Skip to content
Deshi Ghotok
বাংলা/English

Trust & care

Privacy Policy

Your profile tells a personal story. This policy explains what we collect, what other members can see, and how you stay in control.

Effective: 2026-10-26 · Version 1.2

On this page

  1. Ghotok registration and biodata
  2. Who this policy covers
  3. Profile insights and video introductions
  4. Information you provide
  5. Face checks and verification
  6. Device permissions and technical information
  7. How information is used
  8. Who can see your information
  9. Retention and deletion
  10. Your choices and privacy requests
  11. Security, age and policy updates
Terms of ServicePrivacy PolicyDelete your accountSafety & community guidelinesSupport & privacy contact

01Ghotok registration and biodata

If you register as a local matchmaker, we collect your name, photo, contact number, area and approximate biodata counts for our authorized team to review and contact you. Your registration and photo are not public. You can update your information or request account deletion.

You can submit the public Ghotok interest form without an account. We collect your name, WhatsApp number, approximate biodata counts, division, district and optional thana, plus your consent to contact you and to provide consented biodata without exposing candidates’ phone numbers. Before submission, a draft stays in that browser tab for up to 24 hours and is cleared after a successful submission. Only authorized Ghotok staff can view submitted details; they are not published. You can request correction or removal through our privacy contact.

Matchmakers must confirm the person’s consent before adding their biodata. Uploaded files are private to the submitting matchmaker; structured details become visible to anyone only when the matchmaker chooses to publish them. Do not include contact details in public fields. The matchmaker can edit, unpublish or delete an entry, although others may have retained copies of previously public information.

The optional WhatsApp group is operated through WhatsApp. Joining is your choice and subject to WhatsApp’s policies; other group members may see your WhatsApp profile and phone number.

02Who this policy covers

This policy covers Deshi Ghotok’s matrimonial app and website. The operator and privacy contact are listed below. It applies to members, visitors and people who contact us. We collect information needed to provide the features you use; optional profile fields remain your choice.

03Profile insights and video introductions

We record profile-card appearances, profile visits, new follows and new expressions of interest to show members their own profile statistics. These records are kept for up to 30 calendar days, with expired records removed by scheduled cleanup. The profile owner sees counts of distinct people for Today, 7 days or 30 days, not a list of visitors. Day boundaries follow Bangladesh time. These feature statistics are separate from optional usage analytics and advertising measurement.

An optional video introduction is recorded with the app camera and microphone and lasts no more than 21 seconds. We store it privately with optimized playback copies and a thumbnail. Other members can watch it only when your profile and photo-visibility settings permit; permission to view individual private photos does not grant access to your video. You can replace or remove the introduction. A video introduction is not identity verification.

04Information you provide

Account information may include your phone number, email where provided, profile identifier, sign-in credentials or session tokens, and consent choices. Never send us your password or one-time sign-in code.

Profile information includes details you choose to submit: name, date of birth or age, gender, marital status, city or area, education, occupation, family, lifestyle, religion, interests and partner preferences. Some of these details are sensitive. You can leave optional fields blank and should avoid publishing exact home addresses, identity document numbers or other people’s private information.

Photos, a voice introduction, stories, messages, reactions and reports are collected when you use those features. Financial-freedom information is optional; do not upload bank credentials or account balances. Payment providers handle payment credentials, and we may receive transaction references and membership status when paid services are available.

05Face checks and verification

A verification selfie is used for the face-check or review process shown in the app. If you request photo review, your front-camera selfie is uploaded so authorized staff can compare it with your current primary profile photo. It is never displayed to other members. Profile photos you choose to publish are separate from this private selfie. We do not publish verification evidence or identity documents as profile content.

If you choose NID verification or the meetup feature, we request separate consent to collect camera captures of the front and back of your NID and a fresh selfie, or a silent ten-second video. Authorised reviewers compare this evidence; this is manual review, not an official government registry check or a guarantee of identity or safety. Existing meetup invitations display current NID, phone and profile-photo verification statuses. Your match does not receive your document, phone number or verification recording. Raw NID and meetup evidence is scheduled for deletion seven days after a review decision; unfinished or unreviewed evidence is scheduled for deletion seven days after capture begins. Approval history and limited audit records remain until account deletion. These evidence periods are shorter than the account-deletion completion window.

The current automated face check detects whether an image contains a face; it does not recognize a person or establish their legal identity. Phone verification confirms access to a number. A review badge describes the specific check completed, and does not guarantee identity, intentions, background, compatibility or safety. Additional verification must have a clear explanation before new evidence is requested.

