Privacy Policy — Munasib

Munasib ("we", "us") operates the Munasib mobile application (the "App"), available at munasib.org. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

1.1 Account information

Email address, used to sign in (directly, or via Google Sign-In).
Your name, gender, date of birth, city, and country.

1.2 Profile information

Marital status, children, education, profession, and employment status.
Religious practice details you choose to share (sect, prayer practice, hijab).
Lifestyle details (smoking, diet, interests, weekend style, social energy).
Family background (family type, number of siblings).
A free-text bio and your answer to "what marriage success means to you."
The values you say matter most to you in a spouse.
Partner preferences you set (age range, cities, marital status accepted, relocation).

1.3 Photos

Photos you upload, including which ones are public, blurred, or visible only on request. Photos are reviewed before or after publishing to keep the platform safe. Before a photo is uploaded, the App checks on your phone that it shows exactly one face, since profile photos are what selfie verification compares against.

1.4 Selfie verification (optional)

If you choose to verify your profile, the App uses your phone's front camera to take a few quick photos, one right after the other, once you've followed on-screen prompts such as turning your head, smiling, or blinking. That liveness check runs entirely on your phone — no video or audio is recorded or uploaded, and the camera is not used at any other time.

Those photos are uploaded to our servers, where open-source models running on our own infrastructure check that most of them are a live photo of one real face (not a photo of a printed picture or a screen) and compare them with your profile photos. Nothing is sent to any outside face-recognition service.

To make that comparison, we create a face template — a list of 128 numbers that describes a face and from which the photo itself cannot be recreated — for each of your profile photos, when you upload it, and, if your photos verify you, one combined template built from that attempt's photos. Face templates are biometric data. We keep them, stored separately and readable only by our verification service (not by moderators, other members, or anyone else), for two purposes only: checking your selfie against your photos, and checking that photos you add later still show the same person. If your photos change in a way that means they may no longer show the verified person, the Selfie verified badge is removed until you verify again. Templates are deleted when the photo is deleted, and all of them are deleted with the rest of your data when your account is deleted. By starting selfie verification or uploading a profile photo, you agree to this processing; selfie verification itself is optional.

We keep only the photos from the attempt that verifies you. They are kept as the original record of who verified the profile, so that if a verification is later questioned — for example, a report that a profile is using someone else's photos — our moderation team can check it. If a check doesn't verify you, those photos are deleted as soon as the check finishes — including when the match looks right but isn't confident enough for us to trust automatically (see below). For every attempt, verified or not, we keep a short text record (the time, the outcome such as "didn't match", and a similarity score, but no images). We use it to limit how many checks can be made per day, and to decide when the manual review below becomes available.

Manual review becomes available either after four unsuccessful automatic checks, or immediately if one attempt was a close enough match that we'd rather have a person confirm it than approve it automatically. Either way, you can send up to three photos for a member of our moderation team to compare with your profile photos. If the moderator approves them, they are kept as your verification record in the same way. If not, they are deleted, and only the decision (and any reason given to you) is kept.

The kept verification images are visible only to our moderation team. They are never shown to other members, never shared with third parties, and never used for any purpose other than verifying your profile and investigating verification-related reports. They are permanently deleted with the rest of your data when your account is deleted (see Data Retention).

1.5 Activity and communications

Interests you send or receive, and the resulting matches.
Messages you exchange with a match. Messages are automatically screened for contact information (phone numbers, social handles, etc.) before delivery, to keep you safe until you choose to share it yourself.
Reports you file against another user, and reports filed against you.
Accounts you block.
Which profiles you open, so the people you look at can see that you viewed them in their "Who viewed you" list. A guardian looking at a profile on someone's behalf is not recorded.
Profiles you save for later. This list is private to you.
Your notification choices: which kinds of notification you want, and your quiet hours with your phone's time-zone offset, so we can respect them.

1.6 Guardian / family involvement

If you choose to add a guardian (for example a parent or wali), that person can see the interests you receive and share their view with you, so you can decide together. They cannot accept or decline for you, and they cannot read your chats. You can remove a guardian at any time. A guardian can also create a guardian-only account, which has no profile and is not visible to other members.

1.7 Device and technical information

A push-notification token tied to your device and platform (Android/iOS), so we can deliver notifications about interests, messages, and matches.

1.8 Subscription and payment information

If you subscribe to Munasib Premium, your purchase is processed entirely by Google Play Billing or Apple's App Store — we never see or store your card number. We receive and store only your subscription status, tier, and expiry date, so the app knows what to unlock.

2. How We Use Your Information

To create and operate your account and profile.
To show your profile to compatible members and show you theirs, based on your filters and preferences.
To operate safety features: contact-info screening, blocking, reporting, photo moderation, and optional selfie verification (the "Selfie verified" badge).
To send you notifications about interests, messages, and matches.
To enforce daily limits designed to keep the platform serious-intent rather than a swiping app (these limits do not apply to women).
To provide Premium features to subscribers and verify purchases with Google/Apple.
To respond to support requests and investigate reports of abuse.

3. Who Sees Your Information

Other members: your public profile card, and — if a photo's visibility allows it — your photos, are visible to opposite-gender members who match your filters. Your contact details (email, phone) are never shown to other members.
Your guardian, if you've added one, sees only what you've given them permission to see.
Our moderation team can review reported content, photos pending moderation, reports, photos you send for a manual verification review, and the images that verified your profile, to keep the platform safe.
Service providers: we use Google Firebase (authentication, database, file storage, push notifications, and serverless functions) to run the App, and Google Play Billing / Apple's App Store to process Premium subscriptions. We do not sell your data, and we do not use third-party advertising or analytics SDKs.
Legal requirements: we may disclose information if required by law, or to protect the safety of our users.

4. Data Retention

We keep your account and profile information for as long as your account is active. When you request deletion, your account is deactivated immediately and your data is permanently deleted 30 days later — see Account Deletion for how that works and what you can still do during those 30 days. This includes the images that verified your profile and all face templates, which are kept only for as long as your account exists.

Two things are kept after that: reports filed against your account, so someone can't erase a trust-and-safety record by deleting their account, and any Premium purchase/subscription records, which we're required to keep for accounting purposes. Messages you've sent are kept on the other person's side of the conversation too — that's true of any chat, not specific to deletion.

5. Your Rights

You can edit most of your profile information directly in the App at any time.
You can request a copy of your data, or ask us to correct it, by contacting us at privacy@munasib.org.
You can request deletion of your account and associated data — see our Account Deletion page for how.

6. Children's Privacy

Munasib is a matrimonial app intended for adults seeking marriage and is not directed at anyone under 18. We do not knowingly collect information from anyone under 18.

7. Security

We use industry-standard safeguards (including Google Firebase's security infrastructure and Firestore security rules) to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and for material changes we'll take reasonable steps to notify you in the App.

9. Contact Us

Questions about this policy or your data? Contact us at privacy@munasib.org. Munasib does not currently operate from a registered business address — email is the fastest way to reach us.

This Privacy Policy is governed by the laws of Pakistan.