Privacy policy
What we collect, who can see it, how long we keep it, and your rights
Saubhagya ("we", "us") is a marriage proposal service for Sri Lankans, operated by . We take your privacy seriously because a marriage proposal contains some of the most personal information a family has. This policy explains what we collect, why, who can see it, how long we keep it and what your rights are under Sri Lanka's Personal Data Protection Act, No. 9 of 2022. Please read it together with our Terms of Service and Code of Conduct.
1. Information we collect
Account details. Your name, email address and password. Passwords are handled by Google Firebase Authentication — we never see them. If a sign-in method from another provider is offered, we receive only your name and email from it.
Your marriage proposal. Details you choose to enter: date of birth, height, marital status, religion, ethnicity, mother tongue, caste (optional), home district and where you live now, education, occupation, seniority, income range (optional), family background, lifestyle, horoscope details, partner preferences, and photos.
Sensitive information. Some of these details — religion, ethnicity, caste, health or horoscope details — are sensitive personal data. You provide them by choice, so that families can find suitable matches. Most are optional; leave out anything you are not comfortable sharing.
Private contact details. Phone and WhatsApp numbers, the contact person's name, your surname, birth time and birth place. These are stored separately from your public proposal (see section 3).
Verification information (optional). A photo of your NIC and a selfie for ID verification; a work email address, professional registration number, or staff ID / business registration photo for job verification.
Payments. The package you chose, amount, payment code, the receipt (slip) photo you upload, the name of the person who paid if not you, and the confirmation date. We do not receive or store card numbers or online banking passwords.
Activity on the service. Interests you send and receive, matches, your shortlist, people you block, and reports you make.
Technical information. Our hosting and database providers (GitHub Pages and Google Firebase) automatically process technical data such as your IP address, browser type and access times to deliver and secure the service.
2. Why we use your information
- To show your proposal to suitable members and suggest matches (search, preference match, distance and basic porondam).
- To let members send and accept interests, and to share contact details once both sides agree.
- To review profiles before they appear, check for fake or duplicate accounts, and handle reports.
- To verify identity and jobs when you ask us to, and show the matching badge.
- To process Premium payments and keep financial records.
- To keep the service secure, prevent misuse and comply with the law.
- To contact you about your account (for example email verification or password reset).
We do not sell your information, we do not show third-party advertising, and we do not allow advertisers to track you on Saubhagya.
3. Who can see what
- The public and search engines: nothing from your proposal. Profiles are visible only to signed-in members.
- Signed-in members: your proposal once our team has approved it — first name, age, details, about you, preferences and horoscope summary. Your reference code (e.g. SB-4F7K2) is shown so families can refer to a profile.
- Your photos: either all signed-in members, or only people whose interest you accept — you choose, and can change it any time.
- Your contact details (phone, WhatsApp, surname, contact person, birth time and place): only to a member with whom an interest has been accepted by both sides, and who is a Premium member (or during the free launch, any such member). By adding a phone number you agree to it being shared in this way — sharing contact details with mutual matches is the purpose of the service.
- Our review team (administrators): what is needed to review profiles, payments, verifications and reports.
- Never shown to other members: your email address, NIC and selfie, verification documents and numbers, payment slips, who you blocked or reported.
These rules are enforced by our database's security rules, not just hidden on the page.
4. Service providers
We use a small number of trusted providers to run the service:
- Google Firebase (Google LLC) — sign-in, database and email delivery for verification and password reset.
- GitHub Pages (GitHub, Inc.) — hosting of the website files.
- Google Fonts — the typefaces used on the website.
They process data only to provide their service to us. Their data centres may be outside Sri Lanka (for example in India, Singapore, the United States or Europe). By using Saubhagya you consent to this transfer; we choose providers that protect data with industry-standard security.
5. When we may disclose information
We may disclose information if required by Sri Lankan law, a court order or a lawful request from the police or another authority; to investigate fraud, threats or other illegal activity; or to protect the safety of members and the public. If the service is transferred to a new owner, your information would be transferred under this same policy and you would be told.
6. Cookies and browser storage
We do not use advertising or tracking cookies. Your browser stores a few small items needed for the site to work: your sign-in session (Firebase), your language choice, a note of matches you have already seen, and pending work-email verification. You can clear them in your browser settings at any time; you will then need to sign in again.
7. How long we keep information
- Your proposal, photos and contact details: while your account exists. You can hide your profile at any time.
- NIC, selfie and job documents or numbers: deleted as soon as our team has made a decision.
- Payment records: kept for as long as needed for accounting and tax law (typically several years), even after account deletion.
- Reports and safety records: may be kept after deletion to stop the same person returning with a new account.
- Duplicate-account checks: we keep fingerprints (not the originals) of phone numbers and photos to detect fake or repeated accounts.
8. Deleting your account
Go to My Account → Settings → Delete my account and type DELETE to confirm. This immediately and permanently removes your proposal, photos, contact details, interests and verification records, and your sign-in. It cannot be undone, and any remaining Premium time is lost. Records described in section 7 (payments, safety reports) are kept only as long as necessary.
9. Your rights
Under the Personal Data Protection Act you may:
- see and correct your information — most of it directly in My Account, or by asking us;
- withdraw consent for optional information (remove it from your profile) or for the whole service (delete your account);
- ask us for a copy of the information we hold about you;
- ask for deletion, subject to the records we must keep by law;
- complain to us, and if you are not satisfied, to the Data Protection Authority of Sri Lanka.
Email — we aim to reply within 14 days.
10. Security
Data is encrypted in transit (HTTPS) and protected by access rules so that each person can only read what they are allowed to. Administrators use strong, unique passwords. No online system is completely secure, so please use a password you don't use elsewhere and never share your login.
11. Children
Saubhagya is only for people aged 18 and over. We do not knowingly collect information about anyone under 18; profiles found to be of minors are removed immediately.
12. Changes to this policy
We may update this policy as the service or the law changes. Important changes will be announced on the website or by email before they take effect. The date at the top shows the latest version.