Privacy policy

• Account data — your email address and sign-in identifier, handled by our authentication provider so we never store your password.
• Content you create — recipient's first name, your message, photos and an optional voice note.
• Purchase data — plan bought, amount, order and payment reference, and the status returned by our payment gateway. Card, UPI and bank details are entered on the gateway and never reach our servers.
• Technical data — request logs, device/browser type and coarse error diagnostics needed to keep the service secure and working.

We do not ask for your government ID, address, contact list or precise location. Camera and GPS metadata inside photos is stripped before storage.

Under section 4 of the DPDP Act we process personal data only for lawful purposes with your consent, or for the legitimate uses the Act permits.

• Creating your account and keeping you signed in — necessary for the service.
• Building, previewing, publishing and delivering your surprise link — your consent.
• Taking payment and issuing entitlements — performance of your purchase.
• Fraud prevention, abuse reports, security and audit logs — legitimate use and our legal obligations.
• Optional product analytics — only if you chose "Accept all" in the cookie notice; you can withdraw that at any time.

We share the minimum necessary with processors acting on our instructions:

• Clerk (USA) — sign-in and session security.
• Supabase cloud database and private media storage — hosting your content.
• Razorpay (India) — processing your payment and refunds.
• Our website host (global edge network) — delivering the site quickly.

If you used a partner's coupon or referral link, that partner sees only the plan, amount, their commission and the timestamp. Partners never see your name, email or your surprise.

We do not sell or share personal data for cross-context behavioural advertising, and we do not use your photos or voice for advertising or to train AI models.

Some providers process data outside your country (for example in the USA or the EU). We rely on their contractual safeguards, including the UK International Data Transfer Addendum or equivalent clauses, and transfers permitted under the DPDP Act.

• Draft surprises — until you delete them or your account is closed.
• Published surprises — for the link's lifetime (7 days on Standard, 30 days on Premium). Photos and voice notes are deleted 7 days after your link expires. Text and payment records are kept as required by law.
• Payment and invoice records — kept for 8 years, as Indian GST and accounting law requires.
• Security and audit logs — kept for a limited period, then deleted.

When you delete a surprise, the link is blocked first, then the stored photos, voice note and generated versions are erased and the deletion is verified.

• Access — a summary of the personal data we process about you.
• Correction and erasure — fix inaccurate data or ask us to delete data we no longer need.
• Withdraw consent — as easily as you gave it; processing before withdrawal stays lawful.
• Nomination — nominate someone to exercise your rights if you die or become incapacitated.
• Grievance redressal — complain to us first; if unresolved you may approach the Data Protection Board of India.

Write to legal@ehsasmoments.co.in or use the grievance page. You also have a duty under the Act not to file false or frivolous complaints. If a personal data breach affects you, we will tell you and the Data Protection Board without delay (and within 72 hours of the full report). US and UK rights are listed in the country section above.

Ehsas Moments is for people aged 18 and above and is not directed at children under 13 (US COPPA) or anyone under 18. We do not knowingly process a child's personal data, and we never do behavioural tracking or targeted advertising directed at children. If you believe a child has created an account, tell us and we will delete it.

Media is kept in private storage and served through short-lived access, never a permanent public URL. Surprise links are unlisted and excluded from search engines. Prices, entitlements and payment verification are decided on our servers, never in your browser. Read the plain-English version on our privacy & safety page.

We update this page when the product or the law changes and revise the "last updated" date. Material changes that need fresh consent will be shown to you in the app.