Compliance
Data Protection & Safety
Effective date: July 21, 2026
LocalMatch by Drole Technologies Pvt Ltd. applies organizational and technical safeguards to protect personal data from unauthorized access, misuse, disclosure, loss, and alteration. This document details our data protection practices and your safety guarantees.
1. Data Collection & Types
| Data Type | Collected? | Encrypted? | Purpose |
|---|---|---|---|
| Phone Number | ✅ YES | ✅ HTTPS | Authentication, User ID |
| Name | ✅ YES | ✅ HTTPS | Profile Display |
| Precise Location | ✅ YES | ✅ HTTPS | Find Nearby Games |
| User IDs | ✅ YES | ✅ HTTPS | Account Management |
| Payment Info | ❌ NO | N/A | No payment processing |
2. Encryption & Security Measures
- ✅ HTTPS/TLS for all data in transit
- ✅ Secure token storage (Expo Secure Store)
- ✅ Database encryption configured
- ✅ Rate limiting on sensitive endpoints
- ✅ Authentication via OTP (WhatsApp)
- ✅ Access controls for authorized personnel only
- ✅ Logging & monitoring for suspicious activity
- ⚠️ No method of transmission is 100% secure
3. Data Retention Practices
| Data Type | Retention Period | User Control |
|---|---|---|
| Phone number | Until account deletion | Settings → Delete Account |
| Location | 90 days (then aggregated) | Automatic |
| Chat messages | 1 year (then deleted) | Can delete anytime |
| Crash logs | 30 days | Automatic |
| Device IDs | 6 months | Automatic |
4. Third-Party Service Providers
✅ We DO NOT sell personal data
✅ We DO NOT share with advertising networks
✅ All third parties are bound by data processing agreements
Approved Service Providers:
- Sentry: Crash logs (anonymized)
- Google Maps: Location services
- Google Cloud: Push notifications
- WhatsApp: Phone verification
5. Your Data Controls
✅ View your data: Available in Settings → Profile
✅ Update your data: Edit profile anytime in Settings
✅ Download your data: Contact support@localmatch.in
✅ Delete your data: Settings → Delete Account (permanent within 7 days)
✅ Disable location tracking: Settings → Location Preferences
✅ Opt out of notifications: Settings → Push Notifications
6. Regulatory Compliance
GDPR (Europe):
We comply with General Data Protection Regulation requirements for European users including right to access, rectification, erasure, and portability.
CCPA (California):
We comply with California Consumer Privacy Act. We do not sell personal information. California residents have rights to know, delete, and opt-out.
India (IT Act 2000, Consumer Protection Act 2019):
All data handling follows Information Technology Act 2000 and Consumer Protection Act 2019 standards.
7. Data Breach & Incident Response
📋 Detection: Continuous monitoring for unauthorized access attempts
🔒 Containment: Immediate action to prevent further exposure
🔍 Investigation: Forensic review of incident scope and impact
📬 Notification: Users notified within required timeframes per law
📊 Documentation: Incident details logged for audit and improvements
Data Protection Requests & Inquiries:
📧 Privacy Officer: legal@localmatch.in
📧 Support: support@localmatch.in
📱 In-App: Settings → Help & Support
Response Time: Within 30 days (or 45 days for complex requests)