This policy explains what we collect, why, how long we keep it, and how to get rid of it.
What we collect
- Account: email address, and a password hash if you set one. Phone number only if you add it.
- Profile: everything you enter — display name, date of birth, gender, location, and your answers about practice, lifestyle and preferences.
- Photos: the images you upload, plus a blurred derivative of each.
- Verification: a selfie, and a government ID if you choose to submit one.
- Activity: interests, matches, messages, blocks and reports.
- Technical: IP address and user agent, recorded against security-relevant actions such as sign-in and moderation decisions.
Special category data
Your religious practice is special category data under UK and EU law. We process it because you have given explicit consent by entering it, and because it is the entire purpose of the service — a matrimonial platform that ignored your deen would be useless to you. You can withdraw that consent at any time by deleting your account.
Government ID documents
We delete your ID document as soon as a moderator has reviewed it. We keep the outcome — verified or not — and nothing else. We never keep the image.
Who can see what
- Your photos are blurred to everyone who is not a confirmed match, unless you turn that off.
- Your messages are visible to the person you are talking to, and to your wali if you invited one.
- Moderators can read a conversation only when it is attached to a report.
- We do not sell your data. We do not run advertising.
Processors we use
- Cloudinary — photo storage, blurring and automated moderation.
- Stripe — payments. Card details never reach our servers.
- Resend — transactional email.
- Twilio — SMS, if you verify a phone number.
- PostHog and Sentry — product analytics and error reporting.
How long we keep things
- Your account: until you delete it. Deletion hides your profile immediately and permanently erases your data, including photos, after 30 days. Signing in during those 30 days cancels it.
- Messages: kept while the account exists. Unmatching does not delete them, because a later report needs the evidence.
- Moderation records: retained after account deletion, without personal content, so a banned person cannot simply return.
- Payment records: kept for seven years, as tax law requires.
Your rights
You can access, correct, export or delete your data, object to processing, and complain to your data protection authority. Most of this is self-service in Settings; for anything else, email privacy@muslimbonding.com and we will respond within 30 days.
Children
This service is for adults seeking marriage. You must be 18 or older. We remove accounts we believe belong to minors as soon as we learn of them.
Changes
If we change this policy materially, we will email you before it takes effect rather than quietly updating the date at the top.