Privacy Policy

Effective: 28 April 2026

ApliNati ("we", "us", "our") respects your privacy. This Policy explains what information we collect when you use the ApliNati mobile application and website ("Service"), how we use it, and the choices you have.

1. Who this applies to

The Service is intended for users aged 13 and above. Users under 18 should use the Service only with the involvement of a parent or guardian. By using ApliNati, you confirm you meet this age requirement.

2. Information we collect

2.1 You provide directly

• Account: mobile number (used for OTP login) and password.
• Profile: full name, display name, gender, date of birth, marital status, native village, bhavki (sub-community), gotra, religion, community/caste, current city, place of birth, occupation, education, surnames, and an optional profile photo.
• Family information: names of your father, mother, and other relatives; family nodes you create (including non-registered or deceased ancestors); and confirmed relationships between you and other users.
• Optional content: events you host, match-intent profiles (if you choose to register one), and free-text fields like family remarks.

2.2 We collect automatically

• Device information: device type, operating system, app version, language preference.
• Usage data: features you use, screens you visit, errors you encounter (via Firebase Analytics and Crashlytics).
• Push notification token: issued by Firebase Cloud Messaging if you accept push notifications.

2.3 We do not collect

• Your contacts list, unless you explicitly choose to invite a family member from contacts.
• Your precise location.
• Payment information (the app is free).

3. How we use your information

• To create and authenticate your account (OTP via SMS).
• To show you relationship suggestions based on shared villages, bhavkis, and family nodes.
• To compute and render your family tree and connection paths.
• To deliver invitations, event notifications, and relationship-confirmation requests.
• To enforce your privacy settings on the server, so other users can never see fields you have marked Private.
• To detect and prevent abuse, spam, and fake accounts.
• To improve the app through aggregated, anonymous usage analytics.

4. How we share your information

We share information only within the Service and only in line with the visibility you choose for each field:

• Public: visible to any ApliNati user.
• Connections only: visible only to users you have a confirmed relationship with.
• Private: visible only to you. Server-enforced.

Your mobile number is always Private and never shared with other users.

We use the following third-party processors strictly to operate the Service:

• MSG91 — sends OTP SMS to your mobile number during login.
• Microsoft Azure — hosts our backend and database in India.
• Firebase (Google) — push notifications, crash reporting, and analytics.

We do not sell your data. We do not run advertising. We will only disclose information to law-enforcement agencies if compelled by valid legal process under Indian law.

5. Your choices and rights

• Edit: change any profile field anytime in the app's Profile screen.
• Visibility: change Public / Connections / Private per field in Privacy settings.
• Notifications: manage push, SMS, and email preferences in Settings.
• Language: switch between Marathi, Hindi, English, or Tamil at any time.
• Delete account: request account deletion by emailing support@aplinati.com. We will permanently delete your account and personal information within 30 days. Confirmed relationships you established may persist on connected users' trees as anonymised nodes.

6. Data retention

We retain your personal information while your account is active. After deletion, profile data, photos, family nodes you authored, and event records you created are permanently removed within 30 days. Aggregated, non-identifying analytics may be retained longer for product improvement.

7. Security

All API traffic is encrypted with HTTPS. Passwords are hashed using industry-standard algorithms. Authentication tokens are stored using the device's secure storage (Keychain on iOS, Keystore-backed encrypted preferences on Android). Profile field visibility is enforced server-side, not just on the screen.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities promptly.

8. Children

ApliNati is not directed at children under 13. If you believe a user under 13 has created an account, please write to support@aplinati.com and we will remove the account.

9. Changes to this policy

We may update this Policy when features change. Material changes will be notified in-app and the "Effective" date above will be updated. Continued use of the Service after a change indicates acceptance.

10. Contact

Questions or requests about your data:
support@aplinati.com

This Policy is governed by the laws of India. Any disputes will be subject to the courts of Maharashtra, India.