Privacy Policy

YOUR PRIVACY MATTERS TO US

This Privacy Policy explains how Stackd Private Limited ("Tithi", "we", "our", "us") collects, uses, stores, shares, and protects your personal data when you use the Tithi mobile application and related services ("Platform").

We are committed to transparency and to processing your data lawfully, fairly, and in a manner that respects your rights. This Policy is written in plain language and is intended to be easy to understand.

This Policy should be read together with our Terms and Conditions of Use and Cookie Policy.

By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

  1. ABOUT US AND THIS POLICY

1.1 Stackd Private Limited is a company incorporated under the Companies Act, 2013, and operates the Tithi matrimonial platform available at www.gettithi.com and as a mobile application.

1.2 For the purposes of applicable data protection laws — including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025 — Stackd Private Limited is the Data Fiduciary (or data controller) in respect of personal data collected and processed through the Platform.

1.3 This Policy applies to all personal data we collect from you when you:

  • Visit our website or download the App;

  • Register for an Account;

  • Create or update your Profile;

  • Use any feature of the Platform, including messaging, matching, and Astrological Compatibility Insights;

  • Contact our support team; or

  • Interact with our communications (e.g., emails, push notifications).

1.4 This Policy applies globally to all Users, wherever located. Where Users are located in specific jurisdictions — such as the European Union/EEA, United Kingdom, California (USA), Canada, or Australia — additional jurisdiction-specific provisions may apply, as described in Section 19.

1.5 We update this Policy from time to time. Please check the "Effective Date" at the top of this document to determine when it was last revised.

  1. PERSONAL DATA WE COLLECT

We collect the following categories of personal data from you:

2.1 Account and Identity Data

  • Full name;

  • Email address;

  • Mobile phone number; and

  • Date of birth; and

2.2 Profile and Preference Data

  • Photographs and profile images;

  • Location (city, state, country);

  • Educational qualifications;

  • Profession and employer details;

  • Lifestyle information (dietary preferences, smoking/drinking habits, etc.);

  • Religious and community background;

  • Physical attributes (height, etc., where voluntarily provided); and

  • Partner preferences and matching criteria.

2.3 Birth Details (Astrological Data)

We collect:

  • Date of birth (full — day, month, year);

  • Time of birth; and

  • Place of birth.

These Birth Details are used to generate personalised Astrological Compatibility Insights.

2.4 Activity and Interaction Data

  • Profile views and browsing activity within the Platform;

  • Match requests sent, received, and accepted;

  • Messages sent and received through the in-Platform messaging feature;

  • Features used and interactions within the App;

  • Reports submitted about other Users; and

  • Responses to notifications.

2.5 Technical and Device Data

  • IP address;

  • Device type, model, and operating system;

  • App version;

  • Unique device identifiers;

  • Log data (including access times, pages viewed, and error reports); and

  • Usage analytics.

2.6 Communications Data

  • Content of messages and communications with our support team;

  • Feedback, survey responses, and reviews you provide; and

  • Records of your consent to these Terms and this Policy.

2.7 We do not intentionally collect special category personal data as defined under GDPR (e.g., health data, genetic data, biometric data used for unique identification). Birth Details provided for astrological computation are not used as biometric identifiers. We are aware of the sensitive nature of matrimonial and family-related data and handle all personal data with commensurate care.

  1. HOW WE COLLECT PERSONAL DATA

We collect personal data through the following means:

  • Directly from you: When you register, create a Profile, update your preferences, send messages, or contact us;

  • Automatically: Through cookies, analytics tools, and device data collected when you use the App or visit our website;

  • From third parties: Such as payment processors (for subscription billing), analytics providers, and, where you connect through social login (e.g., Google or Facebook), through those providers' authorised data sharing;

  • Through the Platform's features: Such as activity logs generated when you view Profiles, send match requests, or interact with other Users; and

  • From DivineAPI: Astrological computation outputs (not raw data stored by DivineAPI about you independently) are returned to us as part of the API service.

  1. LEGAL BASES FOR PROCESSING

4.1 Under the DPDP Act, 2023, we process personal data on the basis of: (a) your consent, obtained prior to processing; or (b) a legitimate use, where you have voluntarily provided data for a specific purpose and have not indicated non-consent.

