Privacy Policy

DoonMeet ("DoonMeet", "we", "us") operates doonmeet.in, a local social platform for Dehradun that lets people discover events, join communities, chat with each other, and see who's nearby on a live map. This Privacy Policy applies to everyone who visits or creates an account on DoonMeet, including guest users.

By using DoonMeet, you agree to the collection and use of information as described here. If you don't agree, please don't use the platform.

We collect information in three ways: what you give us, what you generate by using the app, and what your device shares automatically.

Information you provide

• Name, email address and password when you sign up.
• Your Google name, email and profile photo, if you sign in with Google.
• Profile details you choose to add — bio, gender, area/address, interests, phone number and a profile photo.
• A display name only, if you join as a guest (no email or password required).

Information generated by using DoonMeet

• Messages you send in the public chat, direct messages, and event comments.
• Events and communities you create, join or interact with.
• Your precise GPS coordinates and an optional label, only when you actively check in on the live map.
• Basic activity data — last seen time, login timestamps, and device/browser type for security and rate-limiting.

Information from your device

• IP address, used for rate limiting and abuse prevention.
• Standard browser/device information sent with every web request.

• To create and secure your account, and to keep guest sessions time-limited.
• To operate core features: the live map, public chat, direct messages, communities and events.
• To send account emails — verification links, password resets, and important service notices.
• To show your public profile to other users, respecting the privacy toggles you've set.
• To detect spam, abuse, and rate-limit violations, and to enforce our Terms of Service.
• To improve the product — understanding which features people actually use.

We do not use your data to run third-party advertising, and we do not sell your personal information to anyone.

DoonMeet's live map is fully opt-in. We only access your device location when you tap "Check in," and nothing is shared until you do.

• When you check in, your coordinates and any label you add (e.g. "At Clock Tower") become visible to other users on the map, alongside your name and avatar.
• You can hide yourself from the map at any time without deleting your check-in, or remove your location entirely.
• We store only your latest check-in — we do not build a history or timeline of your movements.
• Guest accounts cannot check in or appear on the map.

We use essential, first-party cookies to keep you signed in — an access token and a refresh token, both httpOnly and not readable by scripts. We don't use third-party advertising or tracking cookies. Signing out, or letting a guest session expire, clears these cookies.

We do not sell your data. We share information only in these limited situations:

• Service providers we rely on to run DoonMeet — for example Cloudinary (image hosting for avatars and event banners) and our email provider (account and security emails). They only receive what's needed to perform their function.
• Google, if you choose to sign in with Google — we verify your identity with Google's servers but don't receive your Google password.
• Other users, limited to your public profile, chat messages, and map check-in, and only according to the visibility and privacy settings you've chosen.
• Law enforcement or regulators, only where we're legally required to disclose information, or to protect the safety of our users or the public.
• A future owner, in the event of a merger, acquisition, or sale of DoonMeet's assets — you'd be notified of any such change and of any change to this policy.

DoonMeet is currently free to use. We plan to introduce paid features in the future (such as premium account features or paid event listings). When that happens:

• Payments will be processed by a licensed third-party payment gateway — we do not, and will not, store your full card, UPI or bank details on our own servers.
• We'll only retain what's needed for receipts, support, and fraud prevention — such as a transaction ID, amount, and status.
• This policy will be updated before any paid feature goes live, and our Refund & Cancellation Policy will explain how charges and cancellations work.

• Regular account data is kept for as long as your account is active.
• Guest accounts and their messages are tied to a 24-hour session and are not intended for long-term storage.
• Password reset and email verification tokens expire automatically (1 hour and 24 hours respectively) and are deleted once used.
• Notifications are automatically deleted after 30 days.
• If you delete your account, we remove your profile, messages, and location data within a reasonable period, except where we're required to retain limited records for legal, security, or fraud-prevention purposes.

You're always in control of your data on DoonMeet:

• Access & correction — view and edit your profile at any time from your account settings.
• Privacy toggles — choose whether your email, phone, gender, address and interests are visible to other users.
• Location control — hide yourself from the map or remove your check-in entirely, whenever you like.
• Deletion — request full deletion of your account and associated data by contacting us.
• Portability — request a copy of the personal data we hold about you.

If you're in India, these rights are consistent with the Digital Personal Data Protection Act, 2023. To exercise any of them, contact us using the details at the bottom of this page.

We take reasonable technical and organisational measures to protect your data, including password hashing (bcrypt), httpOnly session cookies, rate limiting on sensitive endpoints, and input sanitisation to prevent common web attacks. No online service can guarantee absolute security, but we work to keep DoonMeet as safe as reasonably possible and will notify affected users if a breach materially impacts their data.

DoonMeet may link out to third-party sites (such as an event organiser's Instagram, or a place's listing). We aren't responsible for the privacy practices of those sites — please review their own policies before sharing information with them.

We may update this Privacy Policy as DoonMeet grows — for example, when we introduce paid features. We'll update the "Last updated" date at the top of this page, and for significant changes we'll make a reasonable effort to notify you (for example, by email or an in-app notice).

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for DoonMeet can be reached at the contact details below for any complaints or concerns regarding content or privacy on the platform.

Name: Ravish Bisht
Email: cykoravish@gmail.com
Location: Dehradun, Uttarakhand, India

Questions about this Privacy Policy, or want to exercise any of your data rights? Reach out any time.