QALBI — PRIVACY POLICY

Last Updated: [DATE OF INTERNATIONAL RELAUNCH — fill in when you publish this version]

This Privacy Policy explains how Qalbi ("Qalbi," "we," "us") collects, uses, stores, and protects personal information when you use our website and services at qalbi.online.

By using Qalbi, you acknowledge that you have read this Privacy Policy. Where required by applicable law, we will request your explicit consent before processing certain categories of information, as described below.

1. Who We Are

Qalbi is an online Muslim matrimonial and matchmaking platform.

  • Data controller: Qalbi
  • Contact email: info@qalbi.online
  • Website: www.qalbi.online
  • Business/Legal Name: [LEGAL BUSINESS NAME — fill in once registered]
  • Business Address: [LEGAL ADDRESS — fill in once registered]

2. Information We Collect

2.1 Account Information

When you register, we collect: first name, last name, email address, and password. Your password is never stored or seen by Qalbi directly — it is handled entirely by our authentication provider, Supabase, which stores it in encrypted/hashed form.

2.2 Profile Information

To use the matchmaking features, you provide a substantial profile, including: gender, birth date, nationality, citizenship, current country and city, height, weight, marital status, number of children, education level, occupation, madhab (school of Islamic jurisprudence), prayer frequency, Quran reading habits, hijab/beard status, smoking habits, willingness to relocate, passport availability, what you are looking for in a partner, polygamy preference, wali (guardian) involvement, preferred communication language, additional languages spoken, an "about me" free-text description, and your partner preferences (gender, age range, country, marital status, languages). You may also upload up to 6 photographs.

2.3 Special Category (Sensitive) Data — Explicit Consent

Some of the information above is considered a special or sensitive category of personal data under data protection law, including data revealing your religious beliefs and practices (madhab, prayer frequency, Quran reading, hijab/beard, wali involvement, polygamy preference) and health-adjacent data (height, weight, smoking status).

We only collect this information because it is essential to how Qalbi's matchmaking service works, and we ask for your explicit consent to process it during profile creation. You may decline to provide optional fields, though this may limit your ability to use certain matching features or reduce your profile's completeness.

2.4 Messages and Communication

When you message other members, your message content is stored as plain text in our database. Messages are retained indefinitely; there is currently no feature allowing you or Qalbi to delete a message once sent. Only the participants in an accepted, non-blocked match can access a conversation. If you have not completed payment, message content may be hidden from you until payment is completed, though the underlying record still exists.

2.5 Video/Voice Calls

If you use Qalbi's video calling feature, calls are conducted through Jitsi Meet, a third-party service operated by 8x8 on its free public server (meet.jit.si). We do not record calls, and we do not store any log of who called whom or when. When you start a call, a non-reversible hashed room identifier and your display name are sent to Jitsi, along with the media, IP address, and browser data inherent to any video-calling connection.

2.6 Payment Information

Payment is made by manual bank transfer to Qalbi's bank account. Qalbi does not use an online payment processor and does not collect or store your card details. To verify your payment, we ask you to email us a copy of your payment receipt or confirmation. This may include information such as your name as shown on the transfer, bank details, the amount, and the date. We use it only to match and verify your payment, and we keep payment proof emails and our payment verification records for as long as needed for accounting, dispute resolution, and legal obligations. In your account record, we store whether your account is currently marked "paid" or "unpaid," and the date your current membership period ends.

Membership is paid monthly and is not automatically charged. We may send you a reminder email before your membership period ends. If you do not renew, your access to paid membership features ends until you make a new payment.

2.7 Automatically Collected / Technical Information

We use limited cookies and browser storage, all for functional purposes:

  • An authentication session token, so you stay logged in.
  • Your language preference (English, Turkish, Indonesian, Arabic, French, or German).
  • A temporary draft of your profile wizard answers, saved in your browser only until you finish the wizard, so you don't lose progress. This draft may include the sensitive profile data described in Section 2.3 while it sits in your browser.
  • Short-lived technical flags (rate-limit timers for email resend/password reset; a one-time "session expired" indicator).
  • A UI preference cookie for sidebar display state.

We do not use Google Analytics, Meta Pixel, or any other analytics, advertising, or tracking tool. We do not use CAPTCHA.

Loading fonts from Google Fonts causes your device's IP address and browser information to be sent to Google as an inherent part of loading the page, independent of any tracking by us.

3. How We Use Your Information

We use your information to:

  • Create and operate your account and profile.
  • Allow other members to discover and match with you, subject to the visibility and completion rules described in Section 6.
  • Enable messaging and video calls between matched members.
  • Verify your email address and secure your account.
  • Verify your membership payments and send renewal reminders.
  • Communicate with you about your account, verification, or support requests.
  • Maintain the security and integrity of the platform (e.g., detecting fraud, abuse, or policy violations), including processing reports submitted about other members and enforcing blocks between members.

We do not sell your personal information, and we do not use it for advertising or share it with data brokers.

