This policy explains how JKNEETU SON ENTERPRISES (“we”, “us”) handles personal data on this website and in our products, including the Loomii app. We are the Data Fiduciary under the Digital Personal Data Protection Act, 2023. Loomii’s own privacy policy adds app-specific detail; where the two differ for Loomii, the Loomii policy applies.
The short version
- We collect as little as possible. Loomii works without a phone number, email address or contact list.
- We never sell personal data and we do not show third-party ads.
- Anonymous messages stay anonymous: we never show a sender’s identity to the person they message.
- You can see, correct or delete your data, and complain to our grievance officer at any time.
What we collect
On this website
This website does not use sign-ups, forms or tracking cookies. If you email us, we receive your email address and whatever you write. Our hosting provider keeps standard server logs (IP address, browser, time) for security, and fonts load from Google Fonts, which receives your IP address to deliver them.
In our apps (for example Loomii)
- Account basics: your chosen username, profile photo or avatar if you add one, the question on your link and your settings.
- Age check: your birth month and year are used to confirm you meet the minimum age; we store only a one-way keyed hash of them, used to recover your account.
- Device identifiers: a random sign-in token and a keyed hash of your device ID, so your account survives a reinstall and so invite rewards cannot be farmed.
- Messages and content: messages you receive, quiz and poll answers, reports and blocks.
- Sender hints: for a message sent to you, an approximate city, the app the sender came from and their device type — never their name, number or exact location.
- Purchases: order IDs and status from Google Play. Card and UPI details are handled by Google; we never see them.
- Merch rewards: name, phone and delivery address, only when you order a reward, deleted after delivery or cancellation.
- Usage analytics: which screens and features are used (no message text), which you can switch off in the app’s settings.
- Notifications: a push token, if you allow notifications.
What we do not collect
Your contacts, precise GPS location, call or SMS logs, your photos (except the one you pick yourself) and your passwords for other services. We do not use your data to build advertising profiles.
Why we use it
| Purpose | Basis under the DPDP Act |
|---|---|
| Run your account, deliver messages, games, polls and quizzes | Your consent when you sign up |
| Keep people safe: filters, abuse detection, reports, bans and rate limits | Consent and legitimate uses (Section 7), including compliance with law |
| Process purchases, rewards and refunds | Consent and contractual necessity |
| Improve the product with usage analytics | Consent — you can switch it off any time |
| Answer support emails and grievances | Consent / legitimate uses |
| Respond to lawful requests from Indian authorities | Legal obligation |
Who we share it with
Only with service providers (Data Processors) that help us run our products, under contracts that limit their use of the data: cloud hosting and database providers, Google (Play billing, Firebase notifications and analytics), email services and, for merch rewards, a courier partner (name, phone and address only). We may disclose data when Indian law requires it, to protect someone from serious harm, or as part of a merger or acquisition where this policy keeps applying.
Where your data is stored
Some of our providers store data on servers outside India. We only transfer data to countries not restricted by the Government of India under Section 16 of the DPDP Act, and we protect it in transit with encryption.
How long we keep it
- Account data and messages: until you delete your account or a message.
- Deleted accounts: removed from live systems within 30 days; encrypted backups roll off within 90 days.
- Merch delivery details: deleted once the order is delivered or cancelled.
- Records we must keep by law (for example tax or safety records): only for the period the law requires.
How we protect it
Encryption in transit (HTTPS), keyed hashes instead of raw identifiers where possible, least-privilege access for our team, audit logs for admin actions and regular reviews. No system is perfect; if a personal data breach happens we will inform the Data Protection Board of India and affected users as the DPDP Act requires.
Your rights
Under the DPDP Act you can: get a summary of your data and how it is processed; correct, complete or update it; erase it; withdraw consent at any time (it does not undo processing already done); nominate someone to exercise your rights if you die or become incapacitated; and raise a grievance. In Loomii you can export or delete your data from Settings, or visit www.loomii.link/delete-data. Otherwise email app.support@loomii.link — we respond within 15 days.
Children
Our products are not for anyone under 13. If you are under 18, please use them with the knowledge of a parent or lawful guardian; we follow the DPDP Act’s requirements for children’s data, including not tracking or targeting ads at children. If you believe a child under 13 is using our products, tell us and we will remove the account.
Changes to this policy
If we change this policy in a way that matters, we will update the date above and tell you in the app or on this site before the change takes effect.
Contact & grievance officer
- Name: Aditya
- Designation: Founder & Grievance Officer
- Email: app.support@loomii.link
- Phone: 8178893255
- Address: D / C - 566, Gali No D 1, Sangam Vihar, Pushpa Bhawan S.O, District: South Delhi, Delhi – 110062
If you are not satisfied with our response, you may approach the Data Protection Board of India.
Questions about this policy? Email contact@jkneetuson.tech. Other policies: Terms of use · Refunds & cancellation · Shipping & delivery · Cookie policy · Grievance redressal · Acceptable use · Child safety · Disclaimer