Privacy Policy

“Sakinah,” “we,” “us,” or “our” refers to Sakinah, an application and website operated from Canada and accessible at https://sakinah.ca (the “Site”) and via mobile applications for iOS and Android (the “App,” and together the “Service”).

You can reach us anytime at privacy@sakinah.ca.

• We collect the information you give us (account, profile, photos, messages) and basic technical info needed to run the Service.
• We use it to match you with potential spouses, keep the Service safe, and reply to your messages, nothing else.
• We do not sell your information. We do not run advertising inside the App.
• You can ask us to export or delete your information at any time.
• Sakinah is intended for adults seeking marriage. The Service is not for anyone under 18.

Information you give us

• Account, email address, password (stored hashed), and authentication tokens.
• Profile, name, date of birth, gender, city, ethnicity, languages, level of practice, education, occupation, family situation, what you are looking for, and similar marriage-relevant information you choose to share.
• Photos, up to two profile photos you upload, one of them required, which are never shown in the feed. Another member sees them only as a first glance you have both agreed to: ten seconds at a time, no more than three times in a match. Every one of those views is written to a log, and you are notified each time your photo is opened. A reviewer on our team also sees them once, when your profile is approved.
• Identity document, the ID you submit so we can confirm you are a real adult before your profile goes live.
• Wali information, your wali’s name, phone, or email, if you choose to invite them.
• Messages, the content of messages you send inside the Service.
• Support correspondence, anything you send to privacy@sakinah.ca.

Information collected automatically

• Server logs, our hosting and backend providers record standard request data when your device talks to them: IP address, the page or endpoint requested, and a timestamp. That is how any web server works, and it is what we use to investigate outages and abuse.

That is the complete list. There is nothing else running in the background.

Information we do not collect

• The App contains no analytics SDK. We do not record in-app events, funnels, screen views, or session recordings.
• The App contains no crash-reporting SDK.
• The App contains no advertising SDK and no third-party trackers.
• We do not collect location of any kind. Not GPS, not Wi-Fi, and not an approximate location inferred from your IP address. The city on your profile is a field you type in yourself.
• We do not collect device identifiers, such as advertising IDs, IDFA, or IDFV.
• We do not collect contacts from your phone’s address book.
• We do not sell, rent, or trade your personal information.

This website sets no cookies and runs no trackers. There is no analytics script, no advertising pixel, and no consent banner, because there is nothing to consent to.

The App carries no analytics, crash-reporting, or advertising SDK, as described above.

The one thing that is recorded is ordinary server logging: Vercel, which hosts this website, keeps standard request logs containing your IP address, the path you requested, and a timestamp.

We use your information only to:

• Operate the Service, create your account, show you matches, deliver your messages, and let your wali participate when you invite them.
• Match you with potential spouses based on compatibility, preferences, and stage of life.
• Protect the Service, detect and prevent fraud, abuse, fake accounts, harassment, and content that violates our Community Guidelines.
• Reply to your support messages and notify you of important changes to the Service.
• Comply with our legal obligations, for example, retaining limited records if required by law.

Lawful bases (GDPR/UK-GDPR users). We process your information on the basis of: (a) performance of our contract with you, (b) your consent (for sensitive profile information you choose to share), (c) our legitimate interests in keeping the Service safe, and (d) compliance with law.

We share the minimum information needed to operate the Service. Some of it is seen by our own review team, the rest by a small set of vetted providers acting on our instructions under written agreements:

• Our review team, before a profile becomes visible to anyone, a member of our team reviews it together with the photo and the identity document. That reviewer is always the same gender as the member, sisters are reviewed by sisters and brothers by brothers, and this is enforced in our database rather than left to policy. Reviewers do not read private messages between members. Every view of a photo or an identity document, and every decision, is written to an audit log naming the reviewer.
• Supabase, our database, authentication, and file storage provider. Stores your account, profile, conversations, and photos.
• Vercel, hosts this website (sakinah.ca). Receives standard request logs (IP, page, time) when you visit.
• Apple and Google, distribute the App. If you have turned on their own diagnostics sharing at the operating system level, they may receive crash data from your device under their own privacy policies. We do not receive it, and we ship no crash-reporting SDK of our own.
• Email delivery, transactional email providers used to send password resets and account-related emails.
• Other users, when you match with another user, they see the profile information you have chosen to share, a first glance at your photo when you have both agreed to it (ten seconds at a time, up to three times in that match, every view logged and notified to you), and any messages you exchange. Your wali, if invited, sees the introductions and conversations you ask them to join.
• Authorities, if compelled by valid legal process (court order, subpoena) or where strictly necessary to prevent serious harm.

We never sell your personal information. We never share your information for third-party advertising or profiling.

Sakinah has one datastore. Your account, profile, photos, identity documents, and messages are held in Supabase, hosted on AWS in us-east-2 (Ohio, United States). That is the only place your Sakinah data is stored.

This website is served by Vercel's edge network, which keeps standard request logs (see section 4). Transactional email passes through our email provider on its way to your inbox.

If you are outside the United States, using Sakinah means your information is stored in the United States. Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses.

• Your account and profile are kept while your account is active.
• When you delete your account, we delete your profile, photos, and messages within 30 days, except where we are legally required to retain limited records (e.g., to handle abuse reports or comply with financial/tax law).
• Backups are rotated and overwritten on a rolling 30-day basis.
• Server logs are retained by our hosting providers under their standard log retention.

You can, at any time:

• Access a copy of the personal information we hold about you.
• Correct information that is wrong or incomplete.
• Delete your account and your information (subject to limited legal retention). You can do this yourself, immediately, from inside the App: how to delete your account.
• Object to or restrict certain uses of your information, and withdraw your consent at any time.
• Export your information in a structured, machine-readable format.
• Lodge a complaint with your local data protection authority, for users in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca).

To exercise any of these rights, email privacy@sakinah.ca from the email address on your account. We respond within 30 days.

California (CCPA/CPRA). California residents have the right to know what personal information we collect, the right to delete it, the right to correct it, the right to opt out of any sale or sharing of personal information (we do not sell or share), and the right not to be discriminated against for exercising these rights.

We take reasonable administrative, technical, and physical measures to protect your information, including encryption in transit (TLS), encryption at rest for backups, hashed passwords, and access controls that limit who on our team can see your data. No system is perfectly secure; if we ever experience a breach affecting your information, we will notify you and the relevant authorities as required by law.

Sakinah is intended for adults seeking marriage and is not for anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it.

We may send you transactional emails (account verification, password resets, security notifications, and important changes to the Service) and in-app notifications about new matches and messages. You can manage push notifications in your device settings, and unsubscribe from non-essential emails using the link in those emails.

If we make material changes to this policy, we will notify you by email or in-app notice at least 14 days before the changes take effect, and will update the “Last updated” date above. Continued use of the Service after changes take effect means you accept the updated policy.

Questions, requests, or concerns? Email us at privacy@sakinah.ca. We read every message, in shā Allāh.

Sakinah Technologies Inc.
3135 Argentia Road, Unit 2
Mississauga, ON L5N 8E1
Canada