Privacy Policy

Privacy is not a feature of Zaijat — it is the foundation. The platform was built so that sisters' modesty is protected by design: no photos are ever collected or displayed, shortlists are completely private, and your contact details are never visible to any other member until you both choose to proceed.

This policy explains what we collect, why, how long we keep it, and the rights you hold over your data. We follow GDPR principles (lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, and integrity) regardless of where you are located.

Account information: email address, hashed password, gender, phone number (for contact reveal only).

Matrimonial profile: name, age, height, weight, build, aqidah, nationality, ethnicity, country, marital status, hijab type, bio, and other optional fields you choose to fill.

Activity data: interests sent/received, shortlists, filter preferences, and in-app messages with matched profiles.

Technical data: IP address (for fraud and abuse detection), browser / device type, and session tokens. We do not use third-party tracking pixels or behavioural advertising cookies.

Verification documents: if you submit ID for verification, the document is reviewed by our admin team and then deleted; we retain only the verification status (verified / unverified).

• •To display your profile to verified members of the opposite gender seeking marriage.
• •To match, filter, and serve the matrimonial feed based on your stated preferences.
• •To enforce community rules, investigate reports, and remove harmful accounts.
• •To send transactional emails (interest notifications, account alerts). We do not send unsolicited marketing.
• •We never sell your data. We never share it with advertisers or data brokers.

Your phone number is collected at onboarding but is never shown to any other memberunless both you and the other member independently accept the same interest. Only at that moment do we reveal the phone numbers to each other. No exceptions, no workarounds.

After contact is revealed, the in-app interest is closed. Neither party's phone number is stored in our system longer than the platform requires to operate.

We share your data only in these limited circumstances:

• •Payment processors — Stripe or Apple/Google IAP handle billing. We do not receive or store card numbers.
• •Email delivery — a transactional email provider (e.g. Resend) delivers notifications. It receives only your email address and the message content.
• •Law enforcement — when legally required or to protect a person's safety, we will disclose information to authorities. We will notify you when legally permitted to do so.
• •Business transfer — in the event of a merger or acquisition, user data may transfer. We will notify members and honour deletion requests before any transfer takes effect.

Active accounts: your profile data is kept for as long as your account is active. Deleted accounts: all personal profile data is permanently erased within 30 days of deletion. Moderation records (reports, bans) may be retained for up to 2 years to prevent re-registration of removed accounts. Payment records are retained for 7 years as required by accounting law.

We use only essential session cookies — one token to keep you logged in. We use no analytics cookies, no advertising cookies, and no third-party trackers. There is no cookie consent banner because there is nothing to consent to beyond session management.

Passwords are hashed with bcrypt (never stored in plain text). All traffic is encrypted via HTTPS. Our database and file stores are access-controlled and monitored. No system is perfectly secure, but we apply industry-standard measures and patch vulnerabilities promptly.

Zaijat is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we become aware that a minor has created an account, we delete it immediately and report any safeguarding concern to the relevant authorities. If you believe a minor is using the platform, please report it to safety@zaijat.com.

• •Access — request a copy of the data we hold about you.
• •Rectification — correct inaccurate data at any time from your profile.
• •Erasure — delete your account from Account Settings or email us; we erase within 30 days.
• •Portability — request your data in a machine-readable format.
• •Restriction / Objection — ask us to stop processing your data while a complaint is pending.
• •Withdraw consent — where processing is based on consent (e.g. notifications), you can withdraw at any time in settings.

To exercise any right, email privacy@zaijat.com. We respond within 30 days.

We will notify members of material changes by email and update the "Last updated" date above. Continued use of the platform after the effective date constitutes acceptance of the updated policy.