Privacy policy
Last updated: 1 November 2026
The short version
- maybe is for people aged 18 and over. We check your date of birth when you sign up.
- We collect only what the app needs to work and to keep people safe.
- Other people can’t see your original photos until you both say maybe. Before that they see a blurred copy.
- Your “not now” is private. Nobody is told.
- We don’t run ads, we don’t sell your data, and we don’t share it with data brokers.
- You can delete your account in the app. Deleting means your data is erased.
- Questions or complaints: chiragstudios2727@gmail.com
- 1. Who we are
- 2. What we collect
- 3. Why we use it
- 4. What other people see
- 5. Who we share it with
- 6. Where it is stored
- 7. How long we keep it
- 8. Your rights and choices
- 9. Age limit
- 10. How we protect it
- 11. Cookies and similar tools
- 12. Changes to this policy
- 13. Contact and grievances
1. Who we are
maybe. (“maybe”, “we”, “us”) is a dating app that is currently in a closed test and is planned to launch in Mumbai, India. It is operated by Chirag Rai, trading as Chirag Studios, based in Mumbai, Maharashtra, India. For the purposes of Indian data protection law, we are the “data fiduciary” for the personal data described here.
This policy covers our website at trymaybe.vercel.app and the maybe app at trymaybe.vercel.app/app/. It should be read together with our Terms of service.
2. What we collect
| Type | What |
|---|---|
| Account | Your name, email address and Google account ID, from Google sign-in. We never see your Google password. |
| Your profile | First name, date of birth (to check you are 18+ and to show your age), gender, who you want to meet, city and neighbourhood, up to 3 photos, and your answers to 3 prompts. |
| What you do in the app | The five profiles shown to you each day, your decisions (“maybe” or “not now”), your matches, first hellos and chat messages, answers to any quiz you play with a match, and any Safe Meet plan you create (date, time, place and the link you share). |
| Safety | Reports and blocks you send or receive, and a verification selfie if you choose to verify. Our team reviews these. |
| Consent records | When you accepted our Terms and this policy, and which version. |
| Access requests | Your email address, if you ask to be let into the closed test. |
| Technical | IP address, device and browser type, and error and security logs. We use these to keep the service working and secure. |
We don’t knowingly ask for sensitive details such as health, religion, caste or financial information. Please don’t put them in your profile or prompts. Gender and who you want to meet are needed to match people, and we treat them with extra care.
3. Why we use it
- To create your account and profile, and to check you are old enough.
- To choose your daily five, record your decisions, create matches and run chat.
- To keep people safe: reviewing reports, verifying selfies, stopping fake accounts, spam and misuse, and enforcing our rules.
- To secure and improve the service, and to fix errors.
- To contact you about your account, or about changes to the service or these documents.
- To meet our legal duties and respond to valid legal requests.
We use your personal data with your consent, which you give when you sign up. Where the law allows or requires it, we also use it to meet legal duties. You can withdraw your consent at any time by deleting your account (see section 8). We do not use your data for advertising and we do not use it to train AI models.
4. What other people see
| Who | What they can see |
|---|---|
| People in your daily deck | Your first name, age, neighbourhood, a distance band such as “nearby” or “within 5 km”, your 3 prompts, and blurred photos. |
| A match (you both said maybe) | All of the above, plus your original photos and your messages. |
| Nobody | Your email address, date of birth, exact location, and your “not now” decisions. |
Anyone who can see something you share can screenshot it. We can’t stop that, so only share what you are comfortable with. Our team can see reported content, and may look at other information where that is needed to keep people safe or to run the service.
5. Who we share it with
We don’t sell or rent your personal data. We share it only in these cases:
- Service providers that help us run maybe. They process data only on our instructions. At the time of writing they are: Supabase (database, sign-in, photo storage), Google (sign-in), and Vercel (hosting of the website and app).
- Authorities, where the law requires it or a valid legal request is made, or where we reasonably believe it is needed to prevent serious harm to someone.
- Other users, only what section 4 describes.
- A successor, if the service is ever sold or merged. We would tell you first and the same protections would continue.
6. Where it is stored
Our providers may store and process your data on servers in India or in other countries. Wherever it is stored, we require appropriate protections, and we follow the rules India sets on transfers of personal data outside India.
7. How long we keep it
| Data | How long |
|---|---|
| Profile, photos, prompts, decisions, matches and messages | While your account exists. When you delete your account they are erased from our live systems straight away. If you delete your account, your messages are removed for the other person too. |
| Backup or export copies | Deleted within 30 days of your deletion request. |
| Reports and safety records | Up to 180 days after the report is resolved, or longer if the law requires it. If we ban an account, we may keep the email and the reason for as long as needed so the person can’t come back and harm others. |
| Access requests | Until you are let in or ask us to delete the request, and no longer than 12 months. |
| Technical and security logs | Up to 90 days. |
| Consent records | For as long as needed to show that we asked for your consent. |
8. Your rights and choices
Under India’s Digital Personal Data Protection Act, 2023, you have the right to:
- get a summary of the personal data we hold about you and who we have shared it with;
- correct or update your data (you can edit most of it in Settings);
- ask us to erase your data (use “delete my account” in Settings);
- withdraw your consent at any time. Withdrawing consent means we can no longer provide the service to you;
- complain to us and have it resolved (see section 13);
- nominate another person to exercise your rights if you die or can’t act for yourself.
To use any of these, use the settings in the app or email us. We will reply within 15 days. If you are not happy with our answer, you can complain to the Data Protection Board of India.
9. Age limit
maybe is only for people aged 18 and over. We ask for your date of birth to check this. We do not knowingly keep data about anyone under 18. If we find that an account belongs to someone under 18, we will delete it.
10. How we protect it
- Everything travels over encrypted connections (HTTPS).
- Access rules in our database mean people can only read what the app is designed to show them.
- Original photos are private. Other people get only a blurred copy until there is a mutual maybe. Location details in photos are removed when you upload.
- Only a few people on our team can reach personal data, and administrator actions are logged.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires. We do not claim that messages are end-to-end encrypted.
11. Cookies and similar tools
The app keeps small pieces of data in your browser (local storage and a service worker) to keep you signed in, remember your settings and load faster. We don’t use advertising or analytics cookies. Our website loads fonts from Google Fonts, which means Google receives your IP address when the page loads.
12. Changes to this policy
If we change this policy in a way that matters, we will update the date above and tell you in the app. We will also remind you of our rules, this policy and our Terms at least once a year.
13. Contact and grievances
Grievance Officer: Chirag Rai
Email: chiragstudios2727@gmail.com
Place: Mumbai, Maharashtra, India
We acknowledge every complaint within 24 hours and resolve it within 15 days. Complaints about content that is intimate or sexual and shared without the person’s consent are acted on within 24 hours. Some other serious content complaints are dealt with within 72 hours.