Jhoom.

Privacy Policy

Last updated: 10 August 2026

Jhoom is a dating and chat app for adults, operated by Solovo LLC (“we”, “us”, “Solovo”). This page explains what we collect, why, who else sees it, how long we keep it, and how you exercise your rights over it — including the rights available to you under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) if you are located in India.

This policy is published at jhoom.expo.app/privacy.html so you can read it without installing the app. The app itself is available in English, Hindi (written in Latin script) and Russian; this policy is currently published in English only.

1. Who we are

Solovo LLC operates the Jhoom mobile application (“Jhoom”, “the app”). For any question about your data, or to exercise any of the rights below, write to:

• General privacy questions: jhoom.support@gmail.com
• Grievance Officer (India): Anna Kryzhevich, Solovo LLC, jhoom.support@gmail.com

We acknowledge grievances within 24 hours and aim to resolve them within 15 days, in line with Indian grievance-redressal timelines. If your complaint involves a request to take down specific content, we act on valid requests within 36 hours.

If you are not satisfied with how we’ve handled your complaint, you have the right to file a complaint with the Data Protection Board of India, once it is operational for public complaints, or with the relevant authority in your jurisdiction.

2. What we collect

Data	Why	Legal basis (India)
Name, age, gender, city, bio, languages	To build your profile and show you people worth meeting.	Consent
Photos you upload	Shown on your profile. Reviewed automatically and, if flagged, by a human moderator.	Consent
Messages, likes, answers to questions	To deliver the conversation and the matching the app is for.	Consent
Account login and password	Created by the app on your device so you can return to your account. We never ask for your real email.	Consent
Notification token	To send you a push when someone writes or likes you. You can turn notifications off in the app.	Consent
Purchases of coins and VIP	To credit what you bought. Card details never reach us — Google Play handles payment.	Consent / contract performance
Advertising identifier	Used by Google AdMob to show ads inside the app, and by Tenjin to attribute installs to ad campaigns.	Consent
Reports you send about other people	To review them and act. Kept even if you later delete your account, because the decision has to survive the complaint.	Legal obligation / legitimate use (safety)
Usage data — which screens you open, which buttons you press, how long a visit lasts	To find where people get stuck and fix the product. Tied to your account id, never to your name, and it never includes what you wrote to anyone.	Consent

We do not collect your phone number, your contacts, your precise location, or your real email address.

Note on sensitive data. Because matching preferences can reveal sexual orientation, we treat gender and preference fields with the same heightened care as other sensitive personal data — they are never shared with advertising or analytics partners, and are used only for matching and shown to other users as part of your profile.

3. How we ask for your consent

Before you can finish creating a profile, the app asks you to accept these terms and this policy. Today this is a single consent given at registration, covering everything in the table above; it is not split into separate switches for advertising and analytics, and there is no in-app screen for managing consents after the fact. We are working on both.

What you can control today:

• Push notifications can be turned off at any time in Profile → Notifications.
• Advertising is not shown to people holding a VIP pass.
• Usage data cannot be switched off on its own yet. It carries no photos and no message text, and deleting your account stops it.
• Withdrawing consent altogether means deleting your account (Section 5). Withdrawal does not affect processing already carried out lawfully before it.

4. Who else sees it

• Supabase — our hosting and database provider, storing everything above on our behalf.
• Google — AdMob for advertising, Play Billing for purchases, Firebase for delivering notifications to the device, and Cloud Vision (United States) to check an uploaded photo automatically before a person reviews it.
• Expo — our notifications are handed to Expo’s push service, which passes them on to Google. It receives your device’s notification token and the text shown in the notification, which for a new message is the sender’s name and their message.
• Amplitude — receives the usage data in the table above: which screens you opened and which actions you took, under your account id. It never receives your photos, your messages, or your login.
• Tenjin — receives your advertising identifier and a short list of milestones (you registered, added a photo, matched, bought coins), so we can tell which advertising brought people who actually use the app. It never receives your photos, your messages or your profile text.
• Groq — when an automated profile replies to you, Groq receives the recent messages of that conversation together with your first name, city and age, so that the reply makes sense. It never receives your photos, your login, or your contact details.
• Other users — see your profile, your photos and what you write to them. Nothing else.

