Legal

Privacy Policy

Effective date: 11 October 2026

Welcome to Zawaaj 360. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, the Zawaaj 360 mobile apps for Android and iOS, and associated services (collectively, the “Service”). We are committed to never selling your data to third parties.

Zawaaj 360 is powered by LaShareek.

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide when you register for the Service, including:

• Name or alias and email address
• Account credentials (password, stored securely as a hash)
• Demographic information (age, gender, location, nationality, ethnicity)
• Physical characteristics (height, weight, body type)
• Religious practices and preferences (practicing level, prayer frequency, madhab, hijab/beard preference)
• Marital status and family information (children, willingness to relocate)
• Education and occupation details
• Spouse preferences and expectations, including your match preferences

Your match preferences are used only to order the profiles you are shown, so that closer matches appear first.

1.2 Wali (Guardian) Information

Female users are asked to provide their Wali's contact information (name, relationship, email, phone number) during onboarding. This information is stored securely and is never displayed publicly, shared with other users, or sold to third parties. It is accessible only to the platform's administrative team when necessary for support or safety purposes.

1.3 Photos

You can upload profile photos on the website or in the app. Photos are reviewed by our moderation team, and they are shown blurred to other members until you grant a member access to see them. You decide who receives access.

1.4 Payment Information

On the website, we use Stripe to process subscription payments. In the mobile apps, subscriptions are purchased through the Apple App Store or Google Play, and we use RevenueCat to manage those purchases. We do not store your complete card information on our servers. Card details go directly to Stripe, Apple, or Google and are handled under their privacy practices and PCI-DSS compliance standards. We receive only what is needed to run your subscription, such as which plan you bought, its status, and when it renews or ends.

1.5 Activity and Presence

To help members know who is active, we record:

• Online status — whether you are currently using the Service
• Last seen — when you were last active
• Profile views — which profiles you view, so a member can see that you “viewed your profile”

1.6 Devices and Push Notifications

If you allow notifications in the app, we store a device token that lets us send notifications to your phone. Notifications are delivered through Expo, Google Firebase Cloud Messaging (Android), and the Apple Push Notification service (iOS). Notification payloads do not contain the content of your messages; they tell you that something happened so you can open the app to see it. You can turn notifications off at any time in your phone's settings.

1.7 Usage Data

We automatically collect certain information when you use the Service, including device information, IP address, access times, pages and screens viewed, and application interactions. This data helps us improve the Service and troubleshoot issues.

1.8 Communications

We collect and store messages sent through the Service, including messages exchanged with other users and communications with our support team. Messages may be reviewed by moderators when flagged by our content moderation system.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Show you compatible members, ordered by your match preferences
• Process subscriptions and manage payments
• Send you notifications and service emails
• Moderate photos and content for Shariah compliance and platform safety
• Respond to support inquiries
• Detect, prevent, and address fraud or security issues
• Comply with legal obligations

3. How We Share Your Information

3.1 With Other Users

Your profile information (alias, age, location, Islamic background, preferences) is visible to registered members of the opposite gender for matching purposes. You control visibility settings such as exact age vs. age range, and city vs. country/region only. Members can also see your online status and when you were last seen, and a member whose profile you view can see that you viewed it. Your photos stay blurred until you grant access. Contact details and Wali information are never shared.

3.2 With Service Providers

We share information with third-party providers who help us operate the Service:

• Stripe — payment processing on the website
• Apple and Google — in-app purchases through the App Store and Google Play, and push notification delivery (Apple Push Notification service and Google Firebase Cloud Messaging)
• RevenueCat — managing in-app purchases and subscription status in the mobile apps
• Expo — sending push notifications to your device, using your device token
• Resend — sending service emails, such as verification, password reset, and message notifications
• GoHighLevel — managing our member communications; we send it your email address
• Supabase — database hosting and file storage
• Vercel — application hosting

These providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we share it.

3.3 With Moderators

When messages are flagged by our content moderation system, moderators review the flagged content in context. Female moderators review flagged messages from female users, and male moderators review flagged messages from male users. Moderators can see usernames, ages, and locations relevant to the flagged interaction. They do not have blanket access to all conversations.

