Privacy Policy

1. Scope

This Privacy Policy describes how Invent LLC ("Company") collects, uses, discloses, and protects personal information through the Saha app (Dating and Matrimony modes), nationwide in the United States. Because privacy obligations vary by state, Section 9 provides state-specific disclosures.

2. Categories of Personal Information We Collect

• Identifiers: name, email, phone number, device ID.
• Profile information: age, gender, sexual orientation/preference, photos, bio, religion/community (matrimony), relationship intent.
• Biometric identifiers: facial geometry/scan data generated during liveness/face verification (see Biometric Information Consent & Policy).
• Government ID data: where a user opts into ID verification via Persona (document images, extracted data, verification result).
• Geolocation: approximate or precise location for match distance and safety features.
• Usage data: messages metadata, swipes/likes, in-app purchase history (transaction IDs only -- no card data, which is held by Apple/Google).
• Device and technical data: IP address, device identifiers, OS version, crash logs.

3. Sources of Personal Information

• Directly from you (registration, profile setup, messaging).
• Automatically via the app (usage analytics, device data).
• From third parties: Apple/Google (in-app purchase transaction confirmation, not payment details), Persona (ID verification results), and, if applicable, Representatives you authorize in Matrimony Mode.

4. How We Use Personal Information

• To operate core matching, messaging, and profile features;
• To verify age, identity, and liveness, and to detect fraud, duplicate accounts, and bad actors;
• To personalize match recommendations;
• To process in-app purchases through Apple/Google systems;
• To comply with legal obligations and respond to law enforcement requests as legally required;
• To improve safety features, including reporting/blocking tools.

We do not sell personal information for money.

5. Sharing of Personal Information

• Service providers: cloud hosting, Persona (identity verification), analytics providers, customer support tooling -- under contracts restricting use to providing services to Company;
• Apple / Google: transaction confirmation for in-app purchases;
• Other users: your profile (excluding verification documents) is visible to other users per your privacy settings;
• Legal process: law enforcement or regulators when required by valid legal process, or to protect safety in an emergency;
• Business transfers: in connection with a merger, acquisition, or asset sale.

6. Sensitive Personal Information

Certain data we process -- biometric identifiers, precise geolocation, sexual orientation, and (in Matrimony Mode) religion/community -- is treated as "sensitive personal information" under CCPA and as "sensitive data" under other state comprehensive privacy laws. Several states require opt-in consent, not merely a right to opt out, before processing sensitive data. We obtain affirmative consent for biometric processing via the separate Biometric Information Consent flow, and design consent flows for other sensitive categories to meet the strictest applicable state standard.

7. Data Retention

• Profile and account data: retained while your account is active, then deleted or anonymized promptly upon account deletion, with no additional retention period.
• Biometric data: per the Biometric Information Consent & Policy retention schedule (BIPA requires deletion within 3 years of last interaction or upon satisfaction of the purpose, whichever is sooner).
• ID verification documents: retained per Persona's data handling terms and no longer than necessary for fraud prevention and legal compliance; raw ID images are not retained by Company beyond verification confirmation where technically feasible.

8. Your Privacy Rights

Depending on your state of residence, you may have the right to: know/access the personal information we hold about you; delete personal information; correct inaccurate information; opt out of the sale/sharing of personal information or targeted advertising; opt out of profiling with legal or similarly significant effects; and appeal a denied request. To exercise rights, contact privacy@the-saha.com or use the in-app Privacy Center. We will verify your identity before fulfilling requests. We will not discriminate against you for exercising these rights.9. State- Specific Disclosures California (CCPA/CPRA) California residents have the rights described in Section 8, plus the right to limit use of sensitive personal information. Our "Do Not Sell or Share My Personal Information" and "Limit the Use of My Sensitive Personal Information" links are available in the app's Privacy Center. Illinois (BIPA) See the standalone Biometric Information Consent & Policy for Illinois-specific biometric disclosures, consent, and retention/destruction commitments. Virginia, Colorado, Connecticut, Utah, Texas, and other comprehensive privacy states California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas require recognition of a universal opt-out signal. Delaware, Maryland, Minnesota, and Oregon residents have the rights described in Section 8, plus the right to obtain additional information about third parties with whom we have shared your personal data. Iowa and Utah residents have the rights described in Section 8, plus the right to opt out processing of your sensitive personal information. Our "Do Not Sell or Share My Personal Information" and "Limit the Use of My Sensitive Personal Information" links are available in the app's Privacy Center.Virginia Residents � if your request is denied, you have the right to appeal by contacting us at privacy@the-saha.com with your name, your contact information, and a brief description of your request. Saha will respond with an explanation of the reasons for its decision within 60 days. If the appeal is denied, you may contact the Virginia Attorney General to submit a complaint at the Office of the Attorney General of Virginia, Consumer Protection Section (https://www.oag.state.va.us/consumer- protection, 1-800-552-9963) Colorado Residents Connecticut Residents

10. Children's Privacy

Saha is not directed to and does not knowingly collect personal information from anyone under 18. See the Age Attestation document for our age-gating and verification approach.

11. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest for biometric and ID verification data. No system is 100% secure.

12. International Users

Saha is currently offered in the United States.

13. Changes to This Policy

We will post changes here and, for material changes, provide notice via the app or email at least 14 days before the effective date.

14. Contact

privacy@the-saha.com | Invent LLC, 2235 Koester Trce, Lewis Center, OH 43035.