Muslim Matching Privacy Policy
Last updated: 6 November 2026
Summary
- Muslim Matching is an app for Muslims who are looking for marriage. Boring Businesses, LLC runs it.
- We collect what you tell us, so that we can build your profile and run requests, matches and vetting. This includes your faith, your background and anything you choose to tell us about your health. We use these sensitive details only with your explicit consent. You can withdraw it at any time.
- Other members see your card. It has no photos. Only a match sees your fuller profile. Your walī's phone number goes only to the brother, at the end of a completed vetting.
- There are no ads, no tracking and no analytics. We do not sell or share your personal information.
- A few companies help us run the app: Supabase (our database, in Ireland), Resend (sign-in emails, and report alerts to our team), RevenueCat (subscriptions), Expo (app updates and notifications) and Anthropic (an AI check of your texts before they are saved). Apple and Google handle sign-in and payments.
- You can delete your account at any time in the app: You → Settings → Manage account → Delete account.
- To get a copy of your data, or for any other privacy request, email us (section 20).
- Muslim Matching is only for adults. You must be 18 or older.
1. Who we are
Muslim Matching is run by Boring Businesses, LLC, a limited liability company registered in Delaware, USA. In the App Store, the app's seller appears as "Boring Businesses LLC". In this policy, "we", "us" and "our" mean this company. "You" means a person who uses the app. We also call users "members".
We decide how and why your information is used. In data protection law, this makes us the "controller".
- Postal address: 131 Continental Dr, Suite 305, Newark, DE 19713, USA. This is the address of our registered agent, who forwards our mail to us.
- Register: Delaware Division of Corporations, file number 3423805.
- Privacy requests and support: support@muslim-matching.com, or in the app: You → Help & support.
- Data protection officer: We have not appointed a data protection officer.
1.1 EU representative
The GDPR applies to us because we offer Muslim Matching to people in the EU (GDPR Art. 3(2)). Our representative in the EU (GDPR Art. 27) is:
- Name: Erik Mayer
- Postal address: Klopstockstraße 47 B, 70193 Stuttgart, Germany
- Email: support@muslim-matching.com
You and data protection authorities can contact our representative about any question on how we use personal information. The same person is also our legal representative in the EU under the Digital Services Act (Art. 13).
2. What this policy covers
This policy covers the Muslim Matching app for iPhone, the Android app when it launches, and the support we give by email. It covers only the app, not our website.
Muslim Matching is available worldwide, so we wrote this policy for users in every country. It follows the strictest rules that apply to us: the EU General Data Protection Regulation (GDPR), the UK GDPR and US state privacy laws. We give every user the same rights, wherever they live.
3. What we collect, and where it comes from
You type or choose most of what we hold. Before you sign in, your answers stay on your phone. When you sign in, the app sends them to our database. After that, the app saves each change you make.
3.1 Account and sign-in
| Information | Where it comes from |
|---|---|
| Your email address. With Sign in with Apple, this can be a private relay address from Apple. | You type it, or Apple or Google gives it to us when you sign in with them. |
| Sign-in codes (6 digits). Each code expires after 1 hour. | We email the code to you when you sign in with your email address. |
| Your account ID: a random number that identifies your account. Other members' apps receive it with your card. | We create it when you first sign in. |
| Your Apple or Google account ID. | Apple or Google, when you sign in with them. |
| Your name from Apple or Google. Apple can share your name the first time you sign in; the app puts your first name in the name field, and you can change it. Google shares your name and a link to your profile picture (section 17). | Apple or Google. |
| Sign-in and security records: your IP address, your device and browser type, and when you signed in. | Our database provider creates them automatically when you use the app. |
3.2 Your card (other members can see it)
Your card is your profile in Browse. It has no photos. It shows an avatar that you build.
| Information | Details |
|---|---|
| First name | Up to 40 characters. |
| Age | We work it out from your date of birth. Other members see only your age, never the date. |
| Gender | Brother or sister. It is not printed on the card, but it decides who sees you: brothers see sisters, and sisters see brothers. |
| Country where you live | The app suggests a country from your phone's region setting. It does not use GPS or your IP address. |
| Background (ethnicity) | For example "South Asian" or "Pakistan". |
| Roots | Your mum's and your dad's country. They show as two flags on your card. |
| Height and weight | For example 178 cm, 74 kg. |
| Avatar look | Skin tone and hair colour. |
| Religious dress and grooming | Hijab, niqab or burqa, hijab style and makeup outside (sisters); beard (brothers); dressing style. |
| How you follow Islam | Quran, Prophet ﷺ, Salaf. |
| Sect | Sunni, Shia, Sufi, Ahmadiyya or Just Muslim. If you choose "Prefer not to say", the card shows nothing. |
| Revert or born Muslim | For example "I reverted". |
| Marital status and children | Never married, divorced, widowed or annulled; married (brothers only); whether you have children. |
| Languages | For example "Arabic" or "Urdu". |
| Bio, profession and education | Short texts that you write: up to 140, 40 and 40 characters. |
| Premium badge ("VIP") | Shows other members that you have Premium. |
3.3 Your private answers (only you and our team)
- Your date of birth.
