Privacy Policy

Data we collect

• Account: email address and, where used, a Google account identifier. For seekers, the city and country given before contacting a family.
• Profile: a first name or kunya, date of birth (only the age is shown), city, marital status, and any optional details you choose to add — for example religious orientation, nationality, languages, education and work, appearance (such as height, weight, build, complexion, eye and hair colour, and hijab), what you are looking for in a spouse, and photos. We keep photos only in blurred form.
• Verification: for guardians, identity / guardianship documents. These are stored privately and are never shown publicly.
• Contact numbers: a guardian's phone, a revert sister's private contact, and the WhatsApp number a seeker gives when requesting an introduction to a revert sister — used only as described below.
• Introductions: for revert sisters, the messages exchanged in a supervised conversation between the seeker, the sister and our team, and any photos the seeker chooses to share of himself there (up to three at a time). Unlike profile photos, these are not blurred; we remove the location and other details a camera stores in the file.
• Seeker declaration: before contacting a family, a seeker confirms a short declaration (for example that he keeps the daily prayers, and that no illness or substance use prevents marriage). We store that each statement was confirmed, and when.
• Payments: processed by Stripe. We store a record of the transaction, not your card details.
• Sign-up and activity: the IP address used to create your account and the approximate country it indicates; the campaign or referral tags of the link that brought you, if it had any (see “Your browser” below); when you were last active; and aggregate counts such as profile views and contact requests. To record that address, our sign-in forms ask a third-party service, ipify (api.ipify.org), for your browser's public IP address. When you request a sign-in code, we keep the requesting IP address for about an hour to prevent abuse.
• Reports: what you tell us when you report a profile or a member.
• Error reports: if a page fails to load or breaks in your browser, the site sends us a short technical report: what went wrong, which page it was (never the codes in sign-in or email links), your browser type and, if you are signed in, which account it was. We use it only to find and fix the problem. It goes to our hosting provider's server logs, which are deleted automatically after a set period, and nowhere else.
• Your browser: we use no third-party advertising cookies or trackers. If you arrive through a link with campaign or referral tags (such as utm_source or ref), we keep those tags in two first-party cookies for up to 30 days, or until you sign in, so that if you sign up we know which campaign or partner brought you. They are kept with your new account and seen by our team. A partner whose referral link you used sees only totals (how many people signed up through it and how many were verified), never names or other details. When you sign in, a sign-in token is kept in your browser's local storage, your public IP address is kept there for up to an hour while you sign in, and an unsaved profile draft may be kept on your device for up to seven days. We also count a few steps on the site, such as which page a visit starts on, which sign-up option is chosen and which search filters are used. These are kept only as daily totals, with no cookie, no account and no IP address, so they never point to you.

Who sees what

• Listed profiles are public: anyone can view them without an account. Photos are always shown blurred, and a surname, phone number, email or address is never shown.
• A guardian's phone number is shown only to a seeker who has paid to reach that family. The family sees the city and country the seeker gave, and the date he confirmed our pre-contact declaration.
• A revert sister's own number is never shown to seekers. Her introductions take place in a supervised conversation inside IslamicKnot that the seeker, the sister and our team can read, and contact details are filtered out of messages. A photo a seeker shares of himself there is seen by our team, and by the sister only once our team approves it. A seeker's WhatsApp number is seen only by our team.
• Our team sees account and profile data as needed to review profiles, supervise introductions, prevent abuse and help you.

How we use it

To run the service: to review and publish profiles, let seekers search them, let a seeker reach a family's guardian, supervise introductions for revert sisters, send the emails the service needs (such as sign-in codes and updates about your profile or introductions), prevent fraud and abuse, and understand in aggregate how the service is used. We also send optional emails, such as reminders and summaries about your own profile, alerts you set up, and occasional news such as new profiles joining; each one has a link to turn it off, and the email preferences page lets you choose them all. A few days after a seeker contacts a family, we ask both sides how it went: the answers help us keep families responsive and are never shown to the other side, and only once a family has enough of them may its profile say "usually replies within N days".

Legal basis

We process account and profile data to provide the service you signed up for (performance of our contract with you). We process sign-up IP addresses, sign-in code records, activity information and error reports for our legitimate interests in keeping the service safe and working and understanding how it is used, and the campaign or referral tags a sign-up arrived with for our legitimate interest in knowing which campaigns and partners bring members.

Some details are special-category data under UK and EU data-protection law — in particular religious orientation, details that can indicate ethnic origin (such as complexion or nationality), and the religious-practice and health statements in the seeker declaration. They are provided voluntarily, for one purpose: to publish a marriage profile, or to confirm a seeker's readiness before he contacts a family. Profile details beyond the basics (first name, date of birth, city and marital status) are optional, and you can change or remove them at any time, or delete the profile or your account. A guardian may list a woman only with her knowledge and consent (see our Terms); when he creates her profile he confirms this, and we keep that confirmation with its date.

Retention & deletion

You can delete your account at any time from your account or dashboard, and delete an individual profile from its page. Deleting removes your account and profiles from the site immediately and signs you out. We keep the underlying information so a deleted account can be restored if you change your mind; contact us and we will erase it permanently. We retain financial records (payments and credit history) where required for accounting and fraud prevention.

Your rights

Subject to applicable law you may access, correct, export, or erase your data, and object to or restrict certain processing. Contact us to exercise these rights. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Sharing

We do not sell your data. We share it only with service providers that make the platform work — hosting, payments (Stripe), file storage and delivery, email, sign-in with Google, an IP-address check on our sign-in forms (ipify) and, where enabled, an IP-location lookup — and where required by law. A referral partner sees only the totals for their own link, as described above.

Contact

Questions about this policy or your data? Email info@mingly.link.