Privacy Policy
Effective Date: March 14, 2026
Last Updated: March 14, 2026
Your privacy matters to us. This Privacy Policy describes how
CITYSAGE INNOVATIONS LLP ("Company", "We", "Us") collects, uses, stores,
shares, and protects your personal data when you use the Jeevi mobile application ("Platform").
This Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act),
the IT (SPDI) Rules, 2011, the IT Act, 2000, and the
IT (Intermediary Guidelines) Rules, 2021.
By using Jeevi, you consent to the collection and use of your data as described in this Policy.
Contents
- Data Controller / Fiduciary
- Data We Collect
- Data We Do NOT Collect
- Legal Basis for Processing
- How We Use Your Data
- Data Sharing & Disclosure
- Sensitive Personal Data (SPDI)
- International Data Transfer
- Data Retention
- Data Security
- Your Rights (DPDP Act)
- Children's Privacy
- Local Storage & Cache
- Push Notifications
- Limitation of Liability
- Changes to This Policy
- Grievance Officer
- Contact Us
01 Data Controller / Data Fiduciary
For the purposes of the Digital Personal Data Protection Act, 2023, CITYSAGE INNOVATIONS LLP is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data.
CITYSAGE INNOVATIONS LLP
Building Number 60/44, 3rd Floor, Jc Chambers,
Panampally Nagar, Panampilly Nagar,
Ernakulam, Kerala, India – 682036
Email: admin@citysage.in
02 Data We Collect
We collect the following categories of personal data when you use the Platform:
2.1 Account & Authentication Data
| Data | Method | Required? | Purpose |
|---|---|---|---|
| Email address | Sign-up / OAuth | Required | Authentication, account recovery |
| Auth provider | Auto-detected | Required | Track sign-in method (Google/Apple/Email) |
| Account creation timestamp | Auto-recorded | Required | Account metadata |
| Last active timestamp | Auto-recorded | Required | Activity tracking, security |
2.2 Profile Data
| Data | Method | Required? | Purpose |
|---|---|---|---|
| Username | User-provided during onboarding | Required | Display name in app |
| Date of Birth | User-provided during onboarding | Required | Verify 18+ eligibility; event age-filtering |
| Gender | User-selected during onboarding | Required | Event gender-filter matching |
| Avatar configuration | Built via avatar builder | Required | Visual profile representation |
| Primary event category preference | User-selected | Optional | Event recommendations |
| isAdult flag | Auto-set on legal consent | Required | Confirm adulthood declaration |
2.3 Location Data
| Data | Method | Required? | Purpose |
|---|---|---|---|
| City name | Auto-detected or manually entered | Required | Match users with nearby events |
| Precise GPS coordinates (lat/lng) | Device GPS, requires permission | Optional | Precision event proximity matching |
| Location shared in chat | User-initiated in chat | Optional | Real-time location sharing with event group |
2.4 Event & Activity Data
- Events you create (title, description, address, GPS location, date/time, guest limits, demographic filters);
- Events you request to join or attend;
- Attendance verification records (QR scan logs);
- Event updates you post as a host.
2.5 Communications Data
- Chat messages (encrypted text, images, audio, location messages);
- Message metadata: timestamp, sender ID, event ID, message type.
2.6 Ratings & Reputation Data
- Ratings you give and receive (behaviour, punctuality, friendliness, safety);
- Host ratings (communication, listing accuracy, safety management, hospitality, vibe quality);
- Shoutouts given and received;
- Computed reputation scores (Vibe Score, Safety Score, Reliability Score, Contribution Score, Reciprocity Score, Host Scores).
2.7 Notification & Device Data
- Push notification token (device identifier for push delivery);
- Notification preferences (enabled/disabled);
- Device type and operating system version (for compatibility);
- App version;
- Log data (errors, anonymised app interactions for debugging).
2.8 Account Deletion Feedback
If you delete your account, we collect the reason you select (e.g., "not finding events", "privacy concerns"). This is retained in anonymised form for platform improvement only and is not linked to your identity after account deletion.
03 Data We Do NOT Collect
We want to be transparent. Jeevi does not collect:
- National identity documents (Aadhaar, PAN, Passport, Voter ID, etc.);
- Biometric data (fingerprints, facial recognition, iris scans);
- Financial or payment information (the Platform is free);
- Health or medical information;
- Precise sexual orientation or religion (gender identity is collected for event-filter functionality only);
- Passwords in plaintext (handled securely via Supabase Auth's hashed tokens);
- Browsing history or cross-app tracking data.