3.1 Blocking and Reporting

You can block another member at any time from their profile or a conversation. Blocking removes visibility and messaging access between you and that member, in both directions. You can view and manage your blocked members list, and unblock someone, from your account settings.

You can also report another member if you believe they have violated our Terms of Service. When you submit a report, we store the reason, any description you provide, and which member you reported, so that we can review it. Reports are reviewed by Qalbi; we do not share the identity of who submitted a report with the reported member.

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis, we rely on:

  • Your consent — particularly for special category data described in Section 2.3, and for optional profile fields.
  • Performance of a contract — processing necessary to provide the matchmaking service you sign up for.
  • Legitimate interests — for security, fraud prevention, and service operation, balanced against your rights.

You may withdraw consent at any time by contacting us, though this may affect your ability to use certain features.

5. Third Parties We Share Data With

We use the following service providers ("processors") to operate Qalbi. Each only receives the data necessary for its function:

  • Supabase (database, authentication, file storage, real-time features) — All account, profile, photo, message, match, and notification data
  • Supabase's default email sender — Your email address, for verification, password-reset, and membership renewal reminder emails
  • Jitsi / 8x8 (meet.jit.si) — A hashed room identifier, your display name, and live audio/video/IP data during a call
  • Google Fonts — Your IP address and browser data, as an inherent part of font delivery
  • Lovable (hosting/CDN, qalbi.online) — Standard web request data; in preview/testing environments, technical error reports may also be sent

We do not currently use any analytics vendor, advertising network, SMS provider, or online payment processor.

International transfers: Qalbi serves members across multiple countries, and your data may be processed in a country other than the one you are in, including by the processors listed above. [The specific hosting region for our database has not yet been confirmed and will be added here once verified.] We do not currently direct our services specifically to residents of the European Union or other jurisdictions with heightened data protection requirements, and this Privacy Policy should be read with that scope in mind.

6. Profile Visibility

Your profile is only visible to other members once it is at least 60% complete. Certain fields (such as your exact last name and birth date) are masked in the version of your profile shown to other members, even after you're visible. You can review and adjust what's shared as part of your profile settings.

7. Data Retention

We retain account, profile, photo, message, and match data for as long as your account is active. You may delete your account at any time using the self-service option described in Section 9, which anonymizes your profile and permanently removes your photos.

We do not currently have an automated process to delete data after a period of inactivity for accounts that are not actively deleted by the member. Message content is not deleted individually — you cannot delete a single message once sent — but it becomes anonymized (no longer tied to your name) if you delete your account, as described in Section 9.

8. Data Security

We take the following measures to protect your information:

  • Row-level security rules on our database, so users can generally only access their own data or data they're specifically permitted to see (e.g., an accepted match's messages).
  • Your photos are stored in a private storage bucket and served only through short-lived, expiring links — not public URLs.
  • All data in transit is encrypted (TLS); data at rest is encrypted using our infrastructure provider's standard disk encryption.
  • Note: messages are not end-to-end encrypted. This means that, in principle, Qalbi's operators have the technical ability to access message content stored in our database, although no manual review or moderation of message content currently takes place.
  • Blocking between members is enforced at the database level, not just in the interface.
  • We do not currently offer multi-factor authentication (MFA) or CAPTCHA-based bot protection. Rate-limiting on sensitive actions (like password reset) is currently basic.

No system can guarantee perfect security, and we cannot guarantee that unauthorized access, loss, or misuse of information will never occur.

9. Your Rights

Depending on your location, you may have rights including the right to access, correct, or request deletion of your personal information, and to withdraw consent to processing.

You can delete your account directly from your account settings using the "Delete My Account" option. Doing so will permanently remove your photos from our storage, anonymize your profile (your name and identifying information will be replaced with a generic placeholder, and other profile fields cleared), and prevent you from logging back in with that account. Message history is preserved for the other participant's conversation integrity, but will show as coming from an anonymized "Deleted User" rather than your name. We do not yet offer a self-service data export tool. To request a copy of your data, correct information, or exercise any other right not covered by the self-service deletion option above, please contact us at info@qalbi.online, and we will handle your request manually.

10. Age Requirement

Qalbi is intended only for individuals aged 18 and older. Our systems enforce this at the database level based on the birth date you provide. We do not knowingly collect information from anyone under 18.

11. Children's Privacy

Qalbi is not directed at children, and we do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have done so, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and, where required by law, provide additional notice.

13. Governing Law

[TO BE COMPLETED AFTER LEGAL STRUCTURE IS CONFIRMED — this requires input from a lawyer familiar with the country you register your business in. Since Qalbi now serves members across multiple countries, this section is especially important to get right, and should be confirmed with a lawyer before this version goes live. This should generally match whatever you decide for your Terms of Service. Do not leave this blank when you publish.]

14. Contact Us

If you have questions about this Privacy Policy, or wish to exercise any of your data rights, please contact us at:

  • Email: info@qalbi.online
  • Website: www.qalbi.online

© 2026 Qalbi. All rights reserved.