Legal

Privacy Policy

Effective Date: 21 June 2026   |   Last Updated: 21 June 2026   |   Version: 1.0

Contents

  1. About SkillSaajha
  2. Scope of this Policy
  3. Eligibility and Age (18+)
  4. Information We Collect
  5. Information We Do Not Collect
  6. Legal Basis for Processing
  7. How We Use Your Information
  8. Data Flow by Feature
  9. Profile Visibility
  10. Location Information
  11. Push Notifications
  12. Messages, Files, and Voice Notes
  13. Audio and Video Calls
  14. External Meeting Links
  15. Safety, Blocking, and Reporting
  16. Analytics and Admin Access
  17. Sharing of Information
  18. International Data Transfers
  19. Data Retention
  20. Account Deletion
  21. Your Rights
  22. Data Security
  23. Data Breach Notification
  24. Cookies and Similar Technologies
  25. Third-Party Service Providers
  26. Automated Decision-Making
  27. Grievance Officer
  28. Changes to This Policy
  29. Contact Us

This Privacy Policy explains how SkillSaajha ("SkillSaajha", "we", "us", or "our") collects, uses, stores, shares, and protects your personal information when you use our mobile application, website (skillsaajha.com), and related services (together, the "Service"). It is written to comply with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Digital Personal Data Protection Act, 2023 of India ("DPDP Act").

By creating an account, accessing, or using SkillSaajha, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

In short: We collect only what is necessary to help you exchange skills with others. We never sell your data. We do not actively read your private messages. You can see, correct, delete, or export your information at any time, and you control what is visible to other users.

1. About SkillSaajha

SkillSaajha is a peer-to-peer skill exchange platform that helps people teach what they know and learn what they want to. Users create a profile, list the skills they can teach and the skills they want to learn, discover others through a swipe-based discovery feed, mutually match, and communicate through an in-app chat.

SkillSaajha is operated as a sole-founder venture from India. There is no monetary transaction between users on the platform. Skill exchange is non-commercial and based on mutual willingness.

For the purposes of GDPR, SkillSaajha is the Data Controller of personal information you submit. For the purposes of the DPDP Act, we are the Data Fiduciary. This means we determine the purposes and means of processing your personal data and are responsible for its protection.

2. Scope of this Policy

This Policy applies to all personal information processed by SkillSaajha in connection with:

This Policy does not apply to:

3. Eligibility and Age (18+)

SkillSaajha is intended for users aged 18 years and above. By creating an account, you confirm that you are at least 18 years old.

We do not knowingly collect personal information from anyone under the age of 18. Under the Digital Personal Data Protection Act, 2023, a person under 18 is a child, and we do not process children's data. During onboarding we ask for your age and rely on the accuracy of what you tell us. If we become aware that an account belongs to a person under 18, we will deactivate it and delete the associated personal data without delay.

If you are a parent, guardian, or other concerned person and believe a minor has provided us with personal information, please email hello@skillsaajha.com immediately so that we can investigate and take appropriate action.

4. Information We Collect

We collect only the information we genuinely need to run the Service. Below is a complete inventory.

4.1 Information You Provide During Onboarding

When you sign up and complete onboarding, we ask you for the following information through a 15-step guided flow:

FieldRequired?Why we ask
First name, last nameRequiredSo others know who they are matching with
Age (a number, not date of birth)RequiredEligibility (18+) and basic context for other users
GenderRequiredUsed to pick a default illustrated avatar; helps with matching context
User type (student, professional, hobbyist, teacher, other)RequiredSo others can understand the kind of exchange you are looking for
Profile photoOptionalYou may upload your own photo or select an illustrated avatar from our gallery
Bio (short text)OptionalTo let others know about you in your own words
CityRequiredFor city-based suggestions and approximate distance display
Approximate location coordinatesOptionalOnly collected if you grant device permission; used for distance-based matching
Maximum travel distance preferenceRequiredTo filter how far away potential matches can be
Meeting preference (online, in person, or both)RequiredFor more accurate matching
Learning preferenceRequiredTo improve recommendations
Skills you can teach (with self-assessed level and optional description)RequiredThe core of the skill exchange
Skills you want to learnRequiredThe other half of the exchange

4.2 Content You Share in Chats and Calls

Once you match with someone, you can share the following. All of it is optional: you choose whether to send anything at all.

WhatPermission neededWhat we store
Text messagesNoneThe message content, so both of you can read it
PhotosPhoto library or cameraThe image, in private storage. Location and camera metadata (EXIF) are stripped before upload
PDF documentsFile accessThe document, in private storage
Voice notesMicrophoneThe audio recording, in private storage
Audio and video callsMicrophone, and camera for videoNothing. Calls are never recorded. We keep only a log of who called whom, when, and for how long

Camera and microphone are used only at the moment you take a photo, record a voice note, or are on a call. We do not access them in the background.

