Privacy Policy — MACHA
Last updated: 13 June 2026 · macha.world
MACHA ("we", "us") operates the MACHA platform — a real-world participation app connecting verified people to real events. This policy explains what we collect and how we use it.
Information we collect
- Account: email address, name, city, bio, interests, profile photo.
- Verification: a photo and a live selfie used to confirm you are a real person (stored privately, never shown publicly).
- Activity: events you create, join, or attend; communities you join; messages you send in event/community chats.
- Payments: processed securely by our payment partner (Cashfree); we do not store card details.
- Device & usage: basic technical data and push-notification tokens (if you enable notifications).
How we use it
- To verify identity and keep the community real and safe.
- To run events, communities, chats, invitations and notifications.
- To process Premium subscriptions and payments.
- To prevent fraud, fake accounts and abuse.
Sharing
We share data only as needed: with event organizers/attendees you choose to interact with, our payment processor (Cashfree), infrastructure providers (Supabase, Vercel), email/SMS providers, and when required by law. We never sell your personal data.
Data security & retention
Identity documents are encrypted and access-restricted. We retain data while your account is active and as required by law. You can request deletion of your account and data at any time.
Your rights
You can access, correct, or delete your data, and control notification and visibility settings in the app.
Contact
Questions or data requests: support@macha.world