Magntc Privacy Policy
Last updated: 10 October 2026
This policy explains what personal data Magntc holds, why, for how long, who receives it, and how you control it. It applies to the Magntc apps, magntc.com and related services.
The short version
- We never collect your location. Magntc finds people near you without GPS, and nobody is ever told your distance, direction or where you are.
- We do not sell your data, and we do not use it for advertising today.
- Your profile is shown only to people allowed to see you — adults who meet your preferences and whose preferences you meet, and who have not blocked or been blocked by you.
- You can download your data or delete your account from the app at any time.
- We may change this policy, and we tell you before material changes take effect.
1. Who we are
WEU Innovations Pvt Ltd, India ("WEU", "we", "us") is the controller (data fiduciary) of your personal data. Contact: contact@weuinnovations.in.
Grievance Officer: Meezan Khan — contact@weuinnovations.in (see Grievance Redressal).
Where Magntc is offered. Magntc is offered in India only. The app stores list it in India alone, it is not translated or advertised for any other country, and it is not directed at people outside India. If you are outside India, please do not use it.
Before we offer Magntc in the European Union or the United Kingdom, we will appoint a representative there and name them here, as Article 27 of the GDPR and of the UK GDPR requires.
2. What Magntc is
Magntc is a dating app for people aged 18 and over. It notices when other members are physically nearby using Bluetooth, without recording or sharing where you are.
3. What we collect and why
| Data | Why | Where it goes |
|---|---|---|
| Mobile number | To create your account and sign you in. Google Firebase Phone Authentication verifies the number; Magntc then issues its own session. We store the number as a keyed hash. It is never shown on your profile or to other members. | Google Firebase (verification), Magntc servers |
| Profile — first name, date of birth, gender, who you want to meet, intent, headline, bio, interests | To show your profile to eligible members and apply their preferences and yours. We store your date of birth only to calculate your age; other people see only your age. | Magntc servers; shown to members allowed to see you |
| Profile photos | To show on your profile. Every photo is re-encoded on our servers, GPS and camera metadata are removed, and it is checked by an automated safety filter (Google Cloud Vision SafeSearch) and, when the filter cannot decide, by a human moderator. Only approved photos are shown to others. | Cloudflare R2 private storage (Asia-Pacific); image bytes to Google Cloud Vision for the safety check |
| Nearby presence | To notice members who are physically near you. Your phone broadcasts a rotating anonymous identifier that changes regularly and contains no profile data; only our servers can tell who it belongs to, and only for members both allowed to see each other. Nobody is told your distance, direction or location. | Nearby phones (identifier only); Magntc servers |
| Nearby presence relayed by other phones | So two people out of Bluetooth range of each other can still find each other through a phone between them. Phones pass on the anonymous identifiers they have heard — the same identifiers already being broadcast — for a few minutes. A relayed identifier still reveals nothing without our servers, which apply every rule above. | Nearby Magntc phones (identifier only); Magntc servers |
| Encounters | To show who was recently nearby, kept in coarse (hour-level) form | Your phone, Magntc servers |
| Venue check-ins (optional) | If you check in with a venue's code, members checked in to the same venue who are allowed to see you can find you there for up to 4 hours, or until you leave. We record which venue and when — never your location. | Magntc servers |
| Offline discovery (when available on your version of the app) | To let members find and like each other where there is no internet. While you have internet your phone holds a profile card signed by us — the same details your profile already shows, plus a small photo — and hands it to nearby Magntc phones over Bluetooth. A card can be passed on by other phones and expires after 72 hours. When a card is passed on, it also carries who you are willing to meet and a coded list of the members you have blocked, so that other phones can respect your choices without asking our servers. | Nearby Magntc phones; Magntc servers |
| Likes and matches | To create matches and let you chat once both people have liked each other. Members see how many likes they have received; who sent a like is revealed only on a mutual match. | Magntc servers |
| Messages (text) | To deliver them to the person you matched with. Messages are encrypted in transit (TLS) and stored on our servers in India with access limited to the service. They are not end-to-end encrypted. Moderators do not read conversations; a report contains only what the reporter chooses to write. | Magntc servers; the other participant |
