Marriage is private, and your privacy is a trust. This policy explains what we collect in the Mithaq app and on zawajmithaq.com, why, who we share it with, how long we keep it, and your rights.
In short
- No ads, no selling of data, and no analytics or tracking tools in the app.
- You choose to share your religious information, and it is used only to show your profile and suggest matches.
- We do not access your location; we use the country and city you type yourself.
- Our servers are in Germany (EU), and all connections to them are encrypted.
- You can ask us to delete your account at any time — see account deletion.
Who we are
The controller of your data is Mithaq (ميثاق) (“Mithaq”, “we”), owner of the “Mithaq - Muslim Marriage” app on Google Play (package com.mithaq.mithaq_app); the developer is shown on Google Play as Alaa Albayed. For any privacy question: alaa.albayed2016@gmail.com.
Data we collect
Sign-in account (Google)
When you sign in with Google we receive your stable Google account ID, your email address and your name. We never receive your password or access the rest of your Google account.
Registration
Gender, date of birth (to confirm you are 18 or older and to show your age), the country and city you type, and the display name you choose.
Profile
- Faith and practice: sect, Muslim since birth or revert, level of practice, prayer, mosque attendance, Quran reading, hijab and niqab (women), beard (men), halal food.
- Marriage and family: marital status, children and how many, wish for children, view on polygamy, marriage timeline, willingness to relocate, family values, and who created the profile.
- Basics: height, body type, ethnicity, nationality, languages, education, occupation, employment, smoking.
- Your own text: profile heading, “About me” and “The partner I am looking for”. Our team reviews these before others can see them, and phone numbers, email addresses and links are not allowed.
Sensitive data
Religious beliefs and practice, and ethnic origin, are special categories of data under many laws. We process them only because you choose to provide them, with your explicit consent, and for one purpose: showing your profile to members and suggesting suitable matches. They are never used for anything else or shared for marketing. You can change them at any time or delete your account.
Partner criteria
Accepted age range, countries, and the answers you accept for each profile question.
Photos
Up to 6 photos that you pick from your gallery or take with your camera — we only access the camera or gallery when you ask to. On our servers we strip each photo’s metadata (EXIF and similar), including GPS location and device model, keeping only its orientation. Moderators may hide photos that break our rules.
Activity in the app
Likes, favourites, profile visits (who visited whom, how often and when last), blocks, reports you send or that are sent about you, and your online status and last-seen time — you can hide your online status from others.
Messages
The content of your messages and when they were sent, delivered and read. We store them to deliver them and show them to both of you; our team only looks at them when investigating a report or when the law requires it.
Notifications
Your device’s Firebase Cloud Messaging token and platform, to send message and like notifications.
Subscriptions and purchases
When you subscribe through Google Play we store the plan and duration, order number and purchase token, start, expiry, renewal, cancellation and refund dates, price, currency and country of purchase. Google handles the payment entirely — we never see your card details.
Technical and security data
IP address, app or browser type (user agent) and request times in our server logs, plus platform and app version. We use them for security, abuse prevention and fixing problems.
Your messages to us
What you send to our support address, so we can handle your request.
What we do not collect
- Your location: we do not request location permission; “Near you” uses the country and city you type.
- Your contacts, phone number or advertising ID.
- The app contains no advertising, analytics or tracking tools.
How we use your data, and why
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the service: account, showing your profile, suggestions, likes, messages and notifications | Account, registration, profile, criteria, photos, activity, messages, push token | Performance of our contract with you (Terms of Use) |
| Faith- and values-based matching, and showing your religious answers on your profile | Faith and origin answers, partner criteria | Your explicit consent |
| Confirming you are 18 or older | Date of birth | Contract; legal obligation |
| Moderation and safety: reviewing text and photos, handling reports, preventing fraud and abuse, protecting minors | Profile, photos, text, reports, reported messages, technical data | Our legitimate interest in a safe community; legal obligation |
| Subscriptions: verifying purchases with Google Play, granting benefits, renewals, refunds, accounting | Purchase records | Contract; legal obligation (tax and accounting) |
| Security and troubleshooting | Technical data | Our legitimate interest |
| Contacting you about your account and requests | Email, correspondence | Contract; our legitimate interest |
We do not send marketing messages without your consent. Suggestion order and compatibility scores are calculated automatically from both members’ answers and criteria, only to order what you see; they have no legal effect — the decision is always yours.
