and banned accounts.
- To keep the community safe: automatic screening of text and images, review of reports, enforcing our Terms and meeting legal duties, including reporting child sexual abuse material to the authorities.
- To answer support requests and send service messages (for example about your account or a purchase).
- To fix bugs, measure performance and improve the Service.
We do not sell your personal data, we do not show third-party ads, and we do not track you across other companies' apps or websites.
4. Legal bases
We process data with your consent (for example location, the optional phone check, face check and sexual orientation, each of which you can withdraw at any time in the app), to provide the Service you asked for, for legitimate uses allowed by law such as safety and fraud prevention, and to comply with legal obligations.
5. Who we share it with
- Other members: what you choose to show on your profile and in posts. Messages go only to the people in that chat.
- Google Cloud / Firebase (hosting, database, file storage, authentication, phone verification and push notifications).
- OpenAI, to screen text and images for harmful content.
- Apple and Google, for Sign in with Apple, Google sign-in, in-app purchases and subscriptions.
- Authorities, when the law requires it, to protect someone's safety, or to report child sexual exploitation.
- A buyer or successor, if our business is merged or sold, under this same policy.
Our providers process data only on our instructions. Data may be stored and processed outside your country, including in India and the United States, with the safeguards the law requires.
6. How long we keep it
- Your account data is kept while your account is open.
- When you delete your account, your profile is hidden at once and your data is permanently deleted after 30 days (you can cancel by signing in during those 30 days). Backups roll over within a further 30 days.
- Stories disappear after 24 hours.
- Data export files are deleted one hour after they are created.
- Purchase and transaction records are kept for up to 8 years as Indian tax and accounting law requires.
- Records of reports and enforcement (for example a ban) may be kept as long as needed to protect the community and meet legal duties.
Details: Delete your account.
7. Your choices and rights
- See and update your profile at any time in the app.
- Privacy centre: hide your distance or online status, choose who can message or comment, turn on app lock, and block people.
- Download a copy of your data: Me → Settings → Download my data.
- Delete your account: Me → Settings → Delete account.
- Withdraw consent for location, notifications or camera in your device settings, and remove your orientation at any time.
- Ask us to access, correct or erase your data, or nominate someone to act for you, by emailing us. We answer within 30 days.
8. Security
Data is encrypted in transit (TLS) and at rest. Your verified phone number is stored encrypted, and only a one-way hash is used to stop duplicate accounts. Staff access is limited to people who need it. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.
9. Children
The Service is only for people aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn that a member is under 18 we close the account and delete their data. See our Child Safety Standards.
10. Changes
We will post any changes on this page and update the date above. If a change is significant we will also tell you in the app before it takes effect.
11. Grievance Officer
Under the IT Rules, 2021 and the DPDP Act, 2023 you can contact our Grievance Officer at contact@cognitivesquad.com, Cognitive Squad Pvt. Ltd., G M Road, Patna - 800004, Bihar, India. We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied, you may complain to the Data Protection Board of India.