4.3 Account and Authentication Information

To sign in, you may use any of the following methods:

For each method, we store the minimum information needed to recognise you on return visits: an internal user ID, your email or phone number used for sign-in, and a session token. We do not store passwords, OTP codes, or social-network access tokens beyond what is needed for sign-in.

4.4 Information Created by Your Activity

Your normal use of the Service generates the following information, which we store to make the app work:

4.5 Device and Technical Information

When you use the app, we automatically collect limited technical information:

We do not collect persistent advertising identifiers, contact lists, SMS logs, call logs, or anything else that requires special device permissions beyond what we have explicitly described.

4.6 Communications with Support

If you write to us (for example, to hello@skillsaajha.com), we keep a record of that correspondence so we can help you and follow up if needed.

5. Information We Do Not Collect

To make our position absolutely clear, SkillSaajha does not collect:

We do not actively read, analyse, or use the content of your private messages for any purpose other than delivery and the safety circumstances described in section 15. We access stored message content only when required for security investigations, content reported by users, or compliance with valid legal process.

Under GDPR Article 6 and the DPDP Act, we must rely on a lawful basis for every processing activity. Our bases are:

6.1 Performance of a Contract

To provide the Service you have signed up for, including creating your account, displaying your profile, enabling discovery, processing swipes, creating matches, delivering messages, and helping you block or report users.

6.2 Consent

For optional features that go beyond core service delivery, including: using your approximate location for distance-based discovery, sending push notifications to your device, and using your profile photo if you choose to upload your own. You can withdraw consent for any of these at any time without affecting the lawfulness of past processing.

6.3 Legitimate Interests

To keep the platform safe and functional, including preventing abuse, fraud, and harassment; debugging issues; analysing aggregate usage to improve features; and protecting our infrastructure. Before relying on legitimate interests, we have considered whether they are overridden by your rights and freedoms and concluded they are not, given the limited nature of the processing and the safeguards we apply.

6.4 Compliance with Legal Obligations

To meet our obligations under applicable law, including responding to lawful requests from authorities, retaining records required by law, and reporting breaches when required.

7. How We Use Your Information

We use your information for the following purposes, and only these:

We will not use your personal information for purposes that are materially different from these unless we ask for your consent in advance.

8. Data Flow by Feature

This section explains, plainly and feature by feature, what happens to your data when you use SkillSaajha.

When you sign up

Your name, email (or phone, when implemented), and any other onboarding details are stored in our database. A unique user ID is generated. If you signed in with Google or LinkedIn, only the minimum profile fields shared by those providers are received.

When you complete your profile

Each field you fill in (age, gender, city, bio, skills, etc.) is saved to your user profile. If you upload a profile photo, the image is uploaded to our secure storage provider (Supabase Storage), and a reference URL is saved to your profile. If you pick an illustrated avatar, only the identifier of that avatar is stored.

When you open the Discovery (Sync) feed

We query our database for users who match your filters (your teach and learn skills, your meeting and distance preferences, your city or location). We exclude anyone you have already swiped on, anyone who has blocked you, and anyone you have blocked. The matched candidates are returned to your device for display.

When you swipe right or skip

Each swipe is recorded as a row in the relevant table (interest if right, skip if left). If the other person had already swiped right on you, a match record is created.

When you match

A match record links your account to the other user's account. Both of you can now message each other through the in-app chat.

When you send a message

The text of your message is stored in our database with the match ID, sender ID, and timestamp. It is delivered to the recipient when they open the app or receive a push notification. We do not actively read message content.

When you plan a session

SkillSaajha provides quick links to open Google Meet, Zoom, or WhatsApp so you can connect outside the app. When you tap one of these, you leave SkillSaajha and are subject to the destination service's own privacy practices. We do not pass any of your personal information to those services on your behalf.

When you block a user

A block record is added to our database. The blocked user no longer appears in your discovery, your existing match (if any) becomes inaccessible, and your profile is hidden from them.

When you report a user

The report, the reason you selected, and any optional notes are stored. The reported user is not told who reported them. SkillSaajha staff may review the report, review the relevant context (which may include stored messages between you and the reported user), and take action.

When you delete your account

Deletion is immediate and permanent. When you confirm deletion, your account, profile, skills, messages, and personal data are erased from our systems straight away. There is no recovery period and we cannot restore a deleted account, so please be certain before you confirm. A limited amount of data may be retained only where the law requires it, as described in section 19.

9. Profile Visibility

By design, certain information from your profile is visible to other SkillSaajha users. This is what skill exchange requires.

Visible to other users:

Not visible to other users:

You can also turn off discoverability from Settings → Privacy, which hides your profile entirely from the discovery feed. Existing matches and conversations are not affected by this setting.