3.4 We Never Sell Your Data

We will never sell your personal information to third parties for marketing, advertising, or any other purposes.

4. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption of data in transit and at rest, secure authentication, restricted access on a need-to-know basis, and regular security assessments. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information while your account is open. Section 6 explains what happens to it when you delete your account.

6. Deleting Your Account

You can delete your account at any time, in the app under Account → Delete account, or by following the steps on our account deletion page, which also explains how to request deletion by email if you no longer have the app.

How long deletion takes

Deletion in the app is immediate and permanent. There is no grace period, and a deleted account cannot be restored. Your GoHighLevel CRM contact and RevenueCat customer are removed straight after, and retried automatically if needed. A subscription bought on our website is cancelled immediately, with no refund for the unused part of the billing period. App Store and Google Play subscriptions are not cancelled: you must cancel them in the store.

What is deleted

• Your profile, every field: name, alias, date of birth, location, nationality, ethnicity, religious practice, appearance, marital details, bio, education, profession, family background, privacy settings and moderation labels
• Your wali details: name, relationship, email and phone
• Your photos, with both the original and the blurred copy of each deleted from storage
• Your match preferences and notification preferences
• Favourites, photo access requests and grants, blocks, mutes and profile views, in both directions: yours, and other members' of you
• All your sessions and push devices: every device is signed out and stops receiving notifications
• Your login (email address and password). Signing in becomes impossible, and the email address is free to register again
• Email verification and password reset tokens
• Your invite record (the imported name, email and CRM contact id) and the record of agreeing to the policy at registration
• Messages still held for review, which were never delivered, so nobody else has a copy
• Conversations whose other member had already deleted their account, unless a report refers to the conversation
• Your Stripe customer (name, email and saved cards), which cancels any website subscription immediately
• Your GoHighLevel CRM contact, and a CRM notification that held your email address
• Your RevenueCat customer, and the purchase history held under it

What is kept, and for how long

Your account becomes an anonymous record with no name or email: only an opaque id remains, your email address is replaced with one that can never receive mail, and your gender, date of birth, last-active and online times are cleared. The records below stay linked to that anonymous record only.

• Messages you sent that were delivered: kept for as long as the other member keeps their account; they are deleted when that member deletes theirs, unless reported. Shown to the other member as from “Deleted member”, with no photo, and closed to new messages. Why: the conversation is the other member's too.
• Billing records: kept for 6 years. Subscription records (plan, dates, status, source, Stripe and store ids), receipts (amount, currency, date, Stripe invoice id), checkout and plan-change consent records (policy version, time, IP address, browser), promotion redemptions and the payment communication log. The emailed copy of each receipt and the links to Stripe's hosted invoices are deleted. Why: tax and accounting law in the UK (HMRC), and evidence of the terms a sale was made under.
• Stripe invoices: kept for 6 years. Held by Stripe. Finalised invoices cannot be deleted, and include the name and email at the time of purchase. Why: tax and accounting law in the UK (HMRC).
• Safety records: kept for 2 years. Reports filed by or about you, moderation warnings, staff messages to you, moderation audit entries and messages a moderator rejected. Why: so a report can be investigated after the reported member has left.

Backups and logs

Our database plan does not include backups, so deleted data is not kept in backups. Server logs record each deletion by account id, not name; if removing the CRM contact fails, the email address is logged. Server and email-provider logs are kept under those providers' own retention.

7. Your Rights

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — update or correct your information through account settings
• Deletion — delete your account and personal data, as described in section 6
• Opt-out — unsubscribe from promotional emails, and turn off push notifications, at any time
• Portability — request a copy of your data in a portable format

To exercise any of these rights, please contact us via our Contact page.

8. Children's Privacy

The Service is intended only for adults aged 18 or over, and registration is refused to anyone younger. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from someone under 18, we will take steps to delete it promptly.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country of residence. By using the Service, you consent to the transfer of your information to the countries where our hosting and infrastructure providers operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. We encourage you to review this policy periodically.

11. Contact

If you have any questions about this Privacy Policy, please contact us via our Contact page or email us at info@zawaaj360.com.