- How long you have wanted to get married.
- Your answers to the reflection questions at sign-up (for example, "Why aren't you married yet?"), and how committed you are.
- Where you heard about us, and the version of the truth pledge that you ticked at sign-up.
- Your settings: who can see your card, and whether you are taking a break.
- Sisters only: your walī's name, phone number and relationship to you (section 8).
3.4 Your fuller profile (only your matches see it)
These answers add depth to your profile. Only the other person in an active or completed match can see them. They never show in Browse. Our server also uses some of them to set the order of Browse (section 13).
- Your salah (how often you pray).
- Your education, work pattern, field of work and income band.
- Your madhab, mindset, religious practices, the scholars you listen to, and how long you have been practising.
- "Anything someone should know before they swipe?" (free text, up to 300 characters).
- Your marriage plans, what you are open to (for example, polygyny), the hadiths you choose, who you are looking for, your hard nos and your mahr range.
- Your personality, your hobbies and "About" (free text, up to 600 characters).
3.5 Requests, matches and vetting
- Match requests: who you sent a request to, who sent you one, and when. For a rematch request, the reason you write (up to 300 characters).
- Match records: who the match is between, its stage and deadlines, when it ended, who ended it and why. If you write a reason when you end a match, we store it (up to 280 characters).
- Profile Feedback: the reflection you write on the other person's full profile.
- Vetting answers in five phases: Deal Breakers (which includes things about you), Worldview, Marriage Views, Lifestyle and Next Steps. You choose topics and write your stance on each one, for example on the topic "Health" or "Debt". Each stance can be up to 300 characters.
- Your reactions: which of the other person's answers you opened, and how you rated each one (concern, neutral or resonates). Only you see these.
- Your decisions: your choice at each step to move forward, and to involve the walī.
- Concerns and clarifications: up to 280 characters each.
- Drafts: the app saves your unsent answers while you write. Only you see them.
- An activity log of actions in a match, such as "answer opened" or "draft saved", with the time. Only our team can see it.
3.6 Browse
- Filters and sort order that you save (for example, age 22–30, sect, background and countries).
- Passes: when you swipe left, we hide that profile from you for 30 days.
- When you were last active: nobody sees it, but it orders the "Recently active" sort.
3.7 Premium and payments
- Subscription status: your plan, the store, when it ends and whether it renews.
- Purchase records that RevenueCat sends us from Apple or Google, such as the product, price, currency, store country and transaction numbers.
- The sisters' oath: if you use "I can't afford Premium", we store which version of the oath text you affirmed, and when.
- We never see your card or bank details. You pay Apple or Google directly.
3.8 Safety
- Reports you send: the reason you choose, any details you write (up to 1,000 characters), where in the app you were, and the match, if there is one. We keep reports about you in the same way.
- Blocks: who blocked whom, and when.
- Filter blocks: when our filter stops a text, we do not save the text. If the AI check stopped it (section 13), Anthropic keeps its copy for the time in section 10: up to 30 days, or up to 2 years if Anthropic's safety systems flag it. We may keep a short record: where it happened, the type of rule (or that the AI model declined to judge the text, or gave no clear answer), and a coded fingerprint (a "hash") of the text, not the text itself.
- Filter use count: to stop misuse, we count how often your app uses the filter. We keep one record: the current 10-minute window and day, the number of checks in each, and the time of the last check. Saving pauses for a short time above 20 checks in 10 minutes or 150 in a day, and when two checks come less than 3 seconds apart.
- Suspensions: if our team suspends an account, we record when and why.
3.9 Support
- Help & support tickets: the topic (technical issue, billing issue or question) and your message (up to 2,000 characters).
- Attachments: an image (PNG or JPEG) or a PDF of up to 5 MB, if you add one. Only our team can open it.
- Emails that you send us, and our replies.
