Privacy Principles

Legal entity: Owl Haus Private Limited   •   CIN: U62099TN2026PTC198090

Effective / Last Updated: 7 October 2026

At Sun & Owl, privacy is a product principle, not simply a legal requirement. Owl Haus Private Limited builds and operates digital products, including BUMRUM, and aims to give people useful ways to connect around activities and real-world experiences while treating personal data responsibly.

These Privacy Principles describe the approach we intend to follow across our websites, apps, products, services and business operations. Our detailed Privacy Policies explain the specific information we collect and how it is processed.

1. We collect what we need

We seek to collect personal data that is reasonably relevant to providing, securing, improving and supporting our Services. This may include identity and contact information, profile information, location, device and usage information, activity preferences, communications, transaction information, safety reports and other information you choose to provide.

2. We explain why

We aim to explain, in clear language, what personal data we collect, why we need it and how it is used. Where consent is required, we aim to ask for consent in a meaningful and understandable way.

3. We give people meaningful control

Where applicable, people can access, correct, update, delete or otherwise exercise rights over their personal data. We also provide ways to withdraw consent where processing is based on consent, subject to legal and operational limitations.

Privacy requests can be directed to privacy@sunandowl.com.

4. We do not sell personal data

Sun & Owl does not sell personal data as a business practice. We may disclose or share data with service providers, technology partners, professional advisers, payment providers, analytics providers, advertising partners or authorities where necessary for legitimate business purposes, service delivery, safety, compliance or as otherwise described in our applicable Privacy Policy.

5. We build privacy into products

Privacy considerations are intended to be part of product design, feature development and operational decision-making. For location, messaging, payments, emergency features, recommendations and other functions involving personal data, we aim to consider data minimisation, access controls, retention and user choice from the outset.

Privacy Principles | Owl Haus Private Limited | 7 October 2026

6. We protect information

We use reasonable technical, organisational and administrative safeguards designed to protect personal data against unauthorised access, alteration, disclosure, misuse, loss or destruction. No digital service can guarantee absolute security, so we also work to detect, respond to and learn from security incidents.

7. We limit access

Access to personal data within Sun & Owl is intended to be limited to people and systems that need it for defined business, product, safety, security, support or legal purposes. We expect relevant contractors and service providers to maintain appropriate confidentiality and security.

8. We choose service providers carefully

We may use third parties for hosting, analytics, advertising, payments, communications, security, identity verification, customer support, professional services and other functions. We aim to select providers appropriate to the nature of the information and service involved and to impose suitable contractual or operational safeguards.

9. We are transparent about third-party technology

Our products may use services such as Google Analytics, Meta Pixel, Razorpay or Stripe and other providers as our products evolve. These providers may process information under their own terms and privacy practices. We seek to disclose material categories of third-party processing in our Privacy Policy.

10. We respect location privacy

Some BUMRUM features may use precise device location for nearby discovery, distance-based functionality, event-related features and safety functions. Location may be retained for defined purposes where necessary. Users can control device permissions, although turning off location can limit functionality.

11. We treat safety as part of privacy

Social discovery can involve real-world interactions. We may process reports, complaints, moderation information, device signals, account information and other data to help prevent abuse, fraud, impersonation and unsafe behaviour. Safety processing may sometimes require us to act without waiting for a user request.

12. We use AI responsibly

Where appropriate, we may use artificial intelligence or machine-learning systems for recommendations, moderation, fraud detection, customer support, product development or other functions. We aim to use such systems proportionately, protect personal data and provide human review or additional safeguards where appropriate for significant decisions.

13. We retain information responsibly

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide the Services, maintain safety and security, meet legal or regulatory obligations, resolve disputes, enforce agreements or establish or defend legal claims. When information is no longer needed, we seek to delete or anonymise it where reasonably practicable.

Privacy Principles | Owl Haus Private Limited | 7 October 2026

14. We may process data internationally

Because our technology and service providers may operate across jurisdictions, personal data may be processed outside India where permitted by applicable law. We aim to use appropriate safeguards and contractual or organisational measures for such processing.

15. We respect legal rights and obligations

Our privacy practices are designed to operate in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and applicable rules and notifications, as they come into force and apply to our Services.

16. We learn and improve

Privacy is an ongoing responsibility. As our products, technology, vendors and legal obligations evolve, we may update our practices, policies and controls. We encourage users, partners and other stakeholders to raise privacy concerns with us.

Contact

Owl Haus Private Limited, publicly known as Sun & Owl
No. 57, 4th Street, Maruthi Nagar, Madambakkam, Tambaram, Kanchipuram – 600126, Tamil Nadu, India
Privacy & Grievance Officer: privacy@sunandowl.com
Website: www.sunandowl.com

Our commitment

Our goal is simple: build useful products without treating people's personal data as something to be collected or used without a clear reason. We want people to understand what happens to their information and to have meaningful choices wherever the law and the product allow.