Privacy policy

The short version

• We collect what we need to verify you, show your profile, run plans and keep dates safe.
• We never sell your data.
• Your verification selfie is deleted after 30 days.
• Your precise location is used only for check-in and SOS, and never stored for anything else.
• Analytics never receive your name, phone number, chats, notes, photos or location.
• You can see, correct and delete your data, and complain to our grievance officer.

What we collect

You give us

• Account details: your phone number (for login by one-time code) and date of birth.
• Profile: first name, photos, prompts and answers, area, work or study, gender and who you’d like to meet (age range, distance).
• Verification: a short live selfie video, which we compare with your profile photos. This is biometric data and we ask for your separate consent to process it.
• Plans and messages: plans you post, interests and notes you send, chat messages, feedback after a date, and any reports you make.
• Trusted contacts: names and phone numbers of up to 3 people you choose, used only to send them your plan or an SOS alert.

Created when you use Stub

• Location: your approximate area (rounded to about 100 m) to show nearby plans. Your precise location only at check-in (we keep the distance from the venue, not your coordinates) and while SOS or live sharing is on.
• Reliability: check-ins, no-shows, cancellations and “covered as promised” answers.
• Payments: records of date payments, holds, refunds and subscriptions. Card and UPI details are handled by Razorpay and Google Play; we never see them.
• Device and usage: app version, device type, push notification token, crash reports and pseudonymous usage events.

Why we use it

Your consent

We show you a clear notice when you sign up. We ask separately before using your selfie for verification, your location for check-in, your contacts for trusted contacts, and your number for marketing. You can withdraw any of these in the app under Profile, then Settings. Withdrawing doesn’t affect what we did before, but some features (like posting plans without verification) won’t be available.

Who sees your data

Other members

Verified members in your city see your profile (first name, age, photos, prompts, area, work or study and your reliability record). Your phone number, date of birth and exact location are never shown. Feedback is private; the only thing ever shared is a mutual “yes”.

Venue partners

For plans at their venue, partners see the booking, the time and whether you checked in.

Service providers

We use these companies to run Stub. They may only use your data to provide their service to us.

• Supabase: database, login and file storage, hosted in Mumbai.
• Amazon Web Services (Rekognition): selfie liveness and face matching, in Mumbai.
• Razorpay: date payments, holds, refunds and venue payouts.
• Google Play and RevenueCat: subscriptions.
• Google (Places API): venue details.
• MSG91: login codes and SMS messages.
• Expo and Firebase Cloud Messaging: push notifications.
• Resend: email.
• Sentry: crash reports.
• PostHog: pseudonymous product analytics.

Some of these, such as RevenueCat, Sentry and PostHog, may process data outside India. Where we can, we choose India or EU regions.

The law

We share data with authorities when Indian law requires it, for example a valid court or government order, or to report suspected child sexual abuse material.

How long we keep it

Your rights

Under the DPDP Act you can:

• ask what personal data we hold about you and how we use it;
• correct or update it (most of it you can edit in the app);
• have it erased, by deleting your account;
• withdraw consent you gave;
• nominate someone to exercise these rights if you die or can’t act;
• complain to our grievance officer, and then to the Data Protection Board of India.

Use Profile, then Help in the app, or write to grievance@getstub.in with your registered phone number. We respond within the timelines the DPDP Rules set.

How we protect it

Data is encrypted in transit and at rest. Every table has row-level access rules, so members can only reach what they’re allowed to see. Staff access is limited by role, protected by two-factor login and recorded in an audit log. If a breach affects you, we will tell you and the Data Protection Board without delay, with a detailed report to the Board within 72 hours of becoming aware of it.

Children

Stub is only for adults 18 and over. We check age at sign-up and with the selfie check, and we don’t knowingly process children’s data. If you believe someone under 18 is using Stub, report it in the app or write to grievance@getstub.in.

This website

getstub.in doesn’t ask you to sign in and doesn’t use advertising trackers. Our hosting provider keeps standard server logs to run and secure the site.

The waitlist

To join the waitlist you give us your mobile number and whether you want to host or explore. After joining you can choose to add your first name, email, city and area, to help us decide where to open first. We also keep the time you agreed, the version of this notice you agreed to and which link brought you to the site.

We use these details only to message you once, when Stub opens near you, and to plan which areas open first. We don’t send other messages and we never sell them. To have them deleted at any time, write to grievance@getstub.in from any address and tell us the number you used.

Venue partner interest

If you register a venue, we keep the venue’s name, area and type and your name, mobile number, email and note, and use them only to talk to you about partnering. Deletion works the same way.

Changes and contact

If we change this policy in a way that matters, we’ll tell you in the app before it takes effect.

Grievance officer: Aaryavar Aashirwad, Goodman Tech, Bhopal, Madhya Pradesh. grievance@getstub.in. See how complaints work.