Legal
Privacy Policy
What personal data Layne collects, why, who processes it, and the rights you have over it under India's Digital Personal Data Protection Act, 2023.
Version 1.0 · Last updated 16 September 2026
Who we are
Layne is a mood-first dating and social app, operated by [Company Name]. This policy explains what personal data we collect through the Layne app and this website, why we collect it, who we share it with, and the rights you have over it under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
Data we collect, purpose by purpose
The table below lists each category of personal data we collect and the specific purpose it is collected for. We do not use data collected for one purpose for an unrelated purpose.
| Purpose | Data collected |
|---|---|
| Account & authentication | Your email address, used for one-time-password (OTP) sign-in. Layne does not use phone numbers or third-party OAuth login. Your email is stored in our authentication provider's managed records and is not directly queryable from the app's own profile data. |
| Profile | Nickname, age, gender, city, photo, bio, hobbies, occupation/company/university, height, orientation, zodiac, diet, sleep schedule, and lifestyle preferences (drinking, smoking, drugs). |
| Matching (precise location) | Your device's precise GPS location (not just an IP-based estimate). We use it as a match-ranking signal — closer members receive a proximity bonus in your match suggestions. |
| Face verification | A live selfie captured during an on-device liveness check (blink / head-turn / center-hold) and on-device anti-spoofing pass. The still image is sent to our systems, compared once against your profile photo using a third-party face-comparison service (Amazon Rekognition), and then deleted once verification completes. We do not store a face template, faceprint, or biometric embedding — only a yes/no verified status and a timestamp are retained. |
| Chat | Message content and voice notes, stored to deliver conversations between matched users. |
| Mood Feed | Mood posts, captions, optional voice notes, comments, and likes. |
| Analytics | Usage and product-analytics events: app opens, sessions, screen views, feature usage, and crashes. |
| Push notifications | A device push token, used to deliver match and message notifications. |
| Waitlist (this website only) | Name and email address, submitted voluntarily to join the pre-launch waitlist. |
Details worth reading in full
No. Chat messages and voice notes are encrypted in transit and at rest at the infrastructure level, and access is restricted by row-level database security. This is standard cloud encryption, not end-to-end encryption — Layne's systems can technically access message content. More detail on our security practices is available on our Security page.
Product analytics currently runs by default when you use the app. If you do not want your usage tracked, you can opt out in Settings. We do not currently wait for your affirmative consent before analytics collection begins. Analytics events are processed via PostHog (EU-hosted). On this website, pageview analytics also runs automatically on page load — see the "Cookies and website analytics" item below.
Mood posts expire and are hidden 24 hours after posting. The underlying photo and voice files are permanently deleted from storage 7 days after expiry.
- Face verification selfies — deleted once verification completes.
- Mood post media — deleted 7 days after the post expires; the post record itself may be retained after the media is deleted.
- Chat messages — retained for the life of your account. We do not currently have an automatic deletion job for messages.
- Analytics events — retained without a defined automatic deletion window.
- Supabase — database, authentication, file storage, realtime, and backend functions.
- Amazon Web Services / Amazon Rekognition — face verification comparison only.
- PostHog (EU Cloud) — product analytics.
- Expo — push notification delivery.
We do not use any other third-party processor — no error tracking, no separate SMS or phone provider, no payment processor, and no ad network.
Under the DPDP Act, you have the right to:
- access a summary of the personal data we process about you;
- request correction and completion of your personal data;
- request erasure of your personal data;
- grievance redressal; and
- nominate another individual to exercise these rights on your behalf in the event of your death or incapacity (the "right of nomination").
We do not yet have a self-service data-export tool in the app. Access, correction, and erasure requests are currently handled manually — write to support@joinlayne.com. See our Grievance Redressal page for the full process and response timelines.
Settings has a "Delete account" option. Deleting your account removes your profile and most associated data. However, analytics data already sent to our analytics provider (PostHog) is not automatically deleted from that third-party system when you delete your account — deletion there must be requested manually by writing to support@joinlayne.com.
Layne is for users 18 and older. Under the DPDP Act, anyone under 18 is legally a "child," and processing a child's personal data requires verifiable parental consent — something Layne's product is not built to obtain. Our service is not available to anyone under 18. Age is self-declared at signup; we do not use any automated age-verification technology.
In the event of a personal data breach, we will provide an initial intimation to India's Data Protection Board without delay and a detailed report within 72 hours, and will notify affected users without delay, consistent with the DPDP Rules 2025. These rules were notified on 13 November 2025, and their substantive breach-notification obligations become enforceable on 13 May 2027.
This website uses PostHog for pageview analytics, which runs automatically on page load. There is currently no cookie-consent gate on this website.
Grievance officer
We have not yet appointed a named grievance officer. For all privacy requests, complaints, and grievances, write to support@joinlayne.com. See our Grievance Redressal page for the full mechanism, including our 24-hour acknowledgement and 15-day disposal timelines.