Privacy Policy

1. Scope and responsibility

This policy applies when Connekt processes personal information through the public waitlist, registration and login, onboarding, profile setup, discovery, compatibility and matching, mutual matches, messaging, privacy features including Incognito Mode, blocking and reporting, moderation, notifications, Premium memberships, payments, account deletion, and related safety records.

Connekt is responsible for deciding how personal information is used for these services. The service is built with Sri Lanka's Personal Data Protection Act framework in mind, including transparency, defined purposes, data minimisation, accuracy, retention limits, security, individual rights, sensitive personal data, and international transfers. The rights and obligations that apply in a particular case remain subject to applicable law.

2. Information we process

The information processed depends on which parts of Connekt you use:

• Account and authentication information: name, email address, password hash and authentication records, email-verification status, birthday, adult confirmation, account status, and login or security timestamps.
• Waitlist information: name, email address, optional phone number and city, adult confirmation, submission time, IP address, and browser user-agent.
• Profile information: display name, birthday, gender, city, district, biography, relationship status, occupation, education, height, languages, lifestyle details, religion, and other optional profile details you choose to provide.
• Discovery and compatibility preferences: who you want to meet, interests, relationship preferences, discovery filters, intentions, and other private compatibility choices.
• Location information: the city and district you enter, together with location-based discovery settings. IP addresses may also be processed for waitlist abuse controls and service security.
• Photos and content: profile photos, biographies, messages, message replies, report details and evidence, and payment receipts you submit.
• Member interactions: likes, passes, mutual matches, profile visits where recorded, messages, blocks, reports, and related timestamps.
• Privacy settings: choices about age, city and online-status visibility, read receipts, photo blur, Incognito Mode, and browser notifications.
• Safety and moderation information: reports, blocks, moderation notes, photo-review decisions, restrictions, warnings, suspensions, bans, and related evidence or audit records.
• Device, browser and push information: push-subscription endpoint, public key, authentication token, content encoding, device timestamps, session/security cookies, and limited browser-storage state used for notification prompts.
• Premium and payment information: membership tier and status, feature access, amount, currency, payment method, transaction or reference identifiers, payment status, timestamps, provider metadata, and private bank-transfer receipts where used.
• Technical and security information: request metadata, service logs, error information, and security events needed to operate, diagnose, and protect the service.

When a configured payment provider processes a payment directly, it may collect payment credentials under its own terms. Connekt may receive transaction identifiers, status, amount, currency, and related metadata, but does not intend to store full payment-card details handled by that provider.

3. Sensitive and private information

Information you voluntarily provide may reveal or relate to sensitive and private parts of your life. This can include relationship status or preferences, who you want to meet, religious beliefs where voluntarily provided, gender-related preferences where applicable, private interests and intentions, compatibility preferences, or sexual-orientation or sex-life-related information that you choose to express in free text or available preference fields. Connekt does not currently provide a dedicated sexual-orientation or sex-life field.

These details may be treated as sensitive personal information. Connekt uses them only for legitimate product purposes such as compatibility, discovery, matching, privacy, and safety. Private matching preferences and internal compatibility criteria are not automatically displayed publicly. Only submit information you are comfortable providing. Where consent is required for processing sensitive information, Connekt may request a clear affirmative choice for the specified purpose. Members can change or withdraw available preferences and consent choices through the provided controls, subject to applicable law and any processing already lawfully completed.

4. How and why information is used

Information is used to provide and secure accounts; confirm eligibility checkpoints; create and manage profiles; operate discovery, compatibility, mutual matches, and authorized conversations; apply privacy choices; deliver requested notifications; moderate photos and accounts; respond to reports and blocks; prevent fraud, impersonation, and abuse; administer Premium access and payments; maintain records; troubleshoot the service; and meet applicable obligations.

Depending on the purpose and applicable law, processing may be necessary to provide the service you request, based on your consent or affirmative choice, required by law, or reasonably necessary for security, safety, fraud prevention, service operation, and other legitimate interests that do not override your rights.

5. Discovery, compatibility and matching

Connekt may use permitted profile information, interests, relationship preferences, city or district and discovery settings, and prior member interactions to decide which profiles may be relevant or compatible. It may also exclude profiles because of blocks, passes, eligibility, moderation restrictions, privacy settings, or other safety and access rules.

This processing supports profile discovery and mutual matching without publishing the underlying selection logic. Private compatibility criteria, private preferences, and internal matching reasons are not automatically revealed to other members.

6. Location information

The current service uses the city and district that a member enters for profile and discovery purposes. It does not currently collect precise device coordinates through a geolocation feature. A member's city may be hidden through available privacy controls, and IP addresses used for security are not displayed as profile locations.

Connekt does not publicly expose another member's precise location. If a future feature requests precise location, it must explain the purpose and seek any permission required before collection or sharing.

