Privacy Policy

This Privacy Policy explains what Shookup (operated by ZapperMash) collects, why, and what you can do about it. We take a data-minimisation approach — we ask for as little as possible and protect what we hold. This policy is aligned with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. What we collect

• Phone number — to verify you and to contact you about the service.
• Verification selfie (liveness) — used only to confirm you are a real, live person and that your face is unique on Shookup.
• Profile details & photos — the things you choose to share with other members.
• Age-check result — a simple yes/no that you are 18+.
• Device & usage data — basic technical information (like device type and app activity) to keep the service secure and detect fraud.

2. What we do NOT store

• Your Aadhaar number. If you use Aadhaar-based age verification, we receive only confirmation that you are an adult — never the number itself.
• Your verification selfie is not shown on your profile, not sold, and not shared for advertising. It is used for verification and anti-fraud only.

3. Why we use your data (and our legal basis)

Under the DPDP Act, we process your personal data based on the consent you give when you sign up, for these purposes:

• to verify that you are a real, adult human;
• to detect and remove bots, fakes, and scammers;
• to operate matching, messaging, and your profile;
• to keep the community safe and respond to reports;
• to meet our legal obligations.

4. Who we share it with

We do not sell your personal data. We share it only with trusted service providers who help us run Shookup — for example our database/hosting, SMS, identity-verification, and anti-bot providers — under appropriate safeguards, and only as needed. We may also disclose data where required by Indian law or a valid legal request.

5. Where your data is stored

Your data may be processed on servers operated by our providers. Where data is transferred or stored outside India, we do so in line with the DPDP Act and applicable Indian regulations.

6. How long we keep it

We keep your data only while your account is active, or as long as needed for safety, fraud-prevention, and legal purposes. When it is no longer needed — or when you delete your account — we delete or anonymise it, except where we must retain something to comply with the law.

7. How we protect it

We use reasonable security measures including encryption in transit, access controls, rate limiting, and bot protection. No system is 100% secure, but we work hard to protect your data and will notify you and the Data Protection Board of India of a significant breach as required.

8. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you;
• Correct or update inaccurate or incomplete data;
• Erase your data and delete your account;
• Withdraw consent at any time;
• Nominate someone to exercise your rights if you are unable to;
• Grievance redressal — raise a complaint and have it addressed.

To exercise any of these, email privacy@zappermash.com and we'll help you.

9. Cookies & local storage

We use minimal local storage in your browser — for example, to remember that you confirmed you are 18+ so we don't ask every visit. We do not use this for advertising tracking.

10. Children

Shookup is strictly for adults (18+). We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.

11. Grievance & Data Protection contact

For any privacy request or complaint, contact our Grievance Officer (as required by the IT Rules, 2021 and the DPDP Act):

• Grievance Officer: [Name to be appointed]
• Email: privacy@zappermash.com

We aim to acknowledge requests within 24 hours and resolve them within 15 days.

12. Changes to this policy

We may update this policy as the service or the law evolves. We'll flag important changes in the app. The "last updated" date at the top always reflects the current version.