Privacy policy.

• Account details — email address, and phone number if you verify by SMS. Used to sign you in, secure the account and send service messages.
• Profile content — nickname, age, approximate location, marital status, occupation, and the answers you choose to give (sect, personality, practice level and similar). Shown to potential matches within the rules of the product.
• Photos and intro video — the media you upload. Your intro video's audio is part of that media. Photos stay hidden from a match until the reveal rules are met.
• Verification media — a selfie and, where required, an ID check. Used only to confirm you are a real person. Never shown to matches.
• Approximate location — used to work out distance for discovery. We do not store or display your precise coordinates, and we never show your location to another member.
• Messages and activity — your conversations, matches, skips, reports and timers. Needed to run the 3-day rule, safety checks and support.
• Purchases — what you bought and when, so entitlements unlock. Card details are handled by the payment provider and never reach us.
• Device and diagnostic data — a push notification token if you opt in, plus basic crash and error logs so we can fix faults.

We do not track you across other apps or websites, and we run no advertising trackers.

If you turn on contact blocking, your device converts each phone number into an irreversible SHA-256 hash and only those hashes are sent. We cannot read the numbers, names or anything else in your address book, and the hashes are used for one purpose: hiding your profile from people you already know. Turning the feature off deletes them.

To keep the space safe, uploaded photos and intro videos are checked automatically before they become visible, and messages are screened for abuse and for attempts to move off-platform. This uses an automated service (Google Gemini) as a processor on our behalf; the content is not used to train anyone's models. Flagged items may be reviewed by our moderation team, and a Wali can read the conversations they are linked to.

We never sell your data. We use a small number of processors to run the service:

• Supabase — database, authentication and file storage.
• Cloudflare — hosting, media delivery and object storage.
• Apple and Google — app distribution, in-app purchases and push delivery.
• RevenueCat — purchase and entitlement records.
• Stripe — payments made on the website.
• Resend and Twilio — email and SMS you have asked for.
• Google Gemini — automated safety checks described above.

We also disclose data where the law requires it, or where it is necessary to protect someone's safety.

• Profile, photos and messages — while your account is open.
• Verification selfie and ID checks — deleted once verification is decided, and no later than 12 months.
• Contact hashes — until you switch contact blocking off.
• Deleted accounts — removed immediately, with backups rolling off within 30 days.
• Reports, bans and payment records — kept as long as needed for safety and legal or tax obligations.

You can access, correct, export or delete your data, object to processing, and withdraw consent for optional features such as location, contacts or notifications at any time in the app.

Export: Profile → Danger zone → "Export my data" downloads everything we hold in one file.

Delete: Profile → Danger zone → "Delete my account" removes your account permanently — see the account deletion instructions. You can also email support@keepithalal.com.

If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office.

Data is encrypted in transit and at rest, verification media is access-controlled, and screenshots are blocked or watermarked inside the app. No system is perfect, so please report anything that looks wrong to support@keepithalal.com.

We will update this page when the product changes and move the date at the top. For privacy or data requests: support@keepithalal.com. For billing: billing@keepithalal.com.