7. Visibility, privacy and member sharing

Eligible members may see public-safe profile information and content that the service authorizes them to access. Visibility is affected by profile completeness, age and city visibility choices, photo approval and blur settings, online-status settings, Incognito Mode, blocks, match or conversation status, eligibility, and moderation restrictions.

Incognito Mode can hide a profile from normal Discovery and prevent authorized profile visits from appearing in visitor history while the feature is effective. It does not erase existing matches or remove access that an existing authorization flow continues to allow. Private preferences, payment information, reports, blocks, moderation records, and internal safety data are not displayed on member profiles.

8. Photos, content and moderation

Submitted profile photos may be reviewed by authorized administrators before approval and may be reviewed again for safety, suspected fraud or impersonation, Community Guidelines enforcement, or abuse investigation. Reports and associated evidence may also be reviewed by authorized administrators. Connekt does not currently claim to use automated photo moderation.

Member photos and payment receipts are kept in private storage and delivered only through controlled, authorized responses. Messages and other content are available only through the service's existing access rules, though authorized administrators may access relevant information when reasonably necessary for moderation, safety, support, or legal obligations.

9. Service providers and other disclosures

Connekt may allow providers to process information on its behalf when necessary for hosting and infrastructure, private file storage, email delivery, browser or device push delivery, configured payment processing, security and anti-abuse measures, and other essential operations. Providers should receive only the information reasonably needed for their role and are subject to their service arrangements and applicable law.

Information may also be disclosed when required by applicable law or a valid legal process; when reasonably necessary to protect members, the public, or the service; to investigate fraud, abuse, or security incidents; or as part of a properly managed merger, financing, reorganisation, or transfer of the service. Connekt does not sell private matching preferences for advertising.

10. International transfers

Some service providers may process information outside Sri Lanka. Where personal data is transferred internationally, Connekt applies appropriate safeguards required by applicable data-protection law and the relevant service-provider arrangements.

11. Security and confidentiality

Connekt uses measures including authenticated access, server-side authorization, private storage for sensitive uploads, input validation, rate limits, account restrictions, blocking, private reporting, security headers, and administrator access controls. Access is limited according to product and operational roles.

No online service can guarantee absolute security. Members should use a unique password, protect their account and device, and promptly report suspected unauthorized access or misuse.

12. Retention

Account, profile, preference, interaction, membership, and related operational information is generally retained while an account is active and as reasonably needed to provide the service. Information may be deleted, anonymized, or made inaccessible when it is no longer reasonably needed for its stated purpose, subject to applicable requirements.

After account deletion or closure, limited records may remain where reasonably needed for fraud prevention, account security, enforcement of bans or restrictions, abuse investigation, dispute handling, payment and accounting obligations, or legal obligations. This can include relevant reports, moderation and audit records, transaction records, and identifiers needed to prevent a restricted person from immediately evading safety controls.

13. Account deletion

Members may request account deletion through the privacy contact published below. When a deletion request is completed, normal account access and ordinary profile visibility in Discovery will end. Depending on the records involved, information may be deleted, anonymized, or retained in a restricted form as described in the retention section.

Deletion does not require Connekt to remove limited information that must or may lawfully be kept for safety, fraud prevention, disputes, payments, accounting, or legal obligations. A deleted member should not continue to appear as a normally discoverable profile.

14. Your choices and rights

Available product controls let members edit profile information, adjust privacy and discovery settings, use Incognito Mode when entitled and enabled, block members, report concerns, and manage supported browser-push permissions or devices. Browser notification permission can also be changed through device or browser settings.

Subject to applicable law, you may request access to or correction, deletion, restriction, or a copy of personal information, withdraw consent where processing relies on consent, object where a right to object applies, or raise a privacy concern. Requests can be sent through the privacy contact below. Connekt may need to verify your identity and may retain information where an exception or legal obligation applies.

15. Browser storage, PWA and push notifications

Connekt uses essential session and security cookies. Limited localStorage and sessionStorage entries remember when a browser-notification prompt was presented or dismissed. If you opt in to browser push, the service stores the push endpoint and cryptographic subscription data needed to deliver notifications; the subscription can be removed through supported product, browser, or device controls.

The Progressive Web App's service worker caches public application resources and an offline shell so the interface can load reliably. Protected dynamic member pages, messaging and payment flows, controlled profile and member photos, and other sensitive responses remain subject to authorization and existing cache exclusions. Connekt does not intentionally provide offline access to private member data.

16. Adults only

Connekt is strictly intended for people aged 18 and over. Minors may not create or use member accounts. An account suspected of belonging to a minor may be restricted while the concern is investigated and may be removed. Underage concerns can be reported through available reporting or support channels.

17. Policy changes and contact

This policy may be updated when the service, providers, practices, or legal requirements change. The updated version will be published here with a revised last-updated date, and material changes may also be communicated through an appropriate public or in-product notice.

For privacy questions, rights requests, or account-deletion requests, contact info@connekt.lk.