| Messages without internet | When you have no internet, a text message to a match (up to 280 characters) is sealed into an encrypted envelope that nearby Magntc phones pass on over Bluetooth until it reaches your match or a phone that is online. Phones carrying it cannot read it or tell who sent it or to whom, and it expires after 6 hours. Your phone creates a signing key; we keep its public half so your match's phone can confirm the message came from you. | Nearby Magntc phones (encrypted envelope only); then Magntc servers |
| Push notification token | To send notifications (new match, new message) | Apple (APNs), Google (FCM) |
| Blocks and reports | To keep people you blocked away from you and to let moderators act on reports | Magntc servers; moderators |
| Safety and moderation records | Decisions to restrict, suspend or ban an account, with the reason and time | Magntc servers |
| Device and session | Device identifier and sign-in sessions, so you can see and sign out devices | Magntc servers |
| Server logs | Request paths and error types, for security and reliability. They do not contain message content, photos or phone numbers. | Magntc servers |
We do not collect precise or approximate location, your contacts, voice recordings, or advertising identifiers. Magntc shows no ads and collects no analytics today. The Android app contains advertising, analytics and billing libraries for possible future use; they are switched off — no ad is requested, no analytics are collected, and no advertising identifier is read.
Sensitive data. Your gender and who you want to meet may reveal your sexual orientation. We use them only to show you to, and show you, the right people, with your consent (§4).
4. Our legal bases
Where the law requires a legal basis (for example the GDPR and UK GDPR):
| Purpose | Basis |
|---|---|
| Account, profile, discovery, matching, messaging, venue check-ins, offline features | Performance of our contract with you |
| Gender and who you want to meet (may reveal sexual orientation) | Your explicit consent, given when you add them — withdraw it by changing them or deleting your account |
| Safety, moderation, fraud and abuse prevention, security, server logs | Our legitimate interests in a safe and secure service, balanced against your rights |
| Responding to lawful requests; keeping records the law requires | Legal obligation |
| Notifications | Your consent, managed in your phone's settings |
In India we process your data for the purposes in this policy with your consent and for the legitimate uses the Digital Personal Data Protection Act, 2023 permits.
5. Who can see what
Your profile — name, age, photos, headline, bio and interests — is shown only to members allowed to see you, and to your matches while the match lasts. Your phone number, date of birth, location and messages are never shown to other members.
Offline discovery is more exposed than online discovery, and we would rather say so. Online, every lookup goes through our servers, which refuse anyone who is not allowed to see you. With no internet there is nobody to ask, so your phone hands your card to any nearby Magntc phone whose own card it can check and whose owner you are willing to meet. That means a member near you could collect the cards of the people around them, which our servers would not have allowed at that rate. What limits it: a card is only given to a phone that presents a valid card of its own, so doing this needs a real account, which we can ban; a card holds only what your profile already shows plus a small photo; cards stop working after 72 hours; and your phone refuses to hand one to anyone you have blocked. Turn off nearby discovery, or use Hide Me Now, and your phone stops handing out a card at all.
6. Automated decisions
An automated filter checks every photo; anything it cannot decide goes to a person, and you may ask for any photo decision to be reviewed by a person at contact@weuinnovations.in. Who you are shown to is decided automatically from both members' preferences, ages, verification and blocks. Neither has a legal or similarly significant effect on you.
7. Who receives your data
We do not sell your personal data, and we do not share it for cross-context behavioural advertising. It is received only by:
| Recipient | Role |
|---|---|
| Google (Firebase Phone Authentication, Firebase Cloud Messaging, Cloud Vision SafeSearch) | Verifying your number; delivering notifications; checking photos |
| Apple (Apple Push Notification service) | Delivering notifications |
| Cloudflare (R2) | Storing profile photos |
| Hostinger | Hosting our servers and database, in India |
| Other members | Only what this policy says they see |
| Authorities | Only under valid legal process, or to prevent imminent harm — see Law Enforcement Guidelines |
| A successor | If WEU is involved in a merger, acquisition or sale of assets, under this policy |
Each provider receives only what its function needs.
