SoulVi by Match Marvel
Data Fiduciary (Controller):
Match Marvel Private Limited
S NO. 36/01/A/B/6, RAM NAGAR, Mhasawad (Nandurbar),
Shahada, Nandurbar- 425432, Maharashtra, India
Website: https://soulvi.matchmarvel.com/
Email: admin@matchmarvel.com
Grievance Officer: See Section 15
SoulVi ("we", "us", "our") operates the SoulVi mobile application. We act as the Data Fiduciary responsible for determining how and why your personal data is processed, in accordance with the DPDP Act 2023, IT Act 2000, SPDI Rules 2011, IT Intermediary Guidelines Rules 2021, and Consumer Protection Act 2019.
This policy applies to all users of the SoulVi mobile application (Android and iOS), all personal data collected through the app, our website, and support channels, and data processed by SoulVi and our authorised data processors.
This policy supplements our Face Verification Privacy Notice, which provides additional detail specific to biometric data processing.
| Category | Data | Sensitive? |
|---|---|---|
| Identity | Display name, nickname | No |
| Contact | Mobile number (mandatory), email (optional) | No |
| Demographics | Date of birth (age verification only) | No |
| Sensitive Identity | Gender identity, sexual orientation, pronouns | SENSITIVE |
| Profile Content | Photos, bio, relationship intent, passions, prompts | No |
| Biometric | Face verification selfie (ephemeral) | SENSITIVE |
| User Content | Chat messages, voice notes, profile likes, blocks | No |
| Category | Data | Purpose |
|---|---|---|
| Location | Coarse location (city/district), precise GPS (consent required) | Distance-based matching |
| Device Info | Device ID, OS version, app version, language | Security, crash reporting |
| Usage Data | Screen views, features used, match activity | Service improvement |
| Network | IP address, connection type | Fraud prevention, security |
We process your data under the following legal bases under the DPDP Act 2023 and applicable privacy laws:
The following are classified as Sensitive Personal Data (SPDI) under Rule 3 of the SPDI Rules:
Additional protections applied to all SPDI:
We share your profile data (photos, nickname, age, bio, pronouns, distance, gender identity) with other users as part of the core service. You control what appears on your profile via Settings.
We NEVER share your:
| Category | Purpose | Data Shared |
|---|---|---|
| Cloud infrastructure (DigitalOcean) | Hosting app, database, object storage | All app data — hosted in India/region-appropriate data centres |
| Push notifications (Google FCM, Apple APNs) | Delivering notifications | Device token, notification content (no SPDI) |
| App stores (Google Play, Apple) | Payment processing | Transaction IDs only |
| SMS OTP | Mobile number verification | Mobile number only |
We may disclose your data where required by a court order, direction from the Government of India, or direction from the Data Protection Board of India. We will notify you of any such request to the extent permitted by law.
Location permission is mandatory for SoulVi to function. We use your GPS location to calculate distance between you and other users and to apply distance filters in your preferences.
We do NOT:
| Data | Retention Period |
|---|---|
| Account and profile data | Until account deletion + 30 days for erasure processing |
| Messages and media | Until conversation deleted or account deleted; safety archive 90 days post-unmatch |
| Interaction history | Passes deleted after 90 days; likes/matches retained for match history |
| Verification records | Until account deletion |
| Biometric consent audit trail | Lifetime of account (legal requirement — DPDP Act) |
| Liveness frame | Zero — never stored |
| Call CDR (metadata only) | 90 days, then deleted |
| Session tokens | Deleted on logout; auto-expired after inactivity |
| Deleted account data | Anonymised within 30 days |
SoulVi's infrastructure is hosted on DigitalOcean, primarily in data centres within or near India. If data is processed or stored outside India, we ensure transfers occur only to countries with adequate data protection and that contractual safeguards are in place with all data processors outside India.
No SPDI is transferred to any third-party processor outside India without your explicit consent.
Under the DPDP Act 2023, you have the following rights. Contact us at admin@matchmarvel.com or through in-app settings to exercise them.
Know what data we hold about you and why. Use Settings → Privacy → Download My Data.
Correct inaccurate or incomplete personal data directly in the app or via email.
Delete your account from Settings → Account → Delete Account.
Withdraw consent for any processing at any time via Settings or email.
Complaint acknowledged within 48 hours, resolved within 30 days.
Nominate someone to exercise your rights in case of death or incapacity.
If unsatisfied with our response, you may complain to the Data Protection Board of India once it becomes operational under the DPDP Act.
We do not knowingly collect, process, or retain personal data from anyone under 18 years of age. All users must pass age-declaration gates and mandatory live selfie face verification before discovering or interacting with other members.
If we discover or suspect that an account belongs to a minor or contains underage content, we immediately terminate the account permanently and preserve necessary records for law enforcement reporting.
Please review our dedicated Child Safety Standards Policy for full prevention, detection, and authority reporting mechanisms.
Emergency Child Protection & Cyber Helplines:
Report suspected security issues to admin@matchmarvel.com.
The SoulVi mobile app does not use browser cookies. We use:
| Technology | Purpose | How to Opt Out |
|---|---|---|
| Device token (FCM/APNs) | Push notifications | Disable notifications in device settings |
| Local app storage | Store session state (login status) | Clear app data in device settings |
We do not use cross-app tracking, advertising IDs, or any technology that tracks you across apps or websites not owned by SoulVi.
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Rule 5(9) of the IT (SPDI) Rules, 2011, and Section 13 of the Digital Personal Data Protection Act, 2023, the details of the designated Grievance Officer are set out below:
Grievance Officer: Puja Koli
Designation: Head of Grievance Redressal & Data Protection
Company: Match Marvel Private Limited
Email: puja.koli@matchmarvel.com
Mobile: 9226827265
Website: https://soulvi.matchmarvel.com/
Acknowledgment: Within 24 to 48 hours
Redressal & Resolution: Within 15 to 30 days from receipt of grievance
If you have any complaints, questions regarding your personal data, requests for data correction/erasure, or concerns regarding violations of our terms and policies, please reach out directly to the Grievance Officer at admin@matchmarvel.com.
If you are not satisfied with the resolution provided by our Grievance Officer, you may escalate your complaint to the Data Protection Board of India or the appropriate appellate authority under applicable law.
When we make material changes, we will update the effective date, send an in-app notification to all users, and for changes to SPDI processing, seek fresh explicit consent before the new processing begins.
We respond to all privacy requests within 72 hours and resolve them within 30 days as required under the DPDP Act.