3.10 What the app sends automatically
- App updates (Expo): when the app checks for an update, it sends Expo a random installation ID, your phone's platform, version details of the app and your IP address. After a crash, it also sends the last error message (up to 1,024 characters). The installation ID stays the same each time you open the app, and your phone's backups include it.
- Subscriptions (RevenueCat): after you sign in, the app sends RevenueCat your account ID. RevenueCat's software can also receive basic technical details, such as your phone's platform, the app version and your IP address. On Android, it can also receive your phone's model, brand and language settings.
- Notifications (Expo, Apple and Google): if you turn on notifications, the app sends us a push token (a random address for your phone) and your phone's platform. To send a notification, we give Expo the token and the words. The words can include the first name of the person it is about. Expo passes them to Apple or Google, who deliver them to your phone. We send notifications only about your requests and matches, never ads. You can turn them off in You → Settings → Notifications.
- Server logs (Supabase): our database provider logs each request with details such as the IP address, the device and browser type, and the time.
- Sign-in (Apple and Google): when you sign in with Apple or Google, the app exchanges sign-in details with them.
3.11 What stays on your phone
We do not collect the following. It stays on your phone.
- App lock: if you turn on Passcode (You → Settings → Passcode), your phone checks your Face ID, Touch ID, fingerprint, face unlock, passcode or screen lock. The app only learns whether the check passed. Nothing goes to us.
- Your phone's region: the app uses it only to suggest your country. Only the country you choose leaves your phone.
- Your answers before you sign in.
- Your sign-in session, until you sign out.
- A hint that shows how you last signed in ("you last logged in with …"), with your email address partly hidden. It stays after you sign out and after you delete your account, until you delete the app.
3.12 What we do not collect
- We do not ask for photos of you. The only images we receive are files that you attach to a support ticket. With Google sign-in, we keep a link to your Google profile picture (section 17).
- No chat messages, calls or voice. The app has no chat.
- No GPS or precise location.
- No contacts from your address book.
- No advertising ID.
- No face or fingerprint data. These checks stay on your phone.
- No payment card details.
The app does not use sign-in by text message (SMS), web checkout or analytics today. We will update this policy before we switch any of these on.
4. Sensitive information and your explicit consent
Some of what you share is "special category data" under the GDPR, and "sensitive personal information" under US state laws. We take extra care with it.
What it is:
- Religious beliefs and practice: how you follow Islam, your sect, whether you reverted, your religious dress and grooming, your salah, madhab, practices and the scholars you listen to, your hadiths, and the oath, if you take it.
- Ethnic origin: your background. Your avatar's skin tone can also show it.
- Health: anything you choose to write about your health, for example under the vetting topic "Health", or in "Anything someone should know before they swipe?".
- Opinions and beliefs in your vetting answers, for example on worldview topics such as "LGBTQ+ in society" or "Feminism framing".
- Possibly your sex life or your past: some marriage preferences (for example, "Marrying a virgin" or "Open to polygyny"), and anything you choose to write about past relationships or convictions.
Muslim Matching is an app for Muslims. So the fact that you have an account can itself suggest your religion. We protect all of your account data with this in mind.
Our legal reason is your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)). You give it when you choose to add these details to your profile, or to write them in your answers. We use them for two purposes: to show your profile and find matches, and to keep texts safe with our filter, including the AI check (section 13). The sign-in screen tells you this before you continue: "By continuing you accept our Terms of Use & EULA. We use your details, like your faith, to find matches, and an AI service checks texts for safety. See our Privacy Policy."
You choose what you share. Some answers are optional. For your sect, you can choose "Prefer not to say".
Who sees it: section 7 explains this. In short, other members who can see your card see the card details, and only your matches see your deeper answers. Our service providers also handle these details for us (section 7.3), for example the Anthropic AI check (section 13).
How to withdraw your consent: you can withdraw it at any time.
- Remove or change the details in You → Edit profile. For your sect, you can choose "Prefer not to say".
- Or delete your account: You → Settings → Manage account → Delete account.
- You can also email support@muslim-matching.com.
Some answers are needed for your card, for example how you follow Islam. Muslim Matching cannot build your card or match you without them. To withdraw your consent for those, delete your account, and we delete the answers. Withdrawing does not make our earlier use of them unlawful.
Please think before you write. Your match can read what you share, and could copy it. Share health or other sensitive details only if you want your match to know them.