8. International transfers
Our servers are in India. Photos are stored by Cloudflare in the Asia-Pacific region, and Google and Apple may process data in other countries, including the United States. Where the law of your country requires a safeguard for data leaving it, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum for the UK) or another mechanism that law recognises.
9. How long we keep it
- Account deletion is two taps in the app (You → Privacy & Safety). At once, it revokes every session and device, disconnects notifications, removes you from discovery, and deletes your profile text, photos (including the stored files), likes and matches. 30 days later the rest is purged automatically: the messages you sent, your devices and sessions, your date of birth, and the keyed hash of your phone number. Reports, blocks and moderation decisions are kept, by design. If your account was reported, suspended or banned, the keyed hash of your number is kept too, so that deleting and re-registering cannot be used to evade a decision.
- Firebase Authentication (Google) keeps its own record of the verified number under Google's terms. Ask us at contact@weuinnovations.in and we will delete it within 15 days.
- Photos you remove are deleted from storage at once; their database record is purged after a short period.
- Encounters expire after 14 days. Venue check-ins are deleted 7 days after they end.
- Offline envelopes expire after 6 hours. Offline profile cards expire after 72 hours. Both, and every identifier your phone has heard, are erased from your phone when you sign out.
- Server logs are kept only while the service runs and are discarded whenever it is updated.
- We may keep data longer where the law requires it, or to establish, exercise or defend legal claims.
10. Your rights
Everyone can, from the app: download their data (You → Privacy & Safety → Download your data), correct their profile, and delete their account. For anything else, write to contact@weuinnovations.in. We answer within the time your law sets, and within 30 days at most. We may need to confirm it is you before acting.
India (Digital Personal Data Protection Act, 2023): you may obtain a summary of your data and how it is processed, correct, complete, update or erase it, withdraw consent, nominate another person to exercise your rights, and raise a grievance with our Grievance Officer. If the grievance is not resolved, you may complain to the Data Protection Board of India.
The sections below set out rights under laws that apply where Magntc is not yet offered. We state them because we intend to honour them if you reach us from one of those places and because we expect to expand, not because Magntc is available there today.
European Economic Area and United Kingdom: you may access, rectify or erase your data, restrict or object to its processing, receive it in a portable form, and withdraw consent at any time without affecting processing before then. You may complain to your data protection authority — in the UK, the Information Commissioner's Office.
California (CCPA/CPRA): you may know what we collect and how we use it, delete it, correct it, and limit the use of sensitive personal information. We do not sell or share personal information, and we will not treat you differently for exercising your rights. In the last 12 months we collected the categories in §3: identifiers (phone number, device identifier), personal characteristics (age, gender), sensitive personal information (sexual orientation as inferable from your preferences), photos, communications (messages) and internet activity (server logs). You may use an authorised agent.
Brazil (LGPD), Canada, Australia and other countries: you have the rights your law gives you, and may exercise them the same way.
11. Advertising and how Magntc is funded
Magntc is free and shows no ads today. If we introduce advertising, paid features or subscriptions, we will update this policy first, and we will ask for your consent before using your data for personalised advertising wherever the law requires it — including through Apple's App Tracking Transparency on iOS.
12. Children
Magntc is only for people aged 18 and over. We do not knowingly collect data from anyone under
- Accounts reported as belonging to a minor are reviewed first and removed. See our
13. Security
All traffic is encrypted with TLS, and the apps refuse unencrypted connections. Sessions can be revoked device by device. Photos are stored privately and reached only through short-lived signed links. Moderator access is separate from member accounts and is audited. No system is perfectly secure; we will tell you, and the authorities, about a breach as the law requires.
14. Changes to this policy
We may update this policy at any time, including when we add features or change how Magntc is funded. We will show the date at the top, and tell you in the app before a material change takes effect. Where a change needs your consent — for example a new purpose that requires it — we will ask for it.
15. Contact
Privacy questions and requests: contact@weuinnovations.in Grievance Officer: Meezan Khan — contact@weuinnovations.in WEU Innovations Pvt Ltd, India