Privacy policy

Last updated 6 November 2026. Fiquity Technology Private Limited runs Coy and is responsible for your data under the Digital Personal Data Protection Act, 2023.

What we collect

• Your phone number, to log you in and to match you.
• An email address, only if you add one, so people who have it can find you.
• The phone numbers and emails you add, and the private names you give them.
• When you confirmed you're 18 or older and accepted the terms, and how you found Coy (a heads-up, a friend's invite link, a campus ambassador's link, or directly).
• Payment records from Razorpay (we never see your card or UPI details).
• A record of each message we send: its type, channel, time and whether it was delivered.
• Basic technical logs, such as IP address, to stop abuse.

Why we use it

We use this data to log you in, check for matches, send heads-ups and alerts, add the slots you buy or earn, credit invites and ambassadors, limit messages, stop abuse, and meet our legal duties.

People who were added but haven't joined

If someone adds your number or email, we get it from them, not from you. We store it so we can tell you and check for a match. We message you at most three times and at most once a week. Every message has a link to stop all messages. You can also opt out at getcoy.com/stop or by replying STOP on WhatsApp, and you can tell us if the messages felt like spam or harassment.

We don't send these messages between 22:00 and 08:00. We go by the time zone of your phone number's country, or India time if we only have your email.

After you opt out, we keep your number or email so that we never message you again, even if someone adds you later. If you later join Coy, you control your alerts in Settings.

How we protect it

Phone numbers and emails are stored as keyed hashes for matching and encrypted for messaging. Names you write are encrypted. Only you see your list. We never show anyone who added them unless it's mutual.

How long we keep it

• Entries on a list: deleted 180 days after they were added, unless they become a match. Removed entries are deleted after the 30-day lock ends.
• Numbers and emails we never messaged: forgotten after 180 days, once they're on nobody's list.
• Numbers and emails we did message, or that opted out: kept, stored as described above, so the message limit and your opt-out keep working if someone adds them again.
• Login codes: deleted within a day. Login sessions end after 60 days.

Deleting your account deletes your account, your number and email on it, your list and your side of any match straight away. Some things stay:

• Someone you matched with keeps their side of the match, including the number or email they used for you.
• If someone else has your number or email on their list, that entry stays theirs until it's removed or expires.
• If we ever messaged your number or email, or you opted out, we keep that record as described above.
• Payment records stay for our tax and accounting records, no longer linked to your account.

Who we share it with

Only the services that run Coy: MSG91 for SMS, WhatsApp (Meta) for WhatsApp messages, Resend for email, Razorpay for payments, Cloudflare and our hosting provider to run the service. Some of them may process data outside India. We also share data when the law requires it. We don't sell data or show ads.

Cookies

This website doesn't set cookies. The Coy app uses a cookie to keep you logged in, and a cookie lasting 30 days to remember the invite or ambassador link you arrived from. We don't use advertising cookies.

Your rights

You can see, correct or delete your data, withdraw consent, and nominate someone to use these rights for you if you die or can't act. You can also complain to us and, if that doesn't resolve it, to the Data Protection Board of India. Write to contact@getcoy.com.

Our Grievance Officer is Vikram Bhadu, Fiquity Technology Private Limited, at the same email address. We acknowledge complaints within 24 hours and resolve them within 15 days.

Age

Coy is only for people 18 or older. If we learn an account belongs to someone younger, we delete it.

Changes to this policy

We may update this policy. We'll change the date at the top of this page when we do.