5. Why we use your information, and our legal reasons
| What we do | Information we use | Our legal reason under the GDPR |
|---|---|---|
| Create your account, sign you in and keep your account secure | Account and sign-in information | Contract: we need it to give you the service you signed up for (Art. 6(1)(b)). Security records: legitimate interests (Art. 6(1)(f)). |
| Send you notifications about your requests and matches, if you turn them on | Your push token and platform, your notification setting, and the first name of the person the notification is about | Contract: we need it to give you the service you signed up for (Art. 6(1)(b)). |
| Show your card in Browse and handle match requests | Your card, settings, filters and requests | Contract. Sensitive details: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a)). |
| Run matches and vetting, including deadlines and the walī handoff | Your fuller profile, match and vetting information, and walī details | Contract. Sensitive details: your explicit consent. The walī's details: legitimate interests (section 8). |
| Provide Premium and the sisters' oath | Subscription status, purchase records and the oath | Contract. Sensitive details (the oath is a religious affirmation): your explicit consent. |
| Keep members safe: the text filter, reports, blocks, suspensions, and keeping under-18s out | Safety information, and the content and profiles involved | Legitimate interests. Sensitive details in this content: your explicit consent, or where needed, legal claims (Art. 9(2)(f)). |
| Answer your support requests | Tickets, attachments and emails | Contract and legitimate interests. Sensitive details: your explicit consent. |
| Deliver app updates and fix crashes | Installation ID, device and app details, IP address and error messages | Legitimate interests. |
| Protect the service from misuse and attacks | Sign-in records and server logs | Legitimate interests. |
| Keep records that the law requires, and answer lawful requests from authorities | Only what the law requires | Legal obligation (Art. 6(1)(c)). |
| Keep records of ended matches and of reports, to handle complaints, disputes and legal claims | Match records and reports | Legitimate interests. |
Our legitimate interests are:
- keeping members safe, and keeping the service free from abuse;
- protecting accounts and our systems;
- keeping the app working, and fixing problems;
- letting a sister involve her walī, as the service promises;
- handling complaints, disputes and legal claims.
We use this legal reason only when your rights do not outweigh these interests. You can object to it (section 12).
What we do not do: we do not use your information for advertising. We do not sell it. We do not use it to train AI models. We do not send marketing emails or newsletters. If we ever want to, we will ask for your consent first and update this policy. We use your email address only to sign you in, to reply to you, and to tell you about important changes, such as changes to this policy.
6. What you must give us, and what is optional
- Needed for an account: a way to sign in (email, Apple or Google), your first name, gender, date of birth and country, and the main sign-up answers, including your faith answers. Without them, we cannot create your card or match you.
- Needed at some steps: the app tells you when a step needs an answer. For example, you must finish your fuller profile before you start a vetting, and a brother must answer the income question in it. A sister must add her walī's name and phone number before her final decision to move forward.
- Optional: your bio, profession and education; details in a report, except when you choose "Something else"; and attachments to support tickets.
- No law requires you to give us information. If you choose not to give something that a feature needs, you cannot use that feature.
7. Who can see your information
7.1 Other members
- Your card: signed-in members of the opposite gender can see it in Browse, if all of these are true:
- "Who can see my profile" is set to "Everyone" (the default). If you choose "Only people I request", your card shows only to people you have sent a request to, while the request is waiting;
- you are not taking a break;
- neither of you has blocked the other;
- your account is not suspended.
- When you send a request: if the other person does not have Premium, they first see only your first name, age and country.
- Your fuller profile: only the other person in an active or completed match.
- In a match: the other person reads your Profile Feedback (after you have both written it), your vetting answers (after you have both sent your answers for that phase), and any concern or clarification that you write. If you send a rematch request, the other person reads your reason if they have Premium.
- After a match ends: the other person keeps a small card of you in their Unmatches list (first name, age, country, avatar and Premium badge), and can still open your card. This continues even if you take a break or change who can see your card. It stops when either of you blocks the other or deletes their account, or when either account is suspended.
- After a completed vetting: you and your match both keep each other's fuller profile, until one of you blocks the other or deletes their account, or either account is suspended.
- Your end-of-match reason: if you end a match during vetting, the other person sees the reason you write. If you end it at the Profile stage, the reason is optional, and the other person sees only a standard message, but we still store your reason.
- Your first name outside the app: a member can use the share button in Browse to send your first name and the words "on Muslim Matching" to someone else.
- Copies: a member can take screenshots of what they see, or copy it. The app cannot stop this.
- Your saved filters: they decide where you appear when other members sort Browse by "I'm in all their filters". So a member could guess some of your filters by changing their own answers.
7.2 Our team
Today, only our founder reads the information we hold, and only when he needs to: to run the service, answer support requests, review reports and keep members safe. When he travels, a backup person reviews new reports, so that we can still act on them within 24 hours.