06Device permissions and technical information

Camera, photo access and microphone permissions are requested for the photo, selfie and voice features you choose to use. You can revoke permissions in device settings. An area entered in your profile is not permission for continuous location tracking.

The service may process request logs, IP addresses, browser or app version and error information for security and reliability. The app stores profile progress, settings, selected media and recovery drafts on your device. Sign-in tokens and chat draft text use platform secure storage. Voice recordings and selected photos remain files in app storage and are not end-to-end encrypted by this storage feature.

Essential storage supports sign-in, preferences and security. Google Analytics for Firebase starts automatically on the website and Android app unless a saved opt-out exists. Google receives page or screen visits, completed product actions such as reaching home after profile publication, technical device/browser information and a browser/app-instance identifier. We do not send profile details, partner preferences, messages, photos, contact details or payment credentials, and do not set an account user ID. Analytics advertising storage, Google signals and ad personalization are disabled. Website locations use fixed page labels without query strings or article slugs; admin pages are excluded. Fixed identifiers distinguish our initial journal guides, and broad source categories describe known referring services without sending raw referrer URLs. You can disable usage measurement through Privacy choices on the website or Privacy & diagnostics in the app without losing access. Disabling stops new events and clears website Analytics cookies or resets local app Analytics data; it does not delete information Google already received. Signing out resets the app analytics session without changing your tracking preference. Google privacy policy: https://policies.google.com/privacy.

After the server accepts a new Ghotok registration, the website sends `ghotok_registration_submitted` with a fixed `/ghotok` page location and title and an empty referrer. It includes no query string, account ID or registration form fields. Page views for `/ghotok` remain excluded. Turning off Google Analytics also prevents this event.

Optional Android crash reports are off by default and controlled separately under Privacy & diagnostics. If enabled, Firebase Crashlytics receives an error category, stack trace and basic app/device details; our service receives only a small error-stage summary. Reports do not include profile data, photos, messages, contact details or an account ID. Turning reporting off stops future collection and deletes unsent reports stored on the device; information already received by Firebase or our service cannot be withdrawn from there. Logging out turns this permission off.

In-app ads use Google AdMob. Its SDK may share IP addresses (including for a general location estimate), app and ad interactions, performance diagnostics and device or account identifiers, including the advertising ID when available, for advertising, analytics and fraud prevention. Required regional consent and available ad-privacy controls are handled through Google’s consent form. Device settings also let you reset or delete the advertising ID. Google’s privacy notice: https://policies.google.com/privacy.

Website Meta Pixel starts automatically on approved public marketing and journal pages unless you have saved an opt-out. PageView and GooglePlayClick events measure visits and actual Play Store button clicks; a click is not an install. Meta receives browser/cookie identifiers when available, page and referrer URLs, IP address and technical device/browser information, which can support advertising measurement and audiences. We do not add names, contact details, account IDs, profile details, messages or partner preferences. Automatic event configuration and advanced matching are disabled. Member, admin, sign-in and payment pages, unknown article paths and unexpected query parameters are excluded. Turn Meta measurement off through Privacy choices to stop new events and clear first-party Meta cookies. This does not delete previously received data or guarantee removal from existing audiences. Policy: https://www.facebook.com/privacy/policy/.

A successful first Ghotok registration may also send the custom event `GhotokRegistrationSubmitted` on the exact `/ghotok` page, only when Meta measurement is enabled and the URL has no query or fragment. The event contains no registration form details and does not send a PageView for this page. Meta may still receive the clean page URL and referrer, browser/cookie identifiers, IP address and technical device/browser information. Your saved Meta opt-out blocks this event.

After the server saves a Ghotok lead on `/ghotok/lead`, the website can send Meta the custom event `ghotok-lead` when Meta measurement is enabled and your saved choice allows it. The event has an empty payload: names, WhatsApp numbers, biodata counts and location are not sent, and this page does not send a PageView. Meta may receive the page URL with approved campaign parameters, browser/cookie identifiers, IP address and technical device/browser information. Your saved Meta opt-out blocks the event.

Meta app measurement: new Android releases enable limited measurement by default unless a saved opt-out exists; earlier releases required opt-in. When enabled, the Meta Android SDK sends app opens, completed registration, an installation marker and technical information such as app version, device characteristics, IP address and an SDK-generated app-instance identifier to Meta to measure advertising results. We do not send profile details, photos, religion, partner preferences, conversations, phone numbers or email addresses to Meta. Advertising-ID collection, automatic event logging, automatic matching and screen indexing are disabled. Activity recorded while measurement was off is not replayed.

