Kovyxa
Kovyxa

Last updated: October 16, 2026

Privacy Policy

At Kovyxa, your privacy is our foundation — not an afterthought. This policy explains exactly what data we collect, why we collect it, how we protect it, and the choices you have.

1. Who We Are

Kovyxa ("we", "us", "our") is a privacy-first dating platform operated by Pawan Kumar (an individual, operating as Kovyxa), India. Our platform is accessible at kovyxa.com and through our web application.

For any privacy-related queries, contact us at: pawan@kovyxa.com

2. Data We Collect

2.1 Account Information

  • Name and email address from your Google account (you sign in with Google, so we never receive or store a password)
  • First name, last name, date of birth, and gender

2.2 Profile Information (You Choose What to Share)

  • Professional details: job title, industry, work experience, education
  • Personal preferences: lifestyle, relationship goals, values, interests
  • City and native place (never your precise GPS location)
  • LinkedIn URL and GitHub URL (only shared with other users after you explicitly choose to "Reveal")
  • An AI-generated summary of your profile based on the information you provide

2.3 Verification Data

  • A live selfie (used only to check you are a real person; never shown to other users)
  • LinkedIn sign-in, if you choose it (URL and confirmation status)
  • We do not ask for any government ID

2.4 Usage and Communication Data

  • Messages exchanged within the app. They are encrypted in transit (TLS) and stored on our servers so they can be delivered. Chats are not end-to-end encrypted: if a conversation is reported, authorised staff may read it to keep members safe. Voice and video calls are never recorded.
  • Chat game (optional): only when one of you sends a game invite and the other accepts, both profiles, your latest 50 messages and a short summary of earlier messages are used by our AI to write the questions. Phone numbers, emails, links, social handles and names are removed first. The summary is never shown to anyone and is deleted when you unmatch or block.
  • Kundli milan (optional): your birth time and birth city, if you add them. They are used only to calculate the Moon's position for a Kundli milan with a match who also agreed, are never shown to anyone, and you can change them anytime. The report (Moon sign, nakshatra and guna score) is shown only to the two of you and is deleted when you unmatch or block.
  • Match actions: likes (with an optional note), passes and matches
  • Whether you arrived through one of our links or from a site like Google or ChatGPT (counted per source, not used to profile you)
  • Device type, browser, IP address, and timezone (for security and fraud prevention)

2.5 Music (optional: Spotify or YouTube Music)

  • If you connect Spotify, the top artists and songs you choose to show on your profile. You can remove them or disconnect anytime.
  • If you connect YouTube Music, the title, cover image, song count and link of up to 3 playlists that you choose to show on your profile

2.6 Push Notification Tokens

  • Browser push subscription tokens (if you grant notification permission), used only to deliver notifications about likes, matches and messages

2.7 Payments

  • When you buy credits online, payment is handled by our payment partner (UroPay and the bank or UPI app you use). We receive the order status and amount, never your card or UPI PIN.

3. How We Use Your Data

PurposeLegal Basis
Provide and operate the platformContract performance
Match you with compatible profiles using AIContract performance
Send notifications about matches and messagesLegitimate interest / Consent
Verify that you are a real personLegitimate interest
Prevent fraud, abuse, and harassmentLegitimate interest / Legal obligation
Send service-related emails (e.g. account alerts)Contract performance
Comply with legal requirementsLegal obligation

We never sell your personal data to third parties. We do not use your data for advertising profiling.

3A. Google User Data (Sign in with Google and YouTube)

Kovyxa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

  • Sign in with Google: we receive your name and email address and use them only to create and secure your Kovyxa account.
  • YouTube Music (optional):Kovyxa uses YouTube API Services. When you tap "Connect YouTube Music", we request read-only access (youtube.readonly) and use it once to list your own playlists so you can choose which ones to show on your dating profile. We store only the playlists you choose (title, cover image, song count and link). We do not store your Google access token, and we do not read your watch history, liked videos or subscriptions, or post, edit or delete anything on YouTube.
  • Playlists you choose are visible to other Kovyxa members on your profile. You can remove them at any time from your profile.
  • Google user data is never sold, never used for advertising, never used to train AI models, and never used to create or edit images of any person. Kovyxa's AI features only produce text (bio ideas, openers, compatibility notes).
  • By connecting YouTube you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
  • You can revoke Kovyxa's access at any time from your Google Account third-party connections page. Removing your playlists or deleting your Kovyxa account deletes the stored playlist data.

4. Your Profile Is Anonymous by Default

Kovyxa is built on the principle of anonymous discovery. By default:

  • Other users see an anonymous avatar, your initial, age, city, professional context, the prompts you answer and what you have in common — never your full name, photo or social links.
  • Your LinkedIn and GitHub URLs are only shared when you explicitly choose to reveal them to a specific matched user.
  • Your verification selfie is never visible to other users under any circumstances.

5. Data Sharing

We only share your data in the following limited situations:

  • Other Kovyxa users: Only the profile fields described in Section 4 above. Revealed information is shared only upon your explicit action.
  • Service providers: We use trusted third-party vendors to run Kovyxa: website hosting (Vercel), our own server, email delivery (Resend), AI text features (Google Gemini; contact details are removed before anything is sent) and payments (UroPay). They process data only to provide their service to us.
  • Legal requirements: We may disclose data if required by law, court order, or to protect the safety of users.
  • Business transfers: In the event of a merger or acquisition, your data may be transferred. We will notify you in advance.

6. Data Retention

  • Active accounts: Data is retained for as long as your account exists.
  • Deleted accounts: Your profile is deactivated immediately and hidden from Discover. If you do not sign back in within 30 days, your account is permanently deleted together with your messages and verification selfie.
  • Verification selfie: Stored securely and used only for identity and safety checks until you delete your account. Never shown to other users.
  • Visit counts per source: Kept as totals only. We do not use third-party analytics.

7. Security

We implement the following technical and organisational measures to protect your data:

  • All data in transit is encrypted using TLS 1.2+
  • Sign-in is through Google, so we never hold your password
  • Chats are not end-to-end encrypted; voice and video calls are encrypted between the two devices (WebRTC) and never recorded
  • API access is authenticated using JWT tokens with short expiry
  • Our servers are hosted within secured data centres with restricted access
  • Verification selfies are never shown to other users
  • Regular security reviews and dependency updates

No system is 100% secure. If you suspect your account has been compromised, contact us immediately at pawan@kovyxa.com.

8. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of all personal data we hold about you
  • Correction: Update or correct inaccurate information directly in your profile, or by contacting us
  • Deletion: Delete your account and all associated data from Settings → Danger Zone → Delete Account, or by emailing us
  • Portability: Receive your profile data in a machine-readable format
  • Withdrawal of consent: Withdraw notification permissions at any time from your browser or device settings
  • Objection: Object to processing based on legitimate interest

To exercise any right, email pawan@kovyxa.com. We will respond within 30 days.

9. Children

Kovyxa is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us immediately and we will delete the account.

10. Cookies and Tracking

We use strictly necessary cookies to maintain your login session. We do not use third-party advertising or tracking cookies. See our Cookie Policy for full details.

11. Changes to This Policy

We may update this policy to reflect product changes or legal requirements. We will notify you by email and/or in-app notification at least 14 days before material changes take effect. Continued use after the effective date constitutes acceptance.

12. Contact Us

Pawan Kumar (operating as Kovyxa)
Email: pawan@kovyxa.com
Website: kovyxa.com