Our team does not use AI tools to read members' personal information. Separately, an AI model from Anthropic checks members' texts before they are saved (sections 7.3 and 13).
7.3 Our service providers
These companies process information for us, only on our instructions. Each one must protect your information at least as well as this policy says we do.
| Company | What it does for us | Information it handles | Where |
|---|---|---|---|
| Supabase, Inc. | Runs our database, sign-in system, file storage and server code | Everything in section 3 that reaches our servers | Data stored in Ireland (EU), on Amazon Web Services. Supabase also runs our text check (section 13) in Ireland. Supabase is a US company; its support staff can access data from other countries. |
| Resend (Plus Five Five, Inc.) | Sends the emails with your sign-in codes. Also sends our team an alert email for each new report, so that we can act on it within 24 hours. | Your email address, the email with the code, and delivery details. A report alert holds only the report's number, its category, the screen, the times, whether details were written, and how many reports are open against the reported member. It holds no member ID, name, email address or report text. | Sends the emails from the EU (Ireland). Stores email logs in the United States. |
| RevenueCat, Inc. | Manages subscriptions | Your account ID, purchase records, and basic device and network details | United States |
| Expo (650 Industries, Inc.) | Delivers app updates and sends notifications | Installation ID, device and app details, IP address and crash error messages. For notifications: your push token and the words, which can include a first name | United States |
| Anthropic, PBC | Checks the texts in section 13 before they are saved, for contact details, plans to meet, and flirting, sexual or abusive language. Anthropic may not use the texts to train its AI models. | Only the text that you type. Answers that you pick from the app's lists do not go to the AI check. This can include sensitive details, such as your faith, your background or your health. We send it from our server, without your name, your account ID, your IP address or the field that the text comes from. | Stores data in the United States. The check runs in the United States. Anthropic staff in other countries can access data for safety reviews, support and incidents. |
When you email us, our business email provider, Namecheap, stores your emails and our replies for us, only on our instructions.
7.4 Apple and Google
Apple and Google are independent companies. They handle these things for you under their own privacy policies:
- Apple: Sign in with Apple, App Store purchases and subscriptions, the prompt that asks you to rate the app, and delivering notifications. See Apple's privacy policy.
- Google: Google sign-in, and Google Play purchases and delivering notifications when the Android app launches. See Google's privacy policy.
7.5 Legal reasons and safety
We may share information when the law requires it, for example to obey a valid court order. We may also share it to protect someone from serious harm, or to defend legal claims. If another company takes over Muslim Matching, your information would pass to that company, and it would have to respect this policy. We would tell you first.
7.6 No selling, and no sharing for ads
We do not sell your personal information. We do not share it for advertising. We do not give it to data brokers.
8. Your walī's information
This section is for sisters and for their walīs. A walī is a sister's guardian, for example her father or her brother. A walī does not use the app himself.
- Who is responsible: Boring Businesses, LLC (section 1).
- What we hold: the walī's name, phone number and relationship to the sister (Father, Brother, Uncle, Grandfather, Son, Imam or Other).
- Where it comes from: the sister enters it in You → Settings → Walī. She must add it before her final decision to move forward in a vetting. We do not get it from anywhere else.
- Why we hold it: in Muslim Matching, the walī comes in at the end. When a sister and a brother both finish all five vetting phases, and both choose to move forward to the walī, the brother receives the walī's details. He can then contact her family in the proper way.
- Who sees it, and when:
- Nobody sees it while the sister builds her profile or goes through vetting. It is never on her card.
- Only the brother of a completed match receives it, and only at the end, after both have chosen to involve the walī.
- He keeps access only while neither of them has blocked the other, and neither account is suspended.
- The sister sees that her walī's details were shared.
- Our team can see it when needed (section 7.2).
- Our legal reason: legitimate interests: the sister's interest, and ours, in letting her involve her walī, as the service promises (GDPR Art. 6(1)(f)). For the sister, it is also part of our contract with her (Art. 6(1)(b)).
- Where it is stored: in our database in Ireland (sections 7.3 and 9).
- Automatic decisions: we make none about walīs.
- How long we keep it: the sister's copy stays until she changes it or deletes her account. The copy given to a brother also stays until she deletes her account. If the brother saved the number outside the app, we cannot delete that copy.
- Sisters: when you add your walī, you confirm with a tick box that he agreed to share his contact details. Please also show him this section.
