Privacy Policy
Ajwa ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect when you use the Ajwa app or website, how we use it, and the choices you have.
1. Information we collect
We collect information you provide directly when you create or update your account:
- Account details: email address, password (stored as a salted hash — never in plaintext), username.
- Profile information: display name, age, gender, religion, location (city, state/province, country), profile text (About me, Looking for, Anything else), and keywords/chips.
- Photos: images you upload are stored in a private, access-controlled cloud bucket. They are only accessible to users you have connected with.
- Messages: the content of messages you send and receive within the app.
- Device information: device push notification tokens (for sending notifications) and the platform (iOS or Android).
- Activity data: the time you were last active in the app, used to show your online status and order search results.
2. How we use your information
- To operate and provide the Ajwa service — matching, messaging, and profile discovery.
- To send push notifications about new messages and connection activity (you can disable these in Settings).
- To send transactional emails such as email verification and password resets.
- To respond to support requests and feedback you send us.
- To maintain the security and integrity of the platform.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
3. How we store your information
Your data is stored on servers within our infrastructure:
- Account and profile data is stored in a PostgreSQL database hosted on a dedicated server.
- Photos are stored in a private Supabase storage bucket. Signed, time-limited URLs are used to serve your photos — they are never publicly accessible without authorisation.
- Session data is stored server-side and tied to a secure cookie on your device.
4. Third-party services
We use a small number of trusted third-party services to operate the platform:
- Supabase — private photo storage.
- Firebase Cloud Messaging (Google) — push notifications delivered to your device. Only a device token and message content are transmitted.
- PurelyMail — transactional email delivery (verification emails, password resets).
Each of these services processes only the minimum data necessary to perform their function.
5. Your rights and choices
- Access: you can view all profile information stored about you at any time within the app.
- Update: you can edit your profile, photos, and preferences from within the app.
- Delete: you can permanently delete your account from Settings → Delete Account. This removes all your data — profile, photos, messages, and connections — from our systems.
- Notifications: you can manage push and email notification preferences from Settings → Notifications.
- Hidden mode: you can hide your profile from discovery at any time from Settings without deleting your account.
6. Data retention
We retain your data for as long as your account is active. When you delete your account, your personal data is permanently removed. Anonymised, aggregated usage data that cannot identify you may be retained for service improvement.
7. Children's privacy
Ajwa is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, their account will be removed.
8. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Ajwa after changes are posted constitutes acceptance of the updated policy.
9. Contact us
If you have questions about this Privacy Policy or how your data is handled, please contact us at [email protected].