Privacy Policy

The Kitty Club (“we”, “us”, “the Platform”) is operated by [Legal Entity Name], [a sole proprietorship / Eenmanszaak / Private Limited Company], with its registered address at [Address]. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we act as the Data Fiduciary for personal data collected through this app.

This Policy explains what personal data The Kitty Club collects, why, how it’s used and shared, and the choices and rights available to you. It applies to anyone who creates an account, joins a kitty group, or visits a group page via a shared link — including visitors who never create an account, since core viewing (payments status, dates, polls) is deliberately available without login.

• Identity & contact data: name, phone number and/or email address (for OTP login), partner’s name (for couples groups).
• Group & activity data: kitty groups you create or join, host rotation history, event dates and venues, date/venue poll votes, notes and checklists, Tambola game results.
• Self-reported payment status: whether a contribution was marked paid (cash or UPI) and the amount, recorded for transparency within your group. We do not collect bank account numbers, UPI PINs, card details, or process actual money transfers — see Section 7.
• Photos and videos you or other members upload to a group’s Photo Memories.
• Birthday and anniversary dates — month and day only. By design, we deliberately do not collect or store the year, since that can reveal a person’s age. Do not enter a year anywhere else in the app if you’d rather not share it.
• Device & preference data: your chosen display language, stored either against your account or locally in your browser if you’re not logged in.

We process personal data only for purposes you’d reasonably expect from using a kitty-group management app:

• Operating core features — host rotation, payments tracking, events, polls, Tambola, guest invites, photo memories.
• Sending WhatsApp messages YOU choose to send via the app’s share buttons (we don’t send messages on your behalf without your action).
• Showing you upcoming events across every group you belong to (the “My Kitties” calendar).
• Maintaining the security and integrity of the Platform.
• Complying with legal obligations.

Under the DPDP Act, we process your personal data on the basis of your consent, given when you sign up or when an Admin adds you as a member of a group (in which case the Admin is responsible for having your permission to do so). You may withdraw consent at any time by deleting your account or asking a group Admin to remove you — see Section 9.

By design, The Kitty Club lets anyone with a group’s join link view that group’s events, payment status, polls, and photos without logging in — this is a deliberate choice so that less tech-comfortable members can participate with a single tap. This means:

• Anyone who has or guesses a group’s link can view that group’s content.
• Group Admins are responsible for only sharing the join link with intended members.
• Photos and videos uploaded to a group are visible the same way — please don’t upload anything you wouldn’t want seen by anyone holding the link.

The Kitty Club does not collect, hold, or transmit kitty funds. Cash payments are tracked by self-report only. UPI payments use a deep link that opens your own UPI app with the amount pre-filled — the transaction happens directly between members’ bank accounts via their UPI provider, entirely outside our systems. If Razorpay or another payment gateway is integrated in the future for Premium subscriptions, that processor’s own privacy policy will govern the payment data it collects, and this Policy will be updated accordingly.

We share personal data only with:

• Other members of your kitty group(s), and anyone holding a group’s join link (see Section 6).
• Anyone you choose to share a calendar with, via the Household Calendar Sharing feature, until you revoke that access.
• Our service providers who process data on our behalf, currently Supabase (database, authentication, file storage) and Vercel (hosting). These providers may process or store data on servers located outside India; where that happens, we rely on the cross-border transfer provisions of the DPDP Act and Rules.
• Law enforcement or regulators, where legally required.
• We do not sell personal data, and do not show third-party advertising at this time.

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you.
• Correct or update inaccurate or incomplete data.
• Erase data that is no longer needed (e.g. by deleting your account or asking an Admin to remove you from a group).
• Withdraw consent at any time, with the same ease with which it was given.
• Register a grievance — see Section 13 below.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity, per the DPDP Act.

To exercise any of these rights, contact us using the details in Section 13.

The Kitty Club is not designed for use by children. Account holders (people who log in) must be 18 years or older. A group Admin may list a minor as a non-login member (e.g. a couple’s child) purely for display purposes such as a name on a guest list — if you believe a minor’s data has been added without appropriate parental/guardian consent, contact us using Section 13 and we will remove it.

We retain group and personal data for as long as your account or group membership is active, plus a reasonable period afterward to handle disputes or legal requirements. Deactivated members (e.g. after a kitty cycle renewal) keep their historical records (past payments, past hosting turns) attached to the group for its own record-keeping, even though they no longer appear in active rotations.

We use industry-standard measures including encrypted connections (HTTPS), database-level row security policies that restrict who can read or write each piece of data, and OTP-based authentication with no passwords stored. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, the Grievance Officer for The Kitty Club is:

[Grievance Officer Name]
Email: [grievance@yourdomain.in]
Address: [Registered Address]

We will acknowledge and resolve grievances within the timelines prescribed by applicable law.

We use your browser’s local storage to remember your language preference if you’re not logged in. We do not currently use third-party advertising or tracking cookies.

We may update this Policy from time to time. Material changes will be notified within the app. Continued use after changes take effect constitutes acceptance.

This Policy is governed by the laws of India. Courts at [City], India shall have exclusive jurisdiction.

For any questions about this Policy, write to [privacy@yourdomain.in].