- Walīs: we do not contact walīs ourselves; we ask sisters to tell their walī about this section. You have the same rights as members (section 12). You can ask for a copy of your details, ask us to correct or delete them, object to our use of them, or complain to a data protection authority. Email support@muslim-matching.com. If we delete your details, the sister must add a walī again before she can finish a vetting.
9. Sending information to other countries
- Our database is in Ireland, in the EU. Supabase also runs our text check (section 13) there, before the text goes to Anthropic.
- We are a company registered in the United States.
- RevenueCat, Expo and Resend process data in the United States. Supabase is a US company, and its staff can access data from outside the EU. Anthropic checks texts and stores data in the United States, and its staff can access data from other countries. Our business email provider, Namecheap, can also store emails outside the EU. Apple and Google work worldwide.
- So people in the United States and other countries can access your information. Privacy laws there may protect it less than the laws where you live.
- When information leaves the EU, the UK or Switzerland, we use one of these safeguards:
- the European Commission's Standard Contractual Clauses (with the UK Addendum for UK data); or
- the EU-US Data Privacy Framework, with its UK and Swiss extensions, when the company receiving the data is certified under it.
- For Anthropic, we use the Standard Contractual Clauses in Anthropic's data processing terms, with their UK and Swiss addenda.
- You can ask us for a copy of these safeguards. Email support@muslim-matching.com.
10. How long we keep information
| Information | How long we keep it |
|---|---|
| Your account, card, private answers, fuller profile, settings and saved filters | Until you delete your account. |
| Sign-in codes | 1 hour. |
| Push token | Until you sign out, delete your account, or Apple or Google says that the phone no longer accepts it. |
| Notifications that we send or queue, with the first name in them | 30 days. We delete them earlier if you, or the person named, deletes the account. |
| Your Premium status and your oath | Until you delete your account. |
| Your walī's details | See section 8. |
| The content of a match that ended: vetting answers, Profile Feedback, concerns, clarifications, drafts and reactions | We delete it 90 days after the match ended. If a report about that match is still open, we keep it until we have dealt with the report. |
| The content of a completed match | Your own answers stay until you delete your account. A clarification that you wrote in reply to the other person's concern stays until they delete their account. |
| Match requests | A request that nobody answers expires after 30 days. The record of the request stays (see the next two rows). |
| Requests that you sent (including rematch reasons), and your decisions in a match | Until you delete your account. |
| Match records (who, when, stage, how and why it ended), the activity log, and requests that you received | We keep them, so that both people keep a correct history and so that we can handle complaints. When you delete your account, we remove your account ID from them. |
| Passes | Until you or the other person deletes their account. |
| Filter-block records | Until you delete your account. |
| Filter use count | Only the latest 10-minute window. We delete it with your account. |
| Reports | We keep them after the accounts involved are deleted, without the account IDs. |
| Report alert emails in our support mailbox | We delete them after 90 days. |
| Support tickets and attachments | Until you delete your account. |
| Our copy of purchase records from RevenueCat | We keep them for our accounts. When you delete your account, we remove your account ID and the purchase details from them. |
| Backups of our database | Our database provider keeps daily backups for 7 days. |
| Server and sign-in logs at Supabase, and email logs at Resend | For the time that each provider sets. |
| Texts that Anthropic checks (section 13) | Anthropic deletes them within 30 days. If Anthropic's automatic safety systems flag a text as breaking Anthropic's Usage Policy, Anthropic can keep the text for up to 2 years, and the results of its safety checks for up to 7 years. Anthropic can also keep data when the law requires it, or when it needs the data to stop misuse of its services. |
| On your phone: your sign-in session, and the "last logged in" hint | Until you sign out; the hint until you delete the app. |
We do not delete accounts that nobody uses. Your account stays until you delete it. We plan to set fixed time limits for some of this information later, and we will update this policy when we do.
11. Deleting your account
In the app: You → Settings → Manage account → Delete account. Deletion happens at once and cannot be undone. If you signed in with Apple on an iPhone, the app asks you to confirm with Apple first.
What happens:
- We hide your card, withdraw your waiting requests, and end your active matches. The other person sees "This match has ended."
- We ask Apple to remove the link between your Apple account and our app.
- We delete your customer record at RevenueCat.
- We delete your account and the information linked to it: your sign-in details, card, private answers, fuller profile, settings and filters, the requests you sent, your own vetting answers, reactions, decisions and drafts, the concerns you raised and your Profile Feedback, your walī's details (including any copy given to a brother), your Premium status and oath, your filter-block records and filter use count, passes, and your support tickets and attachments.
