Privacy Policy

Offsite is a dating app for working adults in India, operated by Sparkk. For the purposes of the DPDP Act, Sparkk is the Data Fiduciary and you (the user) are the Data Principal. Our contact details and Grievance Officer are listed at the bottom of this page.

• Account info — your email address (typically a work email), used only to sign you in with a one-time code.
• Profile info — the name, age, gender, city, workplace, bio, interests, and photos you add during onboarding or from Edit Profile.
• Location — if you allow it, your approximate GPS coordinates, used to calculate the distance to other users. Raw coordinates are never shown to anyone; only the calculated distance is.
• Activity — the swipes, matches, and messages you create in the app.
• Device info — basic analytics such as page views and anonymous device type.

Under Section 6 of the DPDP Act, we process your personal data on the basis of the consent you give when you create an account, upload photos, or enable location. We use your data only for the specified purpose you gave consent for: running the core app — showing your profile to potential matches, finding you compatible people nearby, delivering your messages, and keeping the community safe. We do not use your data to build advertising profiles, and we do not process it for any purpose other than what's listed here.

We don't sell your data and we don't share it with advertisers. Your profile is only visible to other signed-in Offsite users who match your discovery filters.

We rely on a small set of infrastructure providers ("Data Processors" under the DPDP Act) to run the app — for hosting and database, for sending sign-in emails, for push notifications, and for basic product analytics. These providers process data only on our written instructions and aren't allowed to use it for their own purposes. Some processors may store data outside India in jurisdictions permitted by the Central Government under Section 16 of the DPDP Act.

Photos you upload are stored privately and served through short-lived signed URLs — they aren't publicly enumerable. Every photo is reviewed automatically for safety before it goes live; anything unsafe (nudity, violence, apparent minors) is rejected and deleted immediately from storage, in line with our obligations as an intermediary under the IT Rules, 2021.

We keep your data only for as long as your account is active, in line with Section 8(7) of the DPDP Act. When you delete your account from Settings, we permanently remove your profile, photos, swipes, matches, messages, blocks, and reports, and we revoke all your sessions. Backups may retain the deleted data for a short additional period before they cycle out. Certain limited data (such as reports of abuse) may be retained for a longer period where required to comply with Indian law or to defend legal claims.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how it's processed (Section 11) — visit your Profile page or email us.
• Correct, complete, or update your data (Section 12) — from Edit Profile or Preferences.
• Erase your data (Section 12) — one tap in Settings permanently deletes your account.
• Withdraw consent at any time (Section 6(4)) — including turning off location under Preferences.
• Nominate another individual to exercise your rights in the event of your death or incapacity (Section 14) — email us to record a nominee.
• Grievance redressal (Section 13) — contact our Grievance Officer below. If we don't resolve it within 30 days, you may approach the Data Protection Board of India.

Offsite is strictly for adults aged 18 years and above. In line with Section 9 of the DPDP Act, we do not knowingly process personal data of children, do not run behavioural monitoring on children, and do not target advertising to children. If you believe a child has created an account, please email our Grievance Officer and we will remove it immediately.

We use reasonable security safeguards as required under Section 8(5) of the DPDP Act and Rule 8 of the SPDI Rules, 2011 — including encryption in transit, private photo storage with short-lived signed URLs, database row-level security, and revocation of sessions on account deletion. If a personal data breach occurs, we will notify the Data Protection Board and affected users as required by law.

We'll update this page as the app and the law evolve. Material changes will be reflected by a new effective date at the top, and, where required, notified to you in-app or by email.

In accordance with the Information Technology Act, 2000, the IT Rules, 2021, and Section 8(9) of the DPDP Act, our designated Grievance Officer for India is:

For any other privacy question, email us at hello@sparkk.co.in.