Privacy notice (draft)

This explains how Qalbii uses your information. This is a draft, and it may change.

Draft

This is a draft. It is under legal review and is not final. It may change before the app opens.

Still to be settled: our company details, our legal basis for each use, and how long we keep some records.

The short version

Qalbii is a marriage app for Muslims. We use your faith and background to build your profile and suggest matches. We only do this with your explicit consent, and you can withdraw it in Settings.
Every member's ID is checked by an ID service, with a live selfie.
We do not sell your information and we do not show adverts.
Your answers on private subjects are used only to work out compatibility, and are never shown to other members.
If you delete your account you have 30 days to change your mind, then we erase it. Some records are kept longer by law or for safety.
You can complain to us at privacy@qalbii.com, and to the Information Commissioner's Office.

Who we are

Qalbii is run by the company that will be named here when this notice is final. We decide how your information is used. Contact us at privacy@qalbii.com.

Your faith and background

Some information is special category data under UK law. For Qalbii this includes your religion and how you practise it, where your family is from, any answers you give about marriage and family life, the fact that you took the Sacred Oath, and the comparison of your live selfie with your ID and photos.

We rely on your explicit consent to use this information. Qalbii cannot suggest matches without it. You can withdraw consent any time in Settings. Withdrawing pauses matching and hides your profile. To erase your information, delete your account.

What we collect

Account details: first name, email, mobile number, date of birth and gender.
Your profile: answers, photos, prompts and compatibility answers.
Your ID check: your ID and a live selfie, and the result.
Messages, likes, matches and journey steps.
Reports, appeals and support chats.
Event bookings and check-ins.
Plan and payment records. Apple and Google take card details for plans, and we never see them.
Device and security details, such as IP address and app version.
Your email, if you join the waitlist.

How we use it

To run your account and sign you in.
To check your email, mobile number, ID and photos.
To build your profile, work out compatibility and suggest matches.
To deliver messages, journeys, events and notifications.
To keep members safe, by checking photos and messages with automatic rules, and by handling reports.
To take payments and keep the records the law requires.
To count visits and improve Qalbii, only if you say yes to this.
To answer your requests and meet the law.

ID and photo checks

An outside ID service checks your ID and live selfie. If it cannot confirm them, a trained moderator checks. We keep a locked copy of your ID only until the check is decided, and delete it within 24 hours.

Your photos are checked automatically, and your main photo is compared with your ID selfie. This uses facial comparison, which is biometric data, so we ask for your explicit consent. A person looks only at photos that are flagged.

Who we share it with

We use these companies to run Qalbii. Each gets only what it needs. We do not sell your information.

Supabase: our database and sign-in.
Cloudflare: our website, and checks that you are a person.
Resend: emails we send you.
Twilio: text codes.
Amazon Web Services (Rekognition): photo checks.
An ID-check service, still being chosen: checks your ID and selfie.
Sentry: reports when something goes wrong.
PostHog: visit and usage counts, only with your consent.
Crisp: our help chat, once it starts.
Expo: notifications to your phone.
Apple and Google, with RevenueCat: payments and plan status.
A card payment provider for event tickets, still being chosen.

Where it is stored

Some of these companies are outside the UK. Where they are, we use legal safeguards to protect your information.

How long we keep it

Your account and profile: while your account is open.
After you ask to delete: 30 days to change your mind, then we erase your information or make it anonymous.
ID copy: deleted within 24 hours of the decision.
Chats: while the match exists. When a match ends or either of you deletes your account, the chat is hidden at once and erased 90 days later.
Sign-in sessions: end after 90 days without use.
Payment and ticket records: up to 7 years.
Safety evidence: up to 2 years after a case closes.
One-way codes kept after a permanent ban: 5 years.
Data download links: 7 days.
Waitlist email: 30 days after we invite you, or 30 days after Qalbii opens to everyone (or after you join, if that is later).
Backup copies of photos: gone within 31 days of deletion.
A request to delete sent from this website: 6 years, as proof that we acted on it.

Your rights

You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, and to move it elsewhere. You can withdraw consent any time, and ask for a person to review an automatic decision. Email privacy@qalbii.com. We reply within one month, and we do not charge.

Your choices

In the app's Settings you can choose your notifications, who sees your photos, take a break, withdraw consent and delete your account. Analytics are optional, and we ask you once.

Security

We protect your information with encryption in transit, strict rules about who can see what, private file storage, two-step sign-in for our team, and logs of what our team views. No system is perfect. If a breach puts you at high risk, we will tell you without undue delay.

Children

Qalbii is only for people aged 18 or over. If we learn that a member is under 18, we close the account. See our Child safety page.

Changes

We will tell you in the app before an important change. If a change means your consent no longer covers how we use your information, we will ask again. Matching pauses until you answer.

Questions and complaints

Email privacy@qalbii.com. You can also complain to the Information Commissioner's Office at ico.org.uk.