You can decline optional Meta measurement without losing app access, or turn it off later in the same settings page. This stops new measurement events; the SDK will not initialize on the next app launch. Requests already in progress may finish, and turning it off does not delete information already received by Meta. Logging out preserves your device measurement choice. For information already held by Meta, its Privacy Policy and privacy-request tools apply: https://www.facebook.com/privacy/policy/. Contact our privacy email for questions about Deshi Ghotok’s processing. This app permission is separate from Google AdMob privacy choices.

07How information is used

We use information to create and maintain accounts; present profiles according to visibility choices; suggest potential matches using profile details and preferences; enable selected communication features; carry out disclosed verification checks; handle support, reports and deletion requests; manage purchases; and protect against misuse. Suggestions are not a prediction or guarantee of a successful marriage.

08Who can see your information

Profile details and published media are shown to the audience indicated by the app’s visibility controls. Messages are available to the people in that conversation. Hidden phone numbers and verification selfies are not public profile fields. Someone who receives your content may retain a copy or screenshot, so share carefully.

Authorized personnel and service providers may access information needed for hosting, authentication, delivery, payment handling, verification review, security or support. They should receive only information required for that purpose. Information may be disclosed to comply with a valid legal requirement, protect people from harm or investigate fraud. A change of operator requires appropriate notice and protection of existing privacy commitments. We do not sell your personal information.

Our website, app backend, databases and private object storage are currently hosted on Railway in Singapore. Google provides Google sign-in, Firebase Cloud Messaging and AdMob advertising; PayStation handles website payments when you choose to purchase membership. Optional app-ad measurement uses Meta as described above. Google, Meta and payment providers may process relevant information in other countries under their own terms and privacy notices. Access to account data and private media is restricted through authenticated services and authorised staff access; hosting and storage providers receive data needed to operate their services. Contact our privacy email to ask about processing locations, provider arrangements or safeguards relevant to your information.

09Retention and deletion

We retain account information while it is needed to provide the service. On a verified deletion request, your profile is hidden and new contact is stopped immediately. Account data, profile media, verification evidence and data linked to your account are permanently deleted within 90 days of the request, subject to the specific exceptions below. See Account Deletion for the request steps.

If you separately agree to have your profile featured on our public website, we keep a separate blurred-photo copy with the name and area shown there. We keep that snapshot while the profile remains selected; it is displayed only while the showcase is enabled and may remain in storage after account deletion. It is not used for matching or account access. You can ask us to remove it through Support; removing it from the showcase also deletes the stored copy.

Limited records may be retained where a specific legal obligation, unresolved dispute, payment accounting requirement or documented fraud or safety investigation requires it. They must be restricted to that purpose, excluded from matching and marketing, and removed when that need ends. We explain the category, reason and applicable retention period when responding to your request, unless law prevents disclosure. Backups containing deleted account data must expire within the same 90-day window; restored backups must not reactivate a deleted profile.

Information another member has independently copied, saved or received cannot always be recalled. Transaction records held by payment providers follow their own legal retention obligations. Logging out, hiding a profile or uninstalling the app is not an account deletion request.

10Your choices and privacy requests

You can edit available profile fields, adjust supported visibility controls, revoke device permissions and request account deletion. You may also ask for access, correction or a copy of your information, or raise a privacy complaint through Support. We confirm ownership before providing private information or taking irreversible action. Rights and response requirements depend on applicable law; these terms do not remove those rights.

11Security, age and policy updates

We aim to protect information through appropriate access controls and security safeguards, but no online service can guarantee absolute security. Report suspected exposure through Support. Deshi Ghotok is for adults aged 18 or over who also meet the applicable legal requirements to marry. If you believe a minor’s information has been submitted, report it so access can be restricted and the information removed.

The date and version below identify this policy. Material changes will be communicated through the service before they take effect where required. New sensitive uses require appropriate disclosure and permission; an updated policy alone is not consent to an unrelated use.

Contact Deshi Ghotok

Operator: Hard Nut Inc

Support: [email protected]

Email a privacy requestEmail support

Opens your email app. Send the email to submit your request. No password or sign-in code is needed.

Facebook pageFacebook group

© 2026 Deshi Ghotok

About usHow it worksPricingFAQsSupportPrivacy PolicyTerms of Service