We do not sell your data.

Cross-border transfers. Some of the providers above may process data outside India, including in the United States. Where we transfer personal data outside India we rely on contractual safeguards with our processors and comply with any country-specific restrictions notified by the Indian government under the DPDP Act. We will update this section if a restricted-country list affecting our processors is published.

5. How long we keep it, and what deletion actually does

We keep your data while your account exists. You can delete your account at any time in Profile → Privacy & safety, or from this page without installing the app.

Deleting your account does the following, immediately:

• Your name is replaced, and your bio, city and profile photo are cleared — your profile stops being shown to anyone and stops appearing in the feed, in likes and on the boards.
• Your notification token is deleted and we stop sending you anything.
• Sign-in is closed permanently. The account cannot be reopened.
• Messages you already sent stay in the other person’s conversation — we cannot rewrite someone else’s history — but they are no longer shown as yours anywhere.
• Your likes and your purchase history are retained in an anonymised form: likes because they are part of another person’s record, and purchases because we have to be able to answer a payment dispute.

Retention periods that apply after deletion:

• Reports you filed, and the registration information tied to your account, are retained for 180 days after account deletion, strictly to preserve the integrity of safety decisions and to allow investigation of misconduct, as required under Rule 3(1) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. This period is extended if a court or government agency lawfully requires longer retention for an ongoing investigation.
• Security and access logs relating to your account are retained for as long as needed to investigate abuse and for any period required by law.
• Advertising and analytics identifiers are deleted or de-linked from your account within 30 days of account deletion.

We do not keep personal data longer than needed for the purpose it was collected for. Under Section 8(7) of the DPDP Act, 2023 we erase personal data once its purpose is no longer served or your consent is withdrawn, except where retention is required by law, as with the categories above. If you request access to, correction of, or erasure of your data under Section 11 or 12 of the DPDP Act, we will respond within a reasonable time and in any case no later than 90 days.

6. Your rights

If you are in India, under the DPDP Act you have the right to:

• Access — request a summary of the personal data we hold about you and the identities of the entities we have shared it with. Write to us and we will respond.
• Correction and completion — fix or update inaccurate or incomplete data directly in the app, or by contacting us.
• Erasure — delete your account as described in Section 5.
• Withdraw consent — as described in Section 3.
• Grievance redressal — contact our Grievance Officer (Section 1); if unresolved, escalate to the Data Protection Board of India.
• Nominate — name another individual who may exercise these rights on your behalf in the event of your death or incapacity. Write to us and we will record the nomination; there is no in-app screen for this yet.

Other choices available to everyone, regardless of location:

• Edit or remove your profile details and photos at any time in the app.
• Turn push notifications off in Profile → Notifications.
• Block anyone; blocked people cannot write to you and disappear from your feed.
• Report any profile or message from the “⋯” menu.

7. Security

We apply reasonable technical and organisational measures to protect your data, including encryption in transit, access controls limiting who at Solovo can view raw data, and review of our third-party processors’ security practices.

If a data breach occurs that is likely to affect you, we will notify the Data Protection Board of India and affected users without undue delay, describing the nature of the breach and the steps we are taking, in line with our obligations under the DPDP Act.

No system is completely secure. Keep the login and password the app gave you to yourself, and report anything suspicious to us.

8. Age

Jhoom is for people aged 18 and over. We ask you to confirm your age when creating an account, and we do not knowingly keep accounts of minors. If you believe an underage account exists, report it in the app or write to us and we will investigate and remove it. See also our child safety standards. We are continuing to improve our age-assurance measures and will update this section as we add verification steps.

9. Changes

If this policy changes, the date at the top changes with it, and material changes are announced in the app.

10. Governing law

This policy is governed by the laws of Armenia, without prejudice to any mandatory data protection rights you have under the law of the country where you reside, including the DPDP Act, 2023 (India) where applicable.