What stays:
- Match records, without your account ID. This includes any reason you wrote when you ended a match, also at the Profile stage, where the other person did not see it.
- A clarification that you wrote in reply to the other person's concern. It stays with their concern: for a match that ended, until we delete the match content 90 days after the end; for a completed match, until the other person deletes their account.
- Requests that you received, without your account ID. (We delete the requests that you sent.)
- The activity log of your matches, without your account ID.
- Reports that you sent or that others made about you, without the account IDs.
- Our purchase records, without your account ID or the purchase details.
- Backups and logs, until they expire (section 10).
- Texts that Anthropic checked, until Anthropic deletes them: up to 30 days, or up to 2 years if Anthropic's safety systems flagged them, and the results of its safety checks for up to 7 years (section 10).
- What Apple and Google keep under their own rules.
- Anything that another member copied, for example your walī's phone number.
- The "last logged in" hint on your phone, until you delete the app.
Subscriptions: deleting your account does not cancel a subscription. Apple or Google keeps billing you until you cancel it in your App Store or Google Play settings. Cancel it before you delete your account.
Without the app: email support@muslim-matching.com from the email address on your account. We delete the account within one month.
Taking a break is different. "Take a break" (You → Settings → Manage account) hides your card and stops new requests. It deletes nothing, and matches that you are vetting carry on.
12. Your rights
You have these rights, wherever you live:
- Access: ask what we hold about you, and get a copy. This includes things the app does not show you, such as the activity log and filter-block records.
- Correction: ask us to fix wrong information. You can change most answers yourself in You → Edit profile. Your gender and date of birth can be set only once; to correct them, contact support.
- Deletion: delete your account in the app, or ask us to delete your information.
- Restriction: ask us to stop using your information for a time, for example while we check a correction.
- Portability: get the information you gave us in a common, machine-readable file.
- Objection: see the box below.
- Withdrawing consent: at any time (section 4).
- Complaint: complain to a data protection authority.
How to use your rights: email support@muslim-matching.com from the email address on your account. The app has no export button, so we send copies by email. We may ask you to prove that the account is yours. We answer within one month. If a request is complex, we may need up to two more months; if so, we tell you within the first month. Using your rights is free.
Complaints: you can complain to the data protection authority in the country where you live, where you work, or where you think the problem happened. In the EU, find your authority on the European Data Protection Board website. In the UK, it is the Information Commissioner's Office. Please contact us too, so that we can try to fix the problem.
Your right to object
When we use your information because of our legitimate interests (section 5), you can object at any time, for reasons that come from your situation. We will then stop, unless we have strong legitimate reasons that override your interests, rights and freedoms, or we need the information for legal claims. To object, email support@muslim-matching.com.
13. Automatic decisions
- The text filter. When you save a text that other members can see, or a reason for ending a match, our filter checks it automatically, in two steps. First, fixed rules and a word list check it. If they find nothing, an AI model (Claude, from Anthropic) checks it. The AI model gets only the text, without your name or account ID (section 7.3). If either step finds contact details, plans to meet, or flirting, sexual or abusive language, the text is not saved, and the app tells you why. If the AI model declines to judge a text, or gives no clear answer, the text is not saved either, and the app asks you to rephrase it. Such a block does not mean that you broke a rule. Your text stays in the field, so you can change it. If the AI check is not available, only the first step checks the text. The filter decides only about what you are saving at that moment. It does not suspend you or limit your account. No filter catches everything, so member reports remain our backstop.
- People decide about accounts. We may look at repeated filter blocks, but a person on our team reviews them, reviews reports, and decides on any suspension. No machine suspends an account.
- Fixed rules. Some things happen automatically under the rules in our Terms of Use. For example, a match closes when a deadline passes, and a request expires after 30 days. These rules are the same for everyone. They are not judgements about you.
- Browse shows profiles by the filters and the sort order that you choose. The first sort order is "Best match". It gives each profile a private score that sets its place in the list. The score reads your card, your fuller profile and your private answers, and those of the other person. It also gives a small lift to new members and to people who have sent you a request. The score stays on our server. Other members cannot see it or your private answers. You can choose another sort order at any time.
- We do not make any decision about you that is based only on automatic processing and that has a legal or similarly significant effect on you (GDPR Art. 22).
14. Security
- Your information travels between the app and our servers over encrypted connections (HTTPS).
- Our database provider encrypts stored data (AES-256).
- Strict access rules protect every table. The app cannot change our tables directly. It goes through server functions that check who you are.
- Other members never receive your date of birth. They see only your age.