What other members see
Your profile is shown to registered Mithaq members of the opposite gender: your display name, age (not your date of birth), country and city, photos, profile answers, your text once approved, and your online status and last-seen time unless you hide them.
If you like or visit a member’s profile, they may see this if they are a subscriber. Your email address and Google account ID are never shown to anyone.
Who we share data with
We do not sell or rent your data, and we do not share it with advertisers. We share it only where needed to run the service, with parties bound to protect it:
- Google: Google Sign-In, Firebase Cloud Messaging for notifications, and Google Play for payments and subscriptions.
- Contabo GmbH: our server provider, hosting the database and photos in a data centre in Germany.
- Authorities: when the law requires it or to protect someone’s safety — including reporting any child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) and the competent authorities.
- Change of ownership: if the app is transferred to another party, the data moves with the same protections, and we will tell you beforehand.
International transfers
Your data is stored on servers in Germany (European Union). Google may process some data (sign-in, notifications, payments) in other countries, including the United States, under its contractual safeguards such as the European Commission’s Standard Contractual Clauses. Because our members live in many countries, using the app transfers your data to these servers.
How long we keep data
| Data | Period |
|---|---|
| Account, profile, photos, activity and messages | For as long as your account exists. |
| After an account deletion request | We deactivate and hide the account as soon as the request is verified, and permanently delete its data within 30 days. Backups are overwritten on rotation, so the data disappears from them within at most 30 further days. |
| Purchase records | As long as tax and accounting laws require (up to 10 years), kept apart from your profile and photos. |
| Technical logs | Up to 30 days, unless needed to investigate a specific security incident. |
| Reports and enforcement decisions | As long as needed to protect members and keep people banned for serious violations from returning, and as the law requires. |
| Support correspondence | As long as needed to handle your request, then deleted within 12 months. |
How we protect your data
- All connections between the app and our servers are encrypted (HTTPS/TLS).
- Sign-in session tokens are stored hashed (SHA-256), so a leaked database copy does not give access to accounts.
- We strip metadata and location from photos when they are uploaded.
- Access to admin tools is limited to authorised staff, with hashed passwords and an audit log of every action.
No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.
Your rights
- Access: ask for a copy of your data.
- Correction: edit your profile and criteria in the app at any time, or ask us.
- Deletion: delete your account and its data — see account deletion.
- Portability: a copy of your data in a machine-readable format.
- Objection and restriction: of processing based on our legitimate interests.
- Withdrawing consent: for sensitive data, by changing your answers or deleting your account, without affecting past processing.
- Complaint: to the data protection authority in your country.
Email us from the address linked to your account at alaa.albayed2016@gmail.com. We reply within 30 days and may ask you to prove the account is yours. You can turn notifications off at any time in your device settings.
Children
Mithaq is only for adults aged 18 and over. We check the date of birth at registration and do not knowingly collect data from anyone under 18. If we learn that an account belongs to a minor, we delete it. If you suspect this, please email us. See also our Child Safety Standards.
This website
zawajmithaq.com uses no cookies and no analytics or advertising tools. It only stores your light/dark theme choice in your browser if you change it. Fonts are hosted on our own domain, so your browser does not contact third parties when you visit. Our server logs your IP address and browser type for security, and these logs are deleted within 30 days.
Changes to this policy
We may update this policy when the service or the law changes. We will update the effective date at the top of this page and tell you in the app before any significant change.
Contact us
Mithaq (ميثاق) — email: alaa.albayed2016@gmail.com.