10. Location Information

SkillSaajha uses location for one purpose only: helping you discover users who are close enough to meet in person, if you have selected that preference.

Location is used in two ways:

What we do not do:

You can revoke location permission at any time through your device settings (Android: Settings → Apps → SkillSaajha → Permissions; iOS: Settings → Privacy → Location Services → SkillSaajha). When you revoke, your stored coordinates are removed from our server within a reasonable time. Without location, you can still use SkillSaajha city-wide and online-only.

11. Push Notifications

If you grant permission, SkillSaajha will send you push notifications for:

To deliver notifications to your specific device, we store a push token issued by the operating system (Apple Push Notification Service for iOS, Firebase Cloud Messaging for Android, accessed through Expo's push notification service). The token is associated with your account but contains no personal information by itself.

You can disable push notifications at any time from your device's notification settings or by signing out. Disabling them deletes the token from our records on next sign-in.

12. Messages, Files, and Voice Notes

Matched users can send text messages, photos, PDF documents, and voice notes to each other. All of this content is stored so it can be delivered and remain available to both participants across devices.

Photos you send are stripped of location and camera metadata (EXIF) before upload, so a photo you share does not reveal where it was taken.

12.1 Clearing and deleting

13. Audio and Video Calls

Matched users can call each other with audio or video directly inside SkillSaajha.

14. External Meeting Links

You can also choose to move a conversation to an external service such as Google Meet, Zoom, or WhatsApp. When you tap one of these:

Please review the policies of those services if you have specific concerns about how they handle your data.

15. Safety, Blocking, and Reporting

SkillSaajha provides tools to protect your safety and the safety of the community:

14.1 Blocking

Blocking another user is one-tap. Once blocked, they cannot see you and you cannot see them. Existing matches are deactivated. Block records are stored privately and never shared with the blocked user.

14.2 Reporting

When you report a user, we record your user ID, the reported user ID, the reason you selected, and any text you optionally provide. We may also review the related context, including messages exchanged between you and the reported user, blocks, and other reports against the same person.

To investigate the report fairly, our team may access stored messages between the reporter and the reported user. Where we cannot reach a clear conclusion, we may apply temporary restrictions while we gather more information. We treat the identity of the reporter as confidential unless legally compelled to disclose it.

14.3 Retention of Safety Records

Reports and block records may be retained for up to two years after they are filed, even if the reporter or reported user later deletes their account. This is to detect repeat offenders, defend against legal claims, and comply with law.

16. Analytics and Admin Access

SkillSaajha does not use any third-party analytics SDK such as Mixpanel, Amplitude, PostHog, Firebase Analytics, or Facebook SDK. We do not embed any analytics tracker in the app.

Instead, we operate a first-party admin dashboard that queries our own database to understand how the platform is being used. The admin dashboard processes:

Access to the admin dashboard is restricted to authorised SkillSaajha personnel and is logged. We do not use admin data for marketing or sell it to anyone.

17. Sharing of Information

We do not sell your personal information to anyone.

We share information only in the following limited circumstances:

16.1 With Other Users

The profile fields listed in section 9 are visible to other SkillSaajha users by design.

16.2 With Service Providers (Data Processors)

We rely on trusted third-party service providers to operate the Service. Each is bound by contract to process data only on our instructions:

16.3 For Legal Reasons

We may disclose information when we have a good-faith belief that it is necessary to comply with a valid legal request, protect the rights, property, or safety of SkillSaajha, our users, or the public, or enforce our Terms of Service. Where lawfully permitted, we will notify you of such requests before complying.

16.4 In Business Transfers

If SkillSaajha is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred. We will notify you of any such transfer, and any new owner will be required to honour this Policy.

18. International Data Transfers

SkillSaajha is operated from India. However, several of our service providers store and process data in other countries, including the European Union, the United Kingdom, and the United States. When personal data is transferred internationally:

By using SkillSaajha, you understand and agree that your personal information may be transferred to, stored in, and processed in countries other than your own.

19. Data Retention

We retain personal information only for as long as is necessary for the purposes set out in this Policy, in line with our retention schedule below:

Type of dataRetention period
Active account data (profile, skills, preferences)While account is active
Messages between matched usersWhile either participant keeps the account active
Swipes (interests and skips)While account is active; deleted with the account
Push notification tokensWhile the device is signed in and notifications are enabled
Deleted accountsErased immediately on confirmation; no recovery period
Reports and abuse recordsUp to 2 years from filing
Block recordsUp to 2 years, or until account is deleted (whichever is later)
Login and security logsUp to 90 days
Database backupsUp to 90 days; backups containing deleted data are overwritten in the normal rotation
Support correspondenceUp to 3 years

20. Account Deletion

You can request deletion of your account at any time by:

Once you request deletion:

  1. Your account is deleted immediately and permanently. Your profile, skills, matches, messages, and any files you shared are erased from our systems at once.
  2. There is no recovery period. We cannot restore a deleted account, so please be certain before you confirm.
  3. A limited amount of data may be retained only where the law requires it, as set out in the data retention section above.