- Support attachments are in private storage that only our team can open.
- You can add an app lock: You → Settings → Passcode.
- Your information is not end-to-end encrypted. Our team can access it when needed (section 7.2).
- No system is completely secure. If a breach puts you at risk, we will tell you, as the law requires.
15. Under 18s
Muslim Matching is only for adults. You must be 18 or older. The app does not accept a date of birth that makes you younger than 18. We do not check IDs.
We do not knowingly collect information from anyone under 18. If you think a member is under 18, report them in the app ("⋯" → Report → "Under 18"), or email us. If we learn that a member is under 18, we close the account and delete their information.
16. No ads, no tracking, no analytics
- The app shows no ads.
- The app contains no advertising, analytics or tracking software.
- We do not track you across other companies' apps or websites, and we do not use your phone's advertising ID. The app does not ask for permission to track you.
- The app does not use cookies.
17. Signing in with Google
- What Google shares with us: your Google account ID, email address, name, and a link to your profile picture. These come from Google's basic sign-in permissions ("email" and "profile"). We ask for nothing else: no access to your Gmail, contacts, Drive or calendar.
- How we use it: we use the information from Google to create your Muslim Matching account and sign you in. Your Google email address becomes your account's email address. We also use it to reply to you and to tell you about important changes (section 5). Our sign-in system keeps your Google name and picture link with your sign-in record. We do not show them in the app, and we do not use them for anything else.
- Who receives it: only our database provider, Supabase, which stores it for us (section 7.3). We do not sell Google user data. We do not use it for ads, and we do not use it to train AI. People on our team look at it only when needed for security, to follow the law, or with your agreement.
- How we protect it: in the same way as all your information (section 14).
- How long we keep it: until you delete your account. You can also remove Muslim Matching's access to your Google account at myaccount.google.com/connections.
- Limited Use: Muslim Matching's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
18. Extra information for US residents
This section applies under the California Consumer Privacy Act and similar laws in other US states.
Sensitive personal information. We collect sensitive personal information: your religious or philosophical beliefs, your racial or ethnic origin, information about your health, possibly information about your sex life, and your account sign-in details. We use it only to give you the service that you asked for, to keep members and the service safe, and to prevent fraud and abuse. We do not use it to infer things about you for any other purpose. So we do not offer a separate "Limit the use of my sensitive personal information" option (California Code of Regulations, title 11, § 7027(m)).
We do not sell or share your personal information. We have not sold or shared it in the last 12 months. ("Share" here means sharing for cross-context behavioural advertising.) We do not sell or share the personal information of anyone under 16, and we do not allow anyone under 18 to use the app.
What we collect (in the categories of California law):
- Identifiers: email address, account ID, Apple or Google account ID, IP address and installation ID.
- Personal records: your name and email address.
- Protected characteristics: age, gender, religion, ethnicity and marital status.
- Commercial information: subscription and purchase records.
- Internet and app activity: how you use the app (for example requests, matches and the activity log) and server logs.
- Approximate location: your country only.
- Sensitive personal information: as described above.
- Other information you give us: your profile texts, answers, Profile Feedback, reports and support messages.
Sources: you; other members (for example, reports and Profile Feedback about you); Apple and Google (sign-in); and our service providers (purchase records). Purposes: section 5. Who receives it: the service providers in section 7.3, for the business purposes in section 5. How long we keep it: section 10.
Your rights: to know what we collect and how we use it, to get a copy, to have it deleted, to have it corrected, and not to be treated differently because you use these rights. The rights to opt out of selling or sharing, and to limit the use of sensitive personal information, do not apply, because we do not sell or share your information and we use it only as described above.
How to use your rights: email support@muslim-matching.com. We check your identity through the email address on your account. Someone you authorise can ask for you; we may ask for proof that you authorised them. If we turn down your request, you can appeal: reply to our answer with "Appeal" in the subject line. We answer appeals within 45 days. If you live in a state that allows it, you can also complain to your state's attorney general.
Do Not Track: we do not track you across other websites or apps, so a "Do Not Track" or Global Privacy Control signal changes nothing.
Direct marketing: we do not share personal information with other companies for their own direct marketing.
19. Changes to this policy
We update this policy when the app or the law changes. We will update it before we switch on any feature that is off today (section 3.12). If a change is important, we will tell you before it takes effect, for example by email or in the app. The date at the top shows when we last changed this policy.
20. Contact us
- Privacy requests and support: support@muslim-matching.com, or in the app: You → Help & support.
- Post: Boring Businesses, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA