Privacy Policy

1. What we collect, and why

• Account: your email address — to sign you in (one-time codes) and send essential service messages. No passwords are stored.
• Profile:display name, date of birth, gender, the gender you seek, and city. If you are open to mut'ah: optionally a term expectation, a mahr expectation, a one-line “interesting thing”, and answers to prompts from our fixed list. If you are open to nikah: optionally your first name, marital chapter (first marriage / marrying again / currently married), children, education level, occupation, marja, an intent timeline, a one-line introduction, prompt answers, up to three questions you author for people who approach you, and four short “kept for later” passages (family, children, livelihood, deen) shown to a match only when you choose to open them. One face photo is required — it is what the face check below compares you against, and joining cannot be finished without it; any photos beyond that one are up to you. All of this exists to show your card to other signed-in members whose openness matches yours. Your date of birth is used to verify you are 18+ and to display your age; the date itself is never shown to anyone.
• Face check (required to join): a short camera check in which we ask you to smile and turn your head. While it runs, still frames are sent to our server to read the position of your face and compare it with your face photo. The frames are not saved. What is saved is a set of numbers derived from your face — a measurement, not a picture, which cannot be turned back into one. It has one purpose: to keep one person to one account, and to stop someone removed for harming a member from quietly returning. It is never shown to anyone, including our moderators, and it never leaves our own database. The readings from the check itself — the angle of your head, and when each movement happened — are deleted after a day.
• Location (mut'ah space only): when you confirm which city you are in, the app asks your device for your precise location. Those coordinates are used on our server only to work out the nearest city we cover, and are then discarded. We store the city name and the time — never the coordinates, and never a history of where you have been. Nothing anywhere else in the app asks for your location.
• Activity: interests you express, matches, messages you send, and any blocks or reports you file — to run the introduction, chat, and safety features.
• Technical: standard server logs (IP address, approximate region, device/browser type) — for security, abuse prevention, and the regional restrictions we are required to apply.

No contacts upload, no advertising identifiers, and no tracking of any kind.

2. Consent

We process your data on the basis of the consent you give at sign-up, where the notice is itemized in plain language. You can withdraw consent at any time by deleting your account (below). We do not use your data for advertising, we do not sell it, and we do not share it with anyone except the service providers below.

3. Who sees what

• Logged-out visitors: nothing. Profiles are never public.
• Other members: only members whose stated preferences are mutually compatible with yours can see your card (age, city, and the optional fields you filled — never your display name; your first name, if you give one, travels only with an interest you send and to your matches). Your photo stays hidden until you and a match both choose to exchange; no one else ever sees it.
• Moderators: if a member reports you or you report a member, moderators see the report and the conversation it concerns, so that it can be judged fairly and appealed. They never see the measurement of your face, and they never see photos you have not chosen to show.

4. Service providers

Your data is stored and processed by infrastructure providers acting on our instructions: Supabase (database and authentication; primary storage in Mumbai, India), Vercel (application hosting and delivery), and Resend (delivery of sign-in and service emails). Each processes only what its function requires.

5. Retention and deletion

We keep your data while your account exists. Deleting your account removes you immediately — your card, your photos, your interests and your matches are gone, and nobody can find you here again.

Today, deleting your account takes the conversation with it — what you sent and what you received both go, on both sides. Someone you were writing to will open the thread and find it empty. We do not think that is right, because it also means anything hurtful said to you disappears before you can show it to anyone. We are changing it so that what a person wrote to you stays yours. Until that is built, this page describes what the app actually does.

For 30 days after you leave we keep the measurement of your face, so that a complaint made about you after you have gone can still be looked at, and so that someone removed for harming a member cannot quietly come back. It is not compared against anyone while it waits, which is why leaving never stops you rejoining. After 30 days it is deleted automatically.

If your account was removed by moderation, that measurement is kept for as long as the removal stands. It is the one part of a removal that deleting your account does not undo.

A report, and the conversation attached to it, is kept while the matter is open so that it can be judged and so that you can appeal. Residual copies in security backups expire on the backup cycle.

6. Your rights

Under the DPDP Act you may access a summary of your data, correct it (most fields are directly editable in your profile), erase it (account deletion), and withdraw consent. For anything not available in-app, contact us and we will respond within the statutory timelines. You may also nominate a person to exercise these rights on your behalf, and you have the right to complain to the Data Protection Board of India.

7. Security

All traffic is encrypted (HTTPS is mandatory on this domain). Access rules are enforced in the database itself — each member can only reach their own data and what other members have consented to show them. Photos live in private storage reachable only through short-lived authorized links. Sign-in uses one-time email codes, so there is no password to leak.

8. Age

Meesaq is for adults only. We do not knowingly process data of anyone under 18, and the age gate is enforced at the database level. If you believe a minor has created an account, report it via the grievance contact and it will be removed.

9. Contact and changes

Privacy questions and requests: grievance@meesaq.app. Material changes to this policy will be announced in the app before they take effect.