The following data is retained even after permanent deletion for the reasons indicated:

21. Your Rights

Under GDPR, the DPDP Act, and similar laws, you have the rights described below. To exercise any of them, contact our Grievance Officer (section 27) or email hello@skillsaajha.com. We will respond within 30 days.

20.1 Right to Access

You can ask for a copy of the personal information we hold about you. We will provide it in a structured, commonly used format (e.g. JSON or CSV).

20.2 Right to Correction

You can ask us to fix inaccurate or incomplete information. Most fields are directly editable in the app under Settings → Edit profile. For anything you cannot change yourself, email us.

20.3 Right to Deletion

You can ask us to delete your account and personal data. See section 19 for the deletion workflow.

20.4 Right to Restriction

You can ask us to limit how we use your data in certain situations - for example, while we are investigating a request for correction.

20.5 Right to Object

You can object to specific uses of your data, including processing based on legitimate interests, where you believe your fundamental rights override those interests.

20.6 Right to Data Portability

You have the right to receive your data in a portable format and, where technically feasible, to ask us to transmit it directly to another service. You can request an export at any time by emailing us, and we will provide it in a structured, commonly used format within 30 days.

20.7 Right to Withdraw Consent

For processing that depends on consent (such as location use or push notifications), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

20.8 Right to Lodge a Complaint

If you believe we are processing your data unlawfully, you have the right to complain to your local data protection authority:

22. Data Security

We take reasonable technical and organisational measures to protect your information. These include:

While we work hard to keep your information safe, no online system can be 100% secure. We strongly encourage you to choose a strong sign-in method, keep your device and the SkillSaajha app updated, and be cautious about sharing personal details in chat or your bio.

23. Data Breach Notification

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

24. Cookies and Similar Technologies

The SkillSaajha mobile application does not use cookies in the traditional sense, because mobile apps do not use a browser. The app stores a sign-in token securely on your device so you do not need to log in every time. It also stores small bits of preference data locally to make the app faster.

The SkillSaajha website (skillsaajha.com) uses a small number of strictly necessary cookies for security and to keep you signed in if you visit a logged-in part of the website. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies on our website. For full details, see our Cookie Policy.

25. Third-Party Service Providers

The third parties that process personal information on our behalf, the purpose of each, and the type of data they receive are listed below.

ProviderPurposeData received
SupabaseDatabase, authentication, file storageAll account, profile, message, and activity data
VercelWebsite hostingServer logs, IP address for security purposes
Expo Push / APNs / FCMPush notification deliveryPush notification token and notification payload (which may contain a notification title and body)
GoogleOAuth sign-in if chosenThe minimum identifying fields shared by Google (name, email, profile picture)
LinkedInSSO sign-in if chosenThe minimum identifying fields shared by LinkedIn (name, email, profile picture)
SMS gatewayPhone OTP deliveryPhone number, OTP value, and timestamp
SentryCrash and error reportingAnonymised crash reports; never personal data or message content

Each provider has its own privacy practices. We review their commitments before engaging them and we choose providers that meet recognised industry standards.

26. Automated Decision-Making

SkillSaajha does not make decisions that significantly affect you based solely on automated processing. The discovery feed orders potential matches based on overlap between your skills and theirs, your distance preferences, and other neutral criteria. This is not a decision about you in the legal sense - you are always free to swipe, skip, or ignore any suggestion.

We do not perform credit scoring, profiling for the purpose of legal or significant decisions, or any similar automated decision-making.

27. Grievance Officer

As required by the DPDP Act, 2023, we have appointed a Grievance Officer to handle your privacy-related concerns:

Name: Amit Singh
Address: Village & Post: Hetimpur, District Deoria, Uttar Pradesh 274206, India
Response Time: Within 30 days of receipt

If you are not satisfied with the response from our Grievance Officer, you may approach the Data Protection Board of India. SkillSaajha currently operates in India. If you are using the Service from the EU or the UK and believe your local data protection law applies, you may also contact your national supervisory authority.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new features, or legal requirements. When we make significant changes, we will:

Continuing to use SkillSaajha after a change indicates that you accept the updated Policy.

29. Contact Us

If you have any questions, requests, complaints, or feedback regarding this Privacy Policy or how we handle your data, please contact us:

Thank you for reading. We have tried to write this Policy as plainly and accurately as we can. If anything is unclear, please ask us - we mean it.