1. Who We Are
JustSpur is an activity-based dating platform operated by MarchSeptember, a company based in India. When this policy says "JustSpur," "we," "us," or "our," it refers to MarchSeptember and the JustSpur platform.
JustSpur is the data controller for all personal information collected through our platform. You can reach us at privacy@justspur.com for any privacy-related requests.
2. Data We Collect
Data you give us directly
- Your Google account name, email address, and profile picture (collected at sign-in)
- Display name, date of birth, and gender (set during onboarding)
- Dating preferences (which genders you're interested in meeting)
- Profile photos you upload (2–5 photos)
- Date categories you select (e.g. coffee, drives, dinner)
- Messages you send to your matches through our chat system
- Any information you share when contacting our support team
Data we collect automatically
- Your device location (when you grant permission — used for proximity matching only)
- Device type, operating system, and app version
- Log data: pages viewed, features used, errors encountered
- IP address (used for fraud prevention and regional compliance)
- Daily Spurs usage and match activity (to maintain your account limits)
We do not collect: your contacts, microphone access, camera access (outside photo uploads), browsing history, or any data from other apps on your device.
3. How We Use Your Data
We use your information only for purposes that are necessary to provide and improve JustSpur. Specifically:
- To create and manage your account and profile
- To match you with compatible users based on your categories, preferences, and proximity
- To enable chat between matched users
- To enforce daily Spur limits and reset them each morning
- To process your Premium subscription payment
- To send transactional notifications (new match, new message, daily reset)
- To detect and prevent fraud, fake profiles, and abuse
- To improve the matching algorithm and product features
- To comply with applicable Indian laws and regulations
We never use your data to serve you third-party advertisements. JustSpur is an ad-free platform. Period.
4. Data Sharing
We do not sell your personal data to anyone. We share limited data only in the following circumstances:
With other users
Your public profile (name, age, photos, date categories, approximate distance) is shown to potential matches. Your exact location, email address, phone number, and full address are never shared with other users.
With service providers
- Google Firebase — database, authentication, and photo storage (Google's servers, India region where available)
- Razorpay — payment processing (they handle your card/UPI data under their own PCI-compliant systems)
- Formspree — contact and waitlist form submissions
For legal compliance
We may share data with Indian law enforcement or regulatory authorities if required by law, court order, or to prevent serious harm. We will notify you where legally permitted to do so.
5. Location Data
Location is central to how JustSpur works — we match you with people nearby. Here's how we handle it:
- We collect your location only when the app is open and you've granted permission
- We use your location to show you matches within a 30-mile radius
- Other users only see your approximate distance (e.g. "3.2 km away") — never your exact address or coordinates
- We store your last known location in Firebase to power the matching algorithm
- You can revoke location permission at any time through your device settings — though this will disable matching functionality
6. Your Photos
Photos you upload are stored securely in Google Firebase Storage. Your first photo is used as your main profile picture shown to potential matches.
- Photos are only visible to users you appear in front of based on the matching criteria
- We do not use your photos to train AI systems or sell them to third parties
- Base plan users set their photos once during onboarding. Premium users can update photos at any time
- When you delete your account, your photos are permanently deleted within 30 days
7. Payments & Billing
All payment processing is handled by Razorpay, a PCI-DSS compliant payment gateway. JustSpur never stores your credit/debit card numbers, CVV, UPI PIN, or other sensitive payment credentials on our servers.
What we do store: your subscription status (active/inactive), the date your subscription renews, and your payment history (transaction IDs and amounts) for billing support purposes.
Razorpay's privacy policy applies to all payment data: razorpay.com/privacy
8. Data Retention
- Active accounts: Your data is retained as long as your account exists
- After account deletion: Most data is deleted within 30 days. Some anonymised usage data may be retained for up to 12 months for analytics
- Chat messages: Deleted permanently within 30 days of account deletion
- Payment records: Retained for 7 years as required by Indian financial regulations
- Abuse reports: Retained for up to 3 years to prevent re-registration by bad actors
9. Your Rights
Under India's Digital Personal Data Protection Act (DPDPA) 2023, you have the following rights regarding your personal data:
- Right to access — Request a copy of all personal data we hold about you
- Right to correction — Ask us to correct inaccurate or incomplete data
- Right to erasure — Request deletion of your account and personal data
- Right to withdraw consent — Withdraw consent for data processing at any time (this will require account deletion)
- Right to grievance redressal — Lodge a complaint with our Data Protection Officer
To exercise any of these rights, email us at privacy@justspur.com with the subject "Data Rights Request." We will respond within 30 days.
10. Children's Privacy
JustSpur is strictly for users aged 18 and above. We do not knowingly collect data from anyone under 18. During onboarding, we require date of birth verification and block access for users who are under 18.
If you believe a minor has created an account on JustSpur, please report it immediately to safety@justspur.com and we will delete the account within 24 hours.
11. Security
We take reasonable and industry-standard measures to protect your data:
- All data is transmitted over HTTPS (TLS encryption)
- Firebase Security Rules restrict data access to authenticated users only
- Payment data is handled entirely by Razorpay's PCI-DSS certified infrastructure
- Google sign-in eliminates password-based vulnerabilities
- We conduct regular security reviews of our Firebase rules and app permissions
No system is 100% secure. If you suspect a security issue, please contact us immediately at security@justspur.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time as our product evolves. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this page
- Send a notification to your registered email address
- Display an in-app notice for material changes
Continued use of JustSpur after changes are posted constitutes acceptance of the updated policy.