Privacy Policy

Mosaics Labs Private Limited (“Company”) is the operator of Cuper, a personality-first dating application. We are committed to protecting the personal information of our users in accordance with the Information Technology Act, 2000 (“IT Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and applicable provisions of the Digital Personal Data Protection Act, 2023 (“DPDPA”).

By downloading, registering for, or using the Cuper application or website (collectively, the “Platform”), you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please do not use the Platform.

2.1 Information you provide directly:

• Account registration data: name, email address, phone number, date of birth, gender.
• Profile information: personality type (MBTI), attachment style, zodiac sign, bio, preferences.
• Verification data: video or image submitted for face-verification purposes.
• Communications: messages sent through the in-app messaging system, support tickets, and feedback.
• Payment information (processed by our payment service providers; we do not store raw card data).

2.2 Information collected automatically:

• Device information: device model, operating system version, unique device identifiers, mobile network information.
• Log and usage data: IP address, app activity, crash logs, timestamps, pages viewed, features used.
• Location information: city-level approximate location, only when you opt in within the app.
• Cookies and similar tracking technologies on the website.

2.3 Sensitive Personal Data or Information (SPDI):

Under the SPDI Rules, certain information such as biometric data (face-verification video/image), sexual orientation (implied through dating preferences), and health data (if voluntarily provided) is classified as sensitive. We collect such data only with your explicit consent and for specified, lawful purposes.

We may share your information in the following circumstances:

• With other users: Your profile (name, personality details, bio, and preferences) is visible to other users as intended by the matching service.
• With service providers: Trusted vendors who process data on our behalf (cloud hosting, analytics, payment processing, SMS/email delivery) under strict data processing agreements.
• For legal compliance: When required by law, court order, government authority, or to protect the rights, property, or safety of the Company, our users, or others.
• In a corporate transaction: In connection with a merger, acquisition, or sale of all or a portion of our assets, subject to the acquirer maintaining this Privacy Policy.
• With your consent: For any other purpose with your explicit prior consent.

We retain your personal information for as long as your account is active or as needed to provide the services. Upon account deletion, we will delete or anonymise your personal data within 30 days, except:

• Where retention is required by law (e.g., financial records, tax obligations).
• Where data is retained for legitimate safety purposes (e.g., records of users banned for harassment).
• Aggregated, de-identified analytics data which does not identify you personally.

Verification videos/images are deleted within 72 hours of the verification outcome unless a dispute is pending.

We implement reasonable security practices as required under Rule 8 of the SPDI Rules, including:

• TLS encryption for data in transit.
• AES-256 encryption for sensitive data at rest.
• Role-based access controls and principle of least privilege.
• Regular security assessments and penetration testing.
• Incident response procedures with breach notification within 72 hours where required.

No method of electronic storage or transmission is 100% secure. We strive to use commercially acceptable means but cannot guarantee absolute security.

Under applicable Indian law and our policy, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Delete your account and associated personal data via the app settings or by contacting us.
• Withdrawal of consent: Withdraw consent for processing of sensitive personal data at any time (this may affect your ability to use certain features).
• Grievance redressal: Lodge a complaint with our Grievance Officer (details in Section 11).
• Portability: Receive your data in a structured, commonly used format upon request.

To exercise these rights, email info@cuper.me. We will respond within 30 days.

Our website uses cookies and similar technologies to improve your browsing experience, analyse site traffic, and understand where our visitors come from. Cookies we use:

• Essential cookies: Required for core website functionality.
• Analytics cookies: Help us understand how visitors interact with the site (e.g., page views, session duration).
• Preference cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Note that disabling certain cookies may affect site functionality.

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us: