Privacy Policy
Last updated: 1 September 2026
CommuneWorld is operated by Kamna Creations Private Limited, E4/459, Sector O, Sarojini Nagar, Mansarovar Yojna, Lucknow, Uttar Pradesh 226002, India. For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described below.
CommuneWorld is an 18+ platform. It is not directed at and must not be used by anyone under 18. See our Child Safety Policy.
1. What we collect
Account and identity. Your name, email address, phone number, gender where you provide it, and your member category. If you set a password it is stored only as a bcrypt hash; we authenticate primarily by phone OTP.
Profile. Photographs, bio, personality and lifestyle attributes, relationship status, interests, and the relationship intents you select.
Identity verification (KYC). Aadhaar number, PAN, name as per PAN, date of birth, images of your Aadhaar and PAN cards, and a KYC selfie. Depending on your member category we also collect work email, employer, position, company ID, declared income and supporting proof such as a salary slip, bank statement or ITR; business documents such as GST declaration, visiting card and cancelled cheque; or student documents such as a student ID, degree certificate, institute and course.
Aadhaar verification records. A salted cryptographic hash of the Aadhaar number you enter, the last four digits returned by UIDAI, and the name, date of birth, gender, address and photograph UIDAI holds for you.
Face data. A liveness image captured during registration, a confidence score, and the pass or fail result.
Financial. Payment amounts, GST, order and payment references, your credits balance and every movement against it, your GST invoices, and — only if you withdraw earnings — your bank or UPI details.
Communications and content. Messages and their delivery and read status, posts, comments, reactions, stories and who viewed them, broadcasts, consultations, calendar events, connections, blocks, and support tickets.
Device and technical. Your platform, push notification token, session records, and your IP address, recorded against sessions and activity log entries.
Safety. Automated moderation scan results, moderation decisions, and a snapshot of any content that caused an action against your account.
2. What we do not collect
We do not collect your contact list or address book.
We do not collect your precise GPS location or track your movements.
We never receive your card number, CVV, UPI PIN or net-banking credentials — those go directly to the payment provider.
We do not sell your personal data, and we do not use it to train AI models.
We do not use third-party advertising or cross-site tracking cookies.
3. Aadhaar
You verify your Aadhaar yourself through DigiLocker, using your own Aadhaar OTP. We never see your OTP or your DigiLocker password. UIDAI returns your Aadhaar number to us only in masked form — the last four digits. We bind your verification to the number you typed using a salted hash mixed with a server-side secret, which cannot be reversed. Your Aadhaar number is used only to verify your identity on CommuneWorld, is never shown to other members, and is never shared with advertisers or data brokers. Once we have retrieved your record we revoke our DigiLocker access.
4. Face and biometric data
We run a face liveness check using Amazon Rekognition to confirm a real, present person is registering, and we match that image against your identity document and your UIDAI photograph. This is sensitive personal data under the SPDI Rules. We use it only for identity verification and fraud prevention — never for advertising or profiling — and we do not operate any feature that identifies a person from a photograph.
5. How we use your data
To create and run your account, and to show you to other members
To verify your identity and confirm you are 18 or over
To deliver messages, calls and consultations
To take payments, issue GST invoices and pay out your earnings
To keep the platform safe, and to detect and prevent fraud
To send you notifications and respond to your support requests
To meet our legal obligations and respond to lawful requests from authorities
Where automated moderation flags your content, a CommuneWorld administrator reviews the decision before any lasting action is taken against your account.
6. Automated scanning
All images and video uploaded to CommuneWorld are scanned automatically for prohibited content using Amazon Rekognition. Documents you upload for KYC are read using Amazon Textract to check them against the details you typed. This scanning is mandatory and central to how we detect child sexual abuse material.
7. Who we share it with
We share data with service providers who process it on our instructions: Amazon Web Services (media storage, face liveness, content moderation, document reading), Setu and DigiLocker/UIDAI (Aadhaar verification), Razorpay and Cashfree (payments and payouts), MSG91 (SMS and OTP), Twilio (consultation calls), Google Firebase (push notifications), and our email provider.
Other members see your profile, your content and the messages you send them. They do not see your Aadhaar or PAN, your KYC documents, your date of birth, your bank details, your IP address, or your liveness images.
We disclose data to law enforcement where required by law. We report child sexual abuse material to the authorities without requiring a legal request and without notice to the account holder.
8. How long we keep it
We keep your data while your account is active. Financial and GST records are retained as long as tax law requires and cannot be deleted on request. Moderation evidence is retained because it supports a decision that may be appealed. Child safety reports and their evidence are never deleted on request. Clearing a chat hides messages from your view only — it does not delete them, and it does not remove a reported message from moderation review.
9. Your rights
Under the DPDP Act you may access a summary of your data, correct or complete it, request erasure, withdraw consent, nominate someone to act for you, and raise a grievance. Corrections to verified KYC data require re-verification. Withdrawing consent to identity verification ends your access to the platform, because a verified identity is what the platform is built on.
To exercise a right, write to communeworld01@gmail.com from your registered email address or raise a support ticket. We respond within thirty days, and may ask you to verify your identity first.
10. Security
Traffic is encrypted with HTTPS/TLS. Passwords are stored only as bcrypt hashes. Access to KYC data is restricted to authorised administrators and their actions are logged. Media is held in access-controlled storage and served through time-limited links. Sensitive verification payloads are deliberately kept out of our error logs.
CommuneWorld staff will never ask you for your OTP or your password.
11. Children
CommuneWorld is strictly for adults aged 18 and over, and we do not knowingly collect data from anyone under 18. If you believe a minor has an account, report it in the app or to communeworld01@gmail.com and we will investigate and remove it. See our Child Safety Policy for our full approach.
12. Grievance redressal
Grievance Officer: Kamana Kumari, communeworld01@gmail.com, +916377563773
Data protection contact: Kamana Kumari, communeworld01@gmail.com
Kamna Creations Private Limited, E4/459, Sector O, Sarojini Nagar, Mansarovar Yojna, Lucknow, Uttar Pradesh 226002
We acknowledge grievances within 24 hours and resolve them within 15 days, as required by the IT Rules 2021. If you are not satisfied you may approach the Data Protection Board of India.
13. Changes
We may update this policy. Where a change materially affects how we use your data we will notify you before it takes effect. The last-updated date above always reflects the current version.