PRIVACY NOTICE AND REQUEST FOR CONSENT Notice version WL-NOTICE-2026-11-v2 · Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025 Dear Sir/Madam, WeLookup ("we", "us") runs WeLookup (welookup.in). WeLookup finds the photos in which you appear among the photos of events, so they can be shared with you in full quality. We are the Data Fiduciary for the personal data described below. Please read this notice before you agree. 1. PERSONAL DATA WE WILL COLLECT AND USE a) Your name. b) Your mobile number, verified by a one-time password (OTP) each time you log in. c) One selfie taken with the camera when you first log in. d) A face template: a set of numbers calculated from your selfie. It is biometric data, used only to recognise your face in the photos of your events. A face template cannot be turned back into your photo. e) Photos of the events (groups) the WeLookup administrator adds you to, in which you appear, and the face templates calculated from those photos. f) Records of this consent (date, time, notice version, verified mobile number, device), of your logins, and of downloads and exports of photos. 2. WHY WE USE IT (SPECIFIED PURPOSES) a) To verify that it is you when you log in. b) To find the photos in which you appear in the events the administrator adds you to. c) To show those photos to you and to the administrators, and to let you download and export them in their original quality. d) To improve recognition of your face within your events, when an administrator confirms that a photo shows you. e) To keep proof of your consent and of how your data was used, as the law requires. We will NOT sell your personal data, use it for advertising, or search for you in any photos other than those of your events without asking for your consent again. 3. WHO CAN SEE YOUR DATA WeLookup administrators of WeLookup (RAJ KUMAR). Depending on the access the administrator gives them, other members of your events may see photos of those events in which you appear. Your data is stored on computers we control in India. 4. HOW LONG WE KEEP IT We keep your selfie and face template until you withdraw your consent or your account is deleted. Your photo matches for an event are erased when that event is deleted or you are removed from it. Records of consent and of activity are kept for at least one year, as the DPDP Rules require, and then erased unless another law requires us to keep them longer. 5. FACES OF OTHER PEOPLE Event photos also show other people. Their faces are compared only with people who have given consent, and their face data is erased when the event is deleted. 6. YOUR RIGHTS AND HOW TO USE THEM a) Withdraw consent at any time, as easily as you are giving it now: log in and choose "Withdraw my consent", or email privacy@welookup.in. Your selfie, face template and photo matches are then erased. Withdrawal does not affect anything done before it. b) Ask for a summary of your personal data held by us and how it is used. c) Ask us to correct, complete, update or erase your personal data. d) Nominate another person to exercise your rights if you die or become unable to do so. e) Grievances: contact our Grievance Officer, RAJ KUMAR, at privacy@welookup.in. We will respond as soon as possible and within the period set by the DPDP Rules. f) If you are not satisfied, you may complain to the Data Protection Board of India. You may ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India. 7. CHILDREN WeLookup does not register anyone under 18 years of age. A person under 18 can be added only with the verifiable consent of a parent or lawful guardian, which this version of the app does not yet support. 8. SECURITY We protect your data with access controls, encryption of connections and OTP verification, and we keep logs of access. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires. 9. YOUR CONSENT By ticking the boxes below you give your free, specific, informed, unconditional and unambiguous consent to WeLookup to process the personal data listed in section 1 for the purposes listed in section 2. Giving consent is your choice. If you do not agree, select Cancel and no selfie or face data of yours will be stored. Contact: WeLookup · welookup.in · privacy@welookup.in