Privacy policy
Draft. Written in plain language on purpose.
Draft for the demo. This isn't legal advice and hasn't been reviewed against PIPEDA, Quebec Law 25, UK GDPR, EU GDPR or US state privacy laws. A qualified lawyer must review it before real members join.
What we collect, and why
- Account details (email, password stored as a secure hash) to sign you in
- Your profile answers, used to show your profile and suggest matches in both directions
- Optional details like faith, practice and life stage, only if you choose to share them
- Your photo, stored privately and shown only by your photo setting
- Messages with people you both said haanji to, so you can talk
- For video calls, only when each call started and how long it lasted, and your private answer to whether the other person looked like their photos. Calls go straight between the two devices (through an encrypted relay if a network blocks that) and are never recorded
- Reports, blocks and moderation decisions, to keep members safe
- Your phone number, kept only as a one-way code so one number means one account. It's never shown to anyone
- A verification selfie, seen only by reviewers and deleted 30 days after your review
- If you choose an ID check, only the result and whether the birth date fits your profile. The ID provider handles the document; we never receive or keep it
- If you choose to add it, your community, kept privately with your consent. It's never shown on your profile, biodata or to our team, only used to tell you and another member who both added theirs whether it's the same. Remove it any time
We don't sell your data or use it for advertising.
Who can see what
- Your profile is only visible to approved members you're matched with, and never to anyone who isn't signed in
- Chats are visible only to the two of you, plus a chaperone if you both invited one
- Video calls are only between the two of you. Chaperones and family never join them
- Your answer after a video call is never shown to the other person. If you say they didn't look like their photos, moderators can see that
- Family members only see what you allow
- Biodata links show only the sections you chose, and stop working when they expire or you turn them off
When moderators read messages
Moderators don't browse private chats. When you report someone from a chat, the moderator handling that report can read the recent messages in that chat to check what happened. Each time they do, it's logged.
How long we keep things
- Finished introductions stay readable to both people until one of you deletes your account
- When you delete your account, your profile, photo, biodata links and messages are deleted
- If someone reported you and the report is still open when you delete your account, we keep a copy of the reported chat and profile for the moderators until they decide, and delete it within 90 days of the decision
- We keep a minimal record of reports and moderation decisions for safety, and for banned accounts a one-way fingerprint of the email so it can't sign up again
- Exact retention periods will be confirmed with legal counsel before launch
Your rights
You can download, correct or delete your data from your settings at any time, and withdraw any family permission. You can also complain to your regulator, such as the Office of the Privacy Commissioner of Canada or the UK ICO.
Questions: hello@haanji.net