4.2 For Users located in the European Union, European Economic Area, or United Kingdom, we rely on the following legal bases under GDPR / UK GDPR:

Purpose of Processing

Legal Basis (GDPR)

Account creation and Platform operation

Contract (Art. 6(1)(b))

Astrological Compatibility Insights

Explicit Consent (Art. 6(1)(a) / Art. 9(2)(a))

Personalising match recommendations

Explicit Consent (Art. 6(1)(a) / Art. 9(2)(a))

Safety, fraud prevention, and law compliance

Legal Obligation / Legitimate Interests (Art. 6(1)(c)/(f))

Usage analytics and platform improvement

Legitimate Interests (Art. 6(1)(f))

Marketing and promotional communications

Consent (Art. 6(1)(a))

Processing of sensitive/special category data

Explicit Consent (Art. 9(2)(a))

4.3 Where we rely on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your interests or fundamental rights, particularly given the context of a matrimonial platform and the sensitivity of the data involved.

  1. HOW WE USE YOUR PERSONAL DATA

We use the personal data we collect for the following purposes:

  • To create, verify, and manage your Account;

  • To enable you to create and maintain a Profile visible to other Users;

  • To operate our compatibility matching algorithms and provide match recommendations;

  • To generate Astrological Compatibility Insights using your Birth Details (where enabled);

  • To enable communication between Matched Users through in-Platform messaging;

  • To process subscription payments and manage billing;

  • To provide customer support and respond to your queries and complaints;

  • To send you transactional communications, such as account-related notifications;

  • To send you promotional communications, subject to your consent;

  • To monitor Platform usage and analyse behaviour for the purpose of improving the Platform;

  • To detect and prevent fraud, abuse, unauthorised access, and other harmful conduct;

  • To enforce our Terms and Conditions of Use, including by suspending or terminating non-compliant Accounts;

  • To comply with applicable legal obligations, including data protection laws and court orders; and

  • To respond to requests from competent legal authorities.

We will not use your personal data for any purpose incompatible with the purposes described above without providing you with prior notice and, where required, obtaining your consent.

  1. SHARING YOUR PERSONAL DATA

6.1 We may share your personal data with the following categories of recipients:

(a) Other Platform Users

Your Profile — including photographs, name, location, education, profession, lifestyle preferences, and partner preferences — may be visible to other registered Users of the Platform. You control what information you include in your Profile. Messages you send to other Users will be visible to those Users.

(b) Third-Party Service Providers (Data Processors)

We engage trusted third-party service providers who process data on our behalf and under our instructions. These include:

Category of Provider

Purpose

Cloud Infrastructure

Hosting, storage, and platform infrastructure

DivineAPI

Astrological computation using Birth Details

Analytics Providers

Platform usage analytics and performance monitoring

Push Notification Services

Delivery of in-app and push notifications

Payment Processors

Processing subscription payments

Customer Support Tools

Managing support tickets and communications

Email/SMS Providers

Sending transactional and marketing communications

All third-party processors are bound by data processing agreements ensuring they process your data only on our instructions, maintain appropriate security, and comply with applicable data protection laws.

(c) Legal and Regulatory Authorities

We may disclose your personal data to courts, law enforcement agencies, regulatory authorities, or government bodies where required to do so by applicable law, court order, or to protect the rights, property, or safety of the Company, Users, or the public.

(d) Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity, provided that the acquirer agrees to be bound by terms consistent with this Policy.

(e) With Your Consent

We may share your data with third parties not described above if you provide your explicit consent.

6.2 We do not sell your personal data to third parties for marketing purposes.

  1. ASTROLOGICAL DATA AND DIVINEAPI

7.1 When you enable the Astrological Compatibility Insights feature, your Birth Details (date of birth, time of birth, place of birth) are transmitted securely to DivineAPI, our third-party astrology computation provider, solely for the purpose of generating compatibility insights. This transmission is encrypted and subject to a data processing agreement.

7.2 DivineAPI processes your Birth Details as a data processor acting on our instructions. DivineAPI is contractually restricted from using your Birth Details for any purpose other than providing the requested computation service to Tithi.

7.3 The outputs of astrological computations (compatibility scores, kundali data, etc.) are returned to us and displayed to you on the Platform. These outputs may be stored on our systems to improve Platform features and avoid repeated API calls.

7.4 You may withdraw your consent to the use of your Birth Details for astrological computation at any time by disabling the feature in your Account settings, in which case we will cease transmitting your Birth Details to DivineAPI. Previously generated outputs may be retained for the period described in our Data Retention schedule.

7.5 We draw your attention to the disclaimer in Section 7 of our Terms and Conditions: Astrological Compatibility Insights are for informational purposes only. You should not make important personal decisions based solely on these insights.

  1. INTERNATIONAL DATA TRANSFERS

8.1 The Platform is operated from India. Your personal data is primarily stored and processed in India. However, some of our third-party service providers may be located in, or process data in, countries other than India.

8.2 Where personal data is transferred outside India, we take steps to ensure that such transfers are subject to appropriate safeguards, including:

  • Data processing agreements incorporating appropriate data transfer mechanisms;

  • Standard Contractual Clauses (SCCs) approved by the European Commission, where required for EU/EEA data transfers; and

  • Compliance with applicable cross-border transfer provisions under the DPDP Act and DPDP Rules, 2025.

8.3 For Users in the European Union or EEA: Any transfer of your personal data outside the EEA will be subject to one of the transfer mechanisms recognised under GDPR, including Standard Contractual Clauses or transfers to countries with an EU adequacy decision.

8.4 You may request information about the safeguards applicable to any particular international transfer by contacting us at privacy@gettithi.com.

  1. DATA RETENTION

9.1 We retain your personal data for as long as your Account is active or as necessary to provide you with the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

9.2 Upon Account deletion, we will delete or anonymise your personal data within a reasonable period, except where:

  • We are required to retain data for a longer period by applicable law (e.g., financial records for GST compliance);

  • The data is reasonably necessary to resolve pending disputes or enforce our Terms; or

  • The data is needed to protect against fraud or abuse.

9.3 The following retention periods apply as general guidance:

Category of Data

Retention Period

Account and identity data

Duration of Account + 3 years post-deletion

Profile and preference data

Duration of Account (deleted on account closure)

Birth Details (Astrological)

Duration of Account or withdrawal of consent

Messaging data

Duration of Account + 1 year

Payment and billing records

7 years (as required by Indian law)

Technical/log data

Up to 90 days

Legal hold / compliance data

As required by applicable law or legal process

9.4 Where data is retained beyond the deletion of your Account for legal purposes, it will be stored securely with access restricted to authorised personnel only.

  1. YOUR RIGHTS AS A DATA PRINCIPAL

10.1 Under the DPDP Act, 2023, you have the following rights as a Data Principal:

  • Right to Access: You have the right to obtain confirmation of whether we process your personal data and to access a summary of your personal data and the purposes for which it is processed.

  • Right to Correction and Erasure: You have the right to request correction of inaccurate or incomplete personal data, and to request erasure of personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent.

  • Right to Grievance Redressal: You have the right to raise a grievance with our Grievance Officer (see Section 20) regarding any processing of your personal data.

  • Right to Nominate: You have the right to nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.

  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.2 For Users located in the European Union, EEA, or UK, you additionally have the following rights under GDPR / UK GDPR:

  • Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances.

  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

  • Right to Object: You have the right to object to processing based on legitimate interests, and to direct marketing.

  • Right to Not Be Subject to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

10.3 To exercise any of these rights, please submit a request to privacy@gettithi.com. We will respond within a reasonable timeframe and in any event within the timescales required by applicable law. We may ask you to verify your identity before fulfilling your request.

10.4 Exercising your rights is free of charge. We reserve the right to charge a reasonable fee or decline to act on requests that are manifestly unfounded or excessive.

  1. CONSENT AND WITHDRAWAL

11.1 Where we rely on your consent as the legal basis for processing, we will obtain your consent through a clear and affirmative act (e.g., checking a box, tapping a consent button) before processing your data. Consent will be specific to each processing purpose.

11.2 You have the absolute right to withdraw your consent at any time. Withdrawal is as easy as the giving of consent. You may withdraw consent by:

  • Adjusting your settings within the Account Settings menu;

  • Disabling specific features (such as Astrological Compatibility Insights); or

  • Contacting us at privacy@gettithi.com.

11.3 Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. However, following withdrawal, we will cease the relevant processing and, where applicable, delete or anonymise the related data within a reasonable period.

11.4 Please note that withdrawal of consent for certain core data processing activities (such as account operation) may result in the inability to access certain Services or require Account deletion.

  1. SECURITY MEASURES

12.1 We implement technical and organisational security measures that are appropriate to the nature and sensitivity of the personal data we process. These measures include:

  • Encryption of data in transit using TLS/SSL protocols;

  • Encryption of sensitive data fields at rest;

  • Access controls restricting access to personal data to authorised personnel only, on a need-to-know basis;

  • Regular security assessments and vulnerability testing;

  • Employee training on data protection and information security;

  • Incident response procedures for detecting, reporting, and responding to data breaches; and

  • Contractual security requirements imposed on all third-party processors.

12.2 While we take data security seriously, no system is completely secure. You should take steps to protect your own Account, including by using a strong, unique password and enabling two-factor authentication if available. If you believe your Account has been compromised, please contact us immediately at support@gettithi.com.

12.3 Given the sensitive nature of matrimonial data, we apply heightened care to the storage of Profile information, Birth Details, and communication data.

  1. DATA BREACH NOTIFICATION

13.1 In the event of a personal data breach that is likely to result in a risk to your rights or interests, the Company will:

  • Notify the Data Protection Board of India (where required under the DPDP Act and DPDP Rules, 2025) without undue delay;

  • Notify affected Users where required by applicable law or where the breach poses a high risk to their rights and freedoms; and

  • Take immediate steps to contain, remediate, and prevent recurrence of the breach.

13.2 Breach notification will be made in a clear and plain language notice that describes the nature of the breach, the categories of data affected, likely consequences, and steps taken to address it.

13.3 For EU/EEA Users: In the event of a breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay in accordance with Article 34 of GDPR.

  1. CHILDREN'S PRIVACY

14.1 The Platform is strictly intended for adults who are 18 years of age or older and are legally eligible to marry in their jurisdiction. We do not knowingly collect personal data from persons under 18.

14.2 If we become aware that we have inadvertently collected personal data from a person under 18, we will take immediate steps to delete that data and close the associated Account.

14.3 If you are a parent or legal guardian and believe that your child has created an Account on the Platform, please contact us at support@gettithi.com or privacy@gettithi.com, and we will take prompt action.

14.4 Under the DPDP Act, 2023, processing of personal data of children (persons under 18) requires verifiable parental or guardian consent. As the Platform is not designed for or directed at persons under 18, we implement safeguards to prevent minors from registering.

  1. COOKIES AND TRACKING TECHNOLOGIES

15.1 We use cookies and similar tracking technologies (such as pixel tags, web beacons, and SDKs) on our website and within the App for the following purposes:

  • Strictly necessary cookies: Required for the Platform to function (e.g., maintaining your session);

  • Performance and analytics cookies: To collect information about how you use the Platform, helping us improve it;

  • Functional cookies: To remember your preferences and settings; and

  • Targeting/marketing cookies: To deliver relevant communications (only with your consent).

15.2 Please refer to our Cookie Policy for a full description of the cookies and tracking technologies we use, your choices, and how to manage your preferences.

15.3 You may withdraw or adjust your cookie consent at any time through your browser settings, the in-app privacy settings, or by contacting us.

  1. MARKETING COMMUNICATIONS

16.1 With your consent, we may send you promotional communications by email, SMS, or push notification regarding new features, special offers, or other information about the Platform.

16.2 You may opt out of receiving marketing communications at any time by:

  • Clicking the "unsubscribe" link in any marketing email;

  • Adjusting notification preferences in the Account Settings; or

  • Contacting us at support@gettithi.com.

16.3 Opting out of marketing communications will not affect transactional or service-related communications, which we may still send as necessary to manage your Account and the Services.

16.4 We do not share your email address or contact details with third-party marketers.

  1. PROFILE VISIBILITY AND USER CONTROL

17.1 Your Profile is visible to other registered Users of the Platform. We provide the following controls to help you manage your Profile visibility:

  • Profile Active/Inactive toggle: You may set your Profile to inactive if you wish to stop appearing in search results or match recommendations temporarily;

  • Photo visibility: You may control who can see your photos through in-app privacy settings;

  • Profile completeness: You choose which optional fields to complete; and

  • Block and Report: You may block specific Users, preventing them from viewing your Profile or contacting you.

17.2 Please be aware that even with these controls, other Users who viewed your Profile before any privacy setting change may retain memory of the information you shared. The Company cannot guarantee that personal data shared with other Users will not be retained by them outside the Platform.

17.3 We encourage you to exercise care in the information you choose to include in your public Profile and in the information you share with other Users through the Platform's messaging features.

  1. AUTOMATED DECISION-MAKING AND PROFILING

18.1 Our compatibility matching algorithms use your Profile information, preferences, and — where enabled — Astrological Compatibility data to generate match recommendations. This constitutes automated processing, including profiling.

18.2 These automated processes affect the matches and profiles shown to you. They do not, however, produce legal effects or other similarly significant effects on your rights or access to services outside the Platform.

18.3 For EU/EEA Users: To the extent our automated decision-making produces decisions that have legal or similarly significant effects, you have the right under Article 22 of GDPR to: (a) request human review of such decisions; (b) express your point of view; and (c) contest the decision. Please contact privacy@gettithi.com to exercise this right.

18.4 You may adjust your matching preferences at any time through the Account Settings, which will influence the automated matching process.

  1. JURISDICTION-SPECIFIC PROVISIONS

19.1 India — DPDP Act, 2023

The Company is incorporated in India and processes personal data in compliance with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. In particular:

  • We obtain free, specific, informed, unconditional, and unambiguous consent before processing personal data;

  • We publish a clear Privacy Notice describing the data collected, purposes of processing, and how to exercise rights;

  • We maintain a Grievance Officer and grievance redressal mechanism (Section 20);

  • We will notify the Data Protection Board of India and affected Users of personal data breaches as required; and

  • We provide Users with the ability to withdraw consent and request erasure as described in Sections 10 and 11.

19.2 European Union / EEA — GDPR

For Users located in the EU or EEA, we process personal data in compliance with Regulation (EU) 2016/679 (GDPR). In addition to the rights described in Section 10, EU/EEA Users may:

  • Lodge a complaint with the supervisory authority in their EU Member State of habitual residence, place of work, or place of the alleged infringement; and

  • Request information about our Data Protection Officer or representative (where applicable) at privacy@gettithi.com.

19.3 United Kingdom — UK GDPR

For Users located in the UK, we process personal data in compliance with the UK GDPR and the Data Protection Act, 2018. UK Users may lodge a complaint with the Information Commissioner's Office (ICO).

19.4 California, USA — CCPA/CPRA

For California residents, we do not sell personal information as defined under the California Consumer Privacy Act (CCPA). California residents may submit requests to know, delete, or opt out by contacting privacy@gettithi.com.

19.5 Other Jurisdictions

Users in other jurisdictions with applicable data protection laws (including Canada, Australia, Brazil, etc.) may contact us at privacy@gettithi.com to exercise rights available under their local law. We will make reasonable efforts to comply with applicable requirements.

  1. CONTACT US, GRIEVANCE OFFICER, AND COMPLAINTS

20.1 We take privacy complaints seriously. If you have any question, concern, or complaint about this Privacy Policy or the way we handle your personal data, please contact us using the details below.

Data Privacy Contact Details — Stackd Private Limited (TITHI)

Support: support@gettithi.com

Website: www.gettithi.com

Postal Address: A602, Milloni, Sec-27, Navi Mumbai, India, 400706

Grievance Officer Name: Milan Sen

Grievance Officer Hours: Monday–Friday, 10:00 AM – 6:00 PM IST

20.2 Response Timelines. We will acknowledge your privacy request or complaint within 48 hours and will seek to resolve it within 30 days. Complex matters may take longer, in which case we will keep you informed.

20.3 Data Protection Board of India. If your complaint is not resolved to your satisfaction, you have the right to file a complaint with the Data Protection Board of India established under the DPDP Act, 2023.

20.4 EU/EEA Users. You may also raise a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

20.5 UK Users. You may raise a complaint with the Information Commissioner's Office at: https://ico.org.uk

Document Information

  • Company: Stackd Private Limited (Operating as TITHI)

  • Website: gettithi.com

  • Document: Privacy Policy

  • Version: 1.0

  • Effective Date: March 9, 2026

  • Jurisdiction: Republic of India (with global provisions)

Governing Laws: DPDP Act 2023 | DPDP Rules 2025 | IT Act 2000 | GDPR (EU/UK) | CCPA