04 Legal Basis for Processing
Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following legal bases:
- Consent (Section 6, DPDP Act): You provide explicit, informed consent
during onboarding by accepting this Privacy Policy. You may withdraw consent at any time by deleting your account, subject to our data retention obligations.
- Legitimate Use / Contractual Necessity: Processing necessary to perform
the services you have contracted for under these Terms — e.g., matching you with events, enabling chat, computing reputation scores.
- Legal Obligation: Processing required to comply with applicable Indian
law, respond to lawful government or court orders, or comply with directions of competent authorities under the IT Act, 2000 or any other applicable Indian statute.
We additionally comply with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") for all sensitive personal data processing.
05 How We Use Your Data
5.1 To Provide Core Services
- Authenticate your identity and manage your account;
- Match you with events in your city based on your profile (age, gender, location);
- Enable event creation, discovery, and join-request flows;
- Process gatekeeper QR-code attendance verification;
- Facilitate real-time encrypted chat among event participants.
5.2 Trust & Safety
- Calculate and display reputation scores;
- Enforce event access filters (age range, gender, minimum score);
- Detect fraudulent accounts, abuse, or policy violations.
5.3 Notifications
- Send push notifications for join requests, event updates, and chat messages (if notifications are enabled).
5.4 Legal & Compliance
- Comply with applicable Indian laws;
- Respond to lawful government, regulatory, or law enforcement requests;
- Enforce these Terms and our legal rights.
5.5 Platform Improvement
- Analyse aggregated, anonymised usage patterns to improve the Platform's features and performance.
06 Data Sharing & Disclosure
6.1 With Other Users
- Your username and avatar are visible to other users;
- Your reputation scores are displayed on your public profile;
- Your event listings are visible to users matching event filters;
- Your city is used for event proximity matching; precise GPS coordinates are not directly exposed to other users;
- Messages you send in event chats are visible to all event participants.
6.2 With Service Providers (Data Processors)
Supabase Inc.
United States
Database, Auth, Realtime, Storage
Google LLC
United States
Google Sign-In authentication
Apple Inc.
United States
Apple Sign-In authentication
Device OS Providers
Platform-dependent
Push notifications, Location services
All service providers act as Data Processors and are contractually bound to process your data only as instructed by us. Each provider's privacy policy applies to their respective services.
6.3 For Legal Compliance
We may disclose your personal data to government authorities, law enforcement agencies, courts, or regulatory bodies when required by applicable Indian law (including under Sections 67C, 69, 69A, 69B, and 70B of the IT Act, 2000), valid legal process (court order, summons, or warrant), or to protect the safety of any person.
6.4 Business Transfer
In the event of a merger, acquisition, restructuring, or sale of the Company's business or assets, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.
6.5 No Sale of Personal Data
We do not sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial purposes.
07 Sensitive Personal Data (SPDI Rules, 2011)
Under the IT (SPDI) Rules, 2011, certain categories of data are classified as "sensitive personal data or information" (SPDI). Of these categories, we collect:
- Location Data – Your city and optionally precise GPS coordinates.
This is collected only with your explicit consent via in-app location permissions. Precise GPS is optional; city-level location is required for the app's core function.
We do not collect passwords (managed securely by Supabase Auth), biometric data, financial data, medical/health records, or sexual orientation information.
Your consent to the collection of sensitive personal data is obtained during onboarding and via device permission prompts. You may revoke location permission at any time through your device settings; however, this may limit the Platform's ability to match you with local events.
All SPDI is handled in compliance with Rule 6 and Rule 7 of the SPDI Rules, 2011. We do not transfer your SPDI to third parties other than our data processors (Section 6.2) without your explicit consent.
08 International Data Transfer
Your personal data may be stored and processed on servers operated by Supabase Inc. and other service providers located outside India. By using the Platform and accepting this Privacy Policy, you expressly consent to the transfer of your personal data to countries outside India, including the United States.
We take reasonable contractual and technical measures to ensure that transferred data is protected to a standard equivalent to applicable Indian data protection requirements.
09 Data Retention
9.1 Active Accounts
We retain your personal data for as long as your account is active or as necessary to provide services to you.
9.2 Account Deletion
When you delete your account, the following data is permanently deleted:
- Your user profile and all profile data;
- All events you created;
- All join requests and participation records;
- All chat messages and media;
- All ratings and reviews linked to your account;
- All notifications.
Account deletion feedback (deletion reason) is retained in anonymised form only, unlinked to your identity, for platform improvement purposes.
9.3 Legal Retention
Certain data may be retained for longer periods where required by applicable Indian law (e.g., Section 67C of the IT Act requires intermediaries to preserve certain records for 90 days or as directed by government authority).
