Draft structure — this document is NOT final and Sakinah is NOT accepting real users until counsel signs off (build spec §9).
Your account email, profile information you provide (name, date of birth, gender, location, bio, prompts, tags, family/wali details you choose to list), photos you upload, your stated match preferences, swipes, matches, and messages.
Biometric data and identity documents. Verification runs entirely on Persona's systems; Sakinah stores a pass/fail flag and an inquiry reference, nothing more. We also never sell personal data.
Photos are stored in a private bucket. Browsing members are served an irreversibly blurred derivative; the original is released only to your mutual matches, to you, and to Sakinah's reviewers during profile approval.
Messages are scanned automatically for the four safety categories disclosed in the Terms. Flagged messages are reviewed by a human. You consent to this at signup; it cannot be opted out of while using the service.
[ POLICY — founder + legal must confirm before launch ]
Retention window for flagged logs: 30 days, then purged — to be confirmed with counsel before launch.
Supabase (database, authentication, storage), Vercel (hosting), Persona (identity verification), Anthropic (automated message-safety classification). Each receives only what its function requires.
Contact support to delete your account; deletion is completed within 30 days.
[ POLICY — founder + legal must confirm before launch ]
Data-retention schedule after deletion, state-specific privacy rights (CCPA/CPRA, Quebec Law 25, PIPEDA), and the designated privacy contact are unwritten and require counsel.