Privacy Policy — HunaUhuna

Last updated: 3 September 2026

1. Who we are

HunaUhuna is a dating application operated by Rashmikanth G R, a sole proprietor operating under Panda Digital Lab, based in Karnataka, India ("we", "us"). We are the Data Fiduciary for personal data processed through the app, under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

Postal address:
Gandralli, Kammachi Post,
Hosanagara Sub-District,
Shivamogga District, Karnataka – 577436, India.

2. You must be 18 or older

HunaUhuna is strictly for adults. We collect your date of birth at sign-up and refuse accounts for anyone under 18. We do not knowingly process the data of children. If you believe a minor has created an account, contact us and we will remove it.

3. What we collect

Data	Why
Phone number or email address	To create and secure your account. This is how you sign in.
Date of birth	To enforce the 18+ requirement and to show your age. Your exact date of birth is never shown to other users — only your age in years.
Name, gender, bio, interests, city	Your profile, shown to other users.
Photos	Your profile. Every photo is scanned automatically before anyone can see it (see section 7).
Approximate location	To show you people nearby. See section 5 — this is deliberately imprecise.
Messages	To deliver your conversations, and to let moderators act on reports.
Swipes, matches, Stars balance and transactions	To run the app and your purchases.
Selfie for verification (optional)	Only if you choose to get verified. Compared against your profile photos by a human reviewer, then used for nothing else.
Device and log data	Security, abuse prevention, and diagnosing faults.

4. Signing in with Google

HunaUhuna provides an option to create and access an account using Google Sign-In. When you select "Continue with Google," Google asks you to authorize HunaUhuna to access certain information from your Google account.

Google user data we access

When you use Google Sign-In, HunaUhuna requests the openid, email, and profile scopes. Through these permissions, HunaUhuna may receive:

Your Google account name
Your Google account email address
Your Google profile picture
Information required to identify and authenticate your Google account

How we use Google user data

We use Google user data only for purposes directly related to providing HunaUhuna's account and authentication functionality, including:

Creating your HunaUhuna account
Signing you into your HunaUhuna account
Authenticating your identity
Maintaining the connection between your Google account and your HunaUhuna account
Protecting your account against unauthorized access and abuse

We do not use Google user data for targeted advertising, personalized advertising, retargeted advertising, selling to data brokers, credit assessment, lending, or any other unrelated purpose.

We do not use Google user data to train or improve generalized artificial intelligence or machine-learning models.

What Google user data we store

HunaUhuna stores your Google account email address as part of your HunaUhuna account so that we can identify your account and provide Google-based sign-in.

Although Google may provide your name and profile picture through the profile scope, HunaUhuna does not use or store those Google profile details as your HunaUhuna profile information. Your HunaUhuna display name and profile photos are provided separately by you.

We do not store or have access to your Google password.

Who we share Google user data with

Google user data is not publicly displayed or shared with other HunaUhuna users.

Google account information may be processed by Supabase, our authentication and database service provider, when necessary to provide account authentication, account management, and related services.

We do not sell Google user data and do not share Google user data with advertisers or data brokers.

Google user data is not provided to Anthropic, OpenRouter, or NVIDIA for AI companion responses.

How we protect Google user data

Google Sign-In uses Google's authentication system. Google provides authentication information to HunaUhuna rather than providing your Google password.

Google-related account information is protected using the security measures described in section 11 of this Privacy Policy, including encryption in transit, database access controls, restricted administrative access, and audit logging.

Retention and deletion of Google user data

We retain the Google account information associated with your HunaUhuna account while your account remains active and for as long as reasonably necessary to provide account authentication and related services.

When you delete your HunaUhuna account, the Google account information associated with your account is deleted along with the account data, except for information that we are required to retain for legal, accounting, security, fraud-prevention, or other lawful purposes.

You may stop using Google Sign-In at any time. You may also request deletion of your HunaUhuna account and associated personal data through the account deletion process described in section 9.

5. Your location is stored deliberately imprecisely

This one is worth explaining, because it is a real risk in dating apps and we have engineered against it.

Several major dating apps have leaked users' home addresses. The attack works when an app reports an exact distance: create three accounts, note the distance from each, and the intersection of three circles is a doorstep. It has affected Tinder, Grindr, Bumble and Happn.

So HunaUhuna does this instead:

Your coordinates are rounded to a grid of roughly 500 metres before they are stored. We never hold your precise position.
Other users are never sent coordinates of any kind.
Distance is shown only as a band — "under 1 km", "1–3 km", "3–5 km", "5–10 km", "10 km+" — never a number that can be triangulated.

You can use the app without granting location access; you can also set your city manually.

6. AI companions

HunaUhuna includes AI companion profiles. These are virtual characters, not real people.

Every AI profile carries a visible AI badge on the swipe card, on the profile, in your inbox, and in the chat header.
If you ask one whether it is an AI, it will tell you it is.
Messages you send to an AI companion are processed by an AI provider — Anthropic, and depending on which model is active, OpenRouter or NVIDIA — to generate a reply. A summary of your conversation is retained so the character remembers context.
An AI companion will never arrange to meet you, and will never ask you for money.

If you would rather not have your messages processed this way, do not message AI companions. Conversations with real users are never sent to an AI model.

7. Photo scanning

Every uploaded photo is checked automatically for nudity and illegal content before it becomes visible to anyone. If the check cannot be completed, the photo stays hidden rather than being published. Suspected child sexual abuse material is reported to the appropriate authorities as the law requires — see our Child Safety Standards for the full policy.

8. Who else processes your data

Processor	What they handle
Supabase	Database, authentication, file storage
Anthropic, OpenRouter, NVIDIA	Generates AI companion replies (messages to AI profiles only)
Sightengine	Automated photo moderation
Google Play / Apple	Payments for Stars and Premium via in-app purchase. We never see your card details.
Razorpay	Payments for Stars and Premium where a web-based payment flow is used. We never see your card, UPI or bank details.

We do not sell your personal data, and we do not share it with advertisers.

9. Your rights under the DPDP Act

You may:

Access the personal data we hold about you.
Correct anything inaccurate — most of it is editable in the app.
Erase your account and data. Settings → Delete my account removes your profile, photos, messages, swipes and matches — or use our web-based deletion page without installing the app: /delete-account.html.
Withdraw consent and stop using the service at any time.
Nominate someone to exercise these rights if you die or become incapacitated.
Complain to the Data Protection Board of India.

Deletion is real deletion, not a hidden flag. Two things survive, and only these: records of Star purchases, which we must keep for tax and accounting law; and records relating to safety reports or legal obligations. Both are kept separately from your profile.

10. How long we keep things

Your profile and messages are kept while your account is active. When you delete your account they are removed promptly. Verification selfies are deleted once the review is complete. Financial records are retained for the period Indian tax law requires.

11. Security

Data is encrypted in transit. Access to the database is restricted by row-level security so one user cannot read another's data. Photos are stored privately and served through short-lived links rather than public URLs. Administrative access is role-restricted and every administrative action is written to an audit log.

No system is perfectly secure. If a breach affects you, we will notify you and the Data Protection Board as the DPDP Act requires.

12. Grievance Officer

The DPDP Act requires us to name someone you can contact directly.

Grievance Officer: Rashmikanth G R
Designation: Proprietor / Grievance Officer
Email: contact.pandadigitallab@gmail.com
Postal address: Gandralli, Kammachi Post, Hosanagara Sub-District, Shivamogga District, Karnataka – 577436, India.

We will acknowledge your request and respond within the statutory period.

13. Changes

If we change this policy materially we will tell you in the app before the change takes effect.