1. Who we are
Adda (the "app") is operated by Shlok Singh, trading as FourthState ("we", "us"), Mumbai, Maharashtra, India. We are the Data Fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Contact: support@fourthstate.co.in.
2. Adults only
Adda is only for people aged 18 or older. We don't knowingly collect data from anyone under 18. If you believe a minor has an account, email us and we will delete it.
3. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address; a password only if you choose password login (stored hashed, never readable by us) | To create your account and sign you in with a one-time code |
| Profile | First name, age, gender, job or college, bio, city, budget, what you're looking for, answers to the 7 lifestyle questions, profile photos | To show your profile to others and calculate compatibility |
| Rooms you post | Title, city, area/locality, rent, deposit, room details, amenities, description, room photos | To show your room to people looking for one |
| Activity | Likes and passes, matches, messages, blocks, reports, notification settings | To run matching and chat, keep people safe, and respect your choices |
| Device | A push notification token and device platform (Android/iOS), only if you allow notifications | To send you match, message and like notifications |
| Technical logs | IP address, request times and error logs kept by our hosting providers | Security, abuse prevention and fixing problems |
We do not collect your precise location, contacts, call logs or advertising ID, and the app contains no advertising or third-party analytics SDKs. Saved rooms and your chosen city are stored only on your device.
4. Who can see what
- Other signed-in Adda users can see your profile, photos, compatibility score and any rooms you post, unless you have blocked each other.
- People you like can see that you liked them (in "Likes you"). Passes are never shown to anyone.
- Messages are visible only to you and the person you matched with. They disappear for both of you if either person unmatches or blocks.
- Reports are private: the person you report is never told who reported them. We review reports to keep Adda safe.
5. Service providers (Data Processors)
We use trusted providers who process data only to run Adda for us. Your data may be stored or processed outside India by them.
- Supabase: database, sign-in and photo storage.
- Brevo: sends sign-in code emails.
- Expo (650 Industries), Google Firebase Cloud Messaging and Apple Push Notification service: deliver push notifications.
- Namecheap: our domain and support email.
We do not sell, rent or trade your personal data, and we don't share it with advertisers. We may disclose data if required by Indian law or a valid order from a court or government authority, or to protect someone's safety.
6. Legal basis
We process your data with your consent, given when you create an account and agree to this policy, and for legitimate uses permitted by the DPDP Act (such as complying with law and preventing fraud). You can withdraw consent at any time by deleting your account; this does not affect processing that happened before.
7. How long we keep it
- We keep your data while your account exists.
- When you delete your account, we immediately delete your profile, photos, rooms, likes, matches, messages, blocks and notification tokens.
- Reports about a deleted account are kept, without the account itself, so people can't escape safety reports by deleting. Reports you filed are deleted with your account.
- Copies may remain in our providers' encrypted backups and logs for a limited period (typically up to 30 days) before they are overwritten.
8. Your rights
Under the DPDP Act you can:
- Access a summary of your data and how it is used: email us.
- Correct your data: edit your profile in the app, or email us.
- Erase your data: delete your account in the app (Me → Delete account), or follow these steps.
- Withdraw consent, nominate someone to exercise your rights in case of death or incapacity, and raise a grievance (see below).
9. Grievance officer
Shlok Singh, FourthState · support@fourthstate.co.in. We aim to respond within 30 days. If you're not satisfied with our response, you may complain to the Data Protection Board of India.
10. Security
Data is encrypted in transit (HTTPS), access is restricted by row-level security so users can only read what they're allowed to, and photos can only be changed by their owner. No system is perfectly secure; if we learn of a breach affecting you, we will notify you and the Data Protection Board as the law requires.
11. Changes
We'll update the date above when this policy changes, and tell you in the app about important changes.
Questions? support@fourthstate.co.in