Privacy policy

What we collect

Only what the platform needs to work. There is no hidden collection and no advertising trackers.

• Account: your email address and a hashed password, handled by our authentication provider. We never see your password.
• Profile: your name, gender, date of birth, phone number, city and country, bio, education, occupation, height, marital status, how you practice, whether you have or want children, languages, interests, and what you are looking for.
• Photos: the images you upload, stored privately.
• Verification: a photo of your passport or both sides of your ID card, a selfie, a short video, the expiry date of the document, and the date you agreed to be verified.
• Contact accounts: the WhatsApp number and Telegram or Instagram usernames you choose to add for Connections. These are encrypted when stored.
• Activity: who you liked or passed, your matches, connection requests and connections, profiles you visited, blocks and reports you make (with a screenshot if you attach one), what you post in Thoughts, and when you were last active.
• Device: a notification token so we can send you notifications, and the language your notifications should be in.
• Payments: the amount, the method you state, and the transaction reference you enter. We never receive or store card numbers.
• Guardian: your wali's name and contact, if you choose to add them.

Checks on what you upload

• When you upload a verification file or a photo, our server measures the file itself — its type, size, sharpness, brightness and glare — and whether the same picture has already been used on your account. A file that nobody could read is turned away automatically, with the reason. Nothing else is decided automatically: every verification and every photo is approved by a person.
• For a passport, the app reads the machine-readable code at the bottom of the page on your phone, to catch mistakes before you send it. From it we keep only your name as printed, the expiry date, and whether its check digits agree. The document number and date of birth in that code are not stored.
• For a selfie, the app checks on your phone that there is one face with open eyes. We keep only those results, not any measurement of your face.

Who can see what

• Other verified members see your name, your age (never your date of birth), your city and country, your bio and profile details, and your approved photos — and only once you are verified and active. The database refuses to give another member anything else.
• Other members never see your email, phone number, guardian's details, documents, or who you passed on.
• Your WhatsApp number or Telegram / Instagram username is shown to one person only: a match you have both agreed to connect with, on the platform you both chose.
• Moderators can see profiles, photos, verification documents and reports, in order to review them. Every decision is written to an audit log with the moderator's identity.
• Calaf Doon does not host private messages or calls. Conversations you have on WhatsApp, Telegram or Instagram are governed by those services, not by us.

Where you are

The app never asks for your location. Your city and country are what you typed. The City map shows the centre of each city and how many members are there; it never shows where any person is.

Services we use

• Supabase hosts our database, sign-in and file storage.
• Google Firebase delivers push notifications, and Firebase Crashlytics tells us when the app crashes: the error, the app version, and the phone model and Android version. No name, email or profile detail is attached to a crash report.
• Google Play services provides the on-device text and face reading used during verification. The reading happens on your phone.
• Map tiles on the City map are loaded from OpenStreetMap, which sees the request but not who you are.
• Vercel hosts this website.

How your data is protected

• Every table has row level security, so access is enforced by the database itself rather than only by application code.
• Photos and verification documents live in private storage and are served through short-lived signed links.
• Contact accounts for Connections are encrypted, and only ever decrypted for the one match who was allowed to see them.
• Privileged actions are restricted by role, and the restriction is enforced in the database.

What we do not do

• We do not sell your data, and we do not share it with advertisers or data brokers.
• We do not show adverts inside the platform.
• We do not track your location.
• We do not send marketing email you did not ask for.

How long we keep it

Your profile, photos and activity are kept while your account exists. Verification documents are kept while your verification is valid, so that a decision can be reviewed if it is challenged. Moderation records are kept after an account is removed.

Deleting your account

You can delete your account yourself, from Profile → Delete my account. It happens immediately and removes your profile, photos, verification documents, likes, matches, connections, contact accounts and posts, and the files you uploaded. We keep a record that an account was deleted and when, with no personal details in it.

Your choices

• You can edit or clear most of your profile at any time.
• You can delete your photos yourself. Deleting a photo removes the file, not only the reference to it.
• You can switch off or remove any contact account you added.
• You can block any member, which hides you from each other and closes any connection.
• You can turn each kind of notification off in Settings.

Cookies

This website sets a session cookie so you stay signed in, and stores your light or dark theme choice in your browser. There are no advertising or analytics cookies.

Children

Calaf Doon is for adults. You must be at least 18 to create a profile.

Changes and contact

If this policy changes in a way that affects you, we will say so rather than quietly editing the page. Questions about your data go to the support address on our contact page.