10 Data Security
We implement security measures in compliance with Rule 8 of the SPDI Rules, 2011:
- Encryption in Transit: All data transmitted between the app and our servers uses TLS/SSL encryption;
- Encryption at Rest: Chat messages are encrypted client-side before storage;
- Row-Level Security (RLS): Database access controlled at row level — users can only access their own data and authorised public data;
- Secure Token Storage: Authentication tokens stored in device secure storage (Flutter Secure Storage);
- Access Controls: Data access limited to authorised personnel on a need-to-know basis;
- Regular Security Review: Ongoing monitoring and review of security practices.
Important: Despite these measures, no internet-based service can guarantee absolute security against all possible attacks. You use the Platform at your own risk and should take your own precautions (e.g., using a strong password, not sharing credentials). The Company shall not be liable for any breach of security beyond its reasonable control.
11 Your Rights Under the DPDP Act, 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
📋
Right to Access
Request a summary of your personal data being processed and the purposes of processing.
Right to Correction
Request correction of inaccurate or incomplete personal data through the Profile edit screen.
🗑
Right to Erasure
Request deletion of your personal data by deleting your account via the Settings screen.
🛡
Right to Grievance Redressal
Have privacy-related grievances addressed by our Grievance Officer within 15 days.
🔕
Right to Withdraw Consent
Withdraw consent by deleting your account. Withdrawal does not affect prior lawful processing.
👤
Right to Nominate
Nominate another individual to exercise your rights in the event of death or incapacity.
To exercise any of these rights (other than account deletion and profile correction, which are available in-app), please contact: admin@citysage.in
12 Children's Privacy
Jeevi is strictly intended for users aged 18 (eighteen) years and above. We do not knowingly collect personal data from persons under 18 years of age.
If a parent or guardian becomes aware that their minor child has provided personal data to the Platform without consent, they should immediately notify us at admin@citysage.in. We will take immediate steps to delete such data upon verification.
The Company shall not be liable for any harm arising from a minor's access to the Platform through misrepresentation of age, as age verification is based on self-reported date of birth.
13 Local Storage & Caching
The Jeevi mobile app uses the following local device storage mechanisms:
- Hive – Local NoSQL database for caching app data (event feeds, profile data) for offline performance;
- SharedPreferences – Stores simple user preferences (e.g., notification settings);
- Flutter Secure Storage – Stores encrypted authentication tokens in the device's secure enclave.
No third-party advertising, cross-site tracking, or analytics cookies are used. Local data is cleared upon account logout or deletion.
14 Push Notifications
We use push notifications to keep you informed about join requests, event updates, and new chat messages. Notification delivery uses platform-native push services (Android/iOS provided).
You may disable push notifications at any time through the Jeevi settings or your device's notification settings. Disabling notifications does not delete your account or affect other Platform functionality.
15 Limitation of Our Liability for Privacy
While we implement reasonable security measures, CITYSAGE INNOVATIONS LLP shall not be liable for:
- Any unauthorised access to your data due to breaches beyond our reasonable control;
- Any harm arising from data you voluntarily share with other users through event listings, chat, or location sharing;
- Any consequences of your disclosure of your login credentials to third parties;
- The privacy practices of third-party services (Google, Apple, Supabase);
- Any data breach resulting from your device being compromised.
Our maximum aggregate liability for any privacy-related claim is subject to the limitation described in our Terms of Service.
16 Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. Any changes will be posted at this URL with a revised "Last Updated" date. For material changes affecting how we process your data, we will notify you through the app or by email.
Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you must stop using the Platform and delete your account.
17 Grievance Officer
In accordance with Rule 5(9) of the IT (SPDI) Rules, 2011 and Rule 3(2)(b) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated a Grievance Officer for privacy-related complaints:
Grievance Officer
CITYSAGE INNOVATIONS LLP
Building Number 60/44, 3rd Floor, Jc Chambers,
Panampally Nagar, Panampilly Nagar,
Ernakulam, Kerala, India – 682036
Email: admin@citysage.in
Acknowledgement: within 24 hours
Resolution: within 15 days of receipt
If your complaint is not resolved to your satisfaction, you may approach the Data Protection Board of India (when established under the DPDP Act, 2023) or any other competent authority under applicable Indian law.
18 Contact Us
CITYSAGE INNOVATIONS LLP
Building Number 60/44, 3rd Floor, Jc Chambers,
Panampally Nagar, Panampilly Nagar,
Ernakulam, Kerala, India – 682036
Email: admin@citysage.in