Privacy Policy

Marriage is a private matter, and we treat your information that way. This policy explains what we collect, why, who can see it, and the choices you have. We never sell your data.

• Account details: your name, email, password, and date of birth.
• Identity verification: your NIC number and photos of your NIC, used only to verify you. These are stored privately and are never shown to other members.
• Profile information: the details you choose to add — location, community, deen & lifestyle, education, languages, your “about you”, and similar.
• Usage data: actions like profiles you view or express interest in, and basic device/analytics information to keep the service working.
• Security logs: when you sign in we record your IP address, approximate location (country and city), and device type, and may check whether the connection uses a VPN or proxy. We keep these logs for 90 days and use them only to protect accounts and prevent fraud.
• Messages: the text you send to your matches.

• To create your account and verify your identity before your profile goes live.
• To show your profile to other verified members according to the privacy level you set on each field (public, matches-only, or private).
• To detect mutual interest, open conversations, and keep the community safe.
• To process subscriptions and prevent fraud and abuse.
• To operate, secure, and improve the service.

You control most of what other members see through per-field privacy settings. Your real name and your NIC are always private and are used only for verification. A small, trained review team can access verification documents to approve accounts, and may view reported conversations to handle safety issues.

We use trusted service providers to run Zawaj.lk, and share only what is needed for each to do its job:

• Supabase — secure database and file storage.
• Resend — sending verification and account emails.
• PayHere / Stripe — processing subscription payments.
• PostHog — privacy-conscious product analytics.

We may also disclose information if the law requires it, or to protect the safety of our members. We do not sell your personal data to anyone.

• Photos and identity documents are kept in private storage and served only through short-lived signed links — never public URLs.
• Access is restricted by row-level security so members can only reach their own data.
• Passwords are hashed; sensitive admin actions require re-authentication and are logged.

We keep your information for as long as your account is active. When you delete your account, your profile is immediately hidden from all members and your account is closed. You can then ask us to permanently erase your personal data — including your NIC number and verification images — by emailing hello@zawaj.lk from your registered email address. We complete erasure requests within 30 days, except for limited records we must keep to meet legal, security, or fraud-prevention obligations.

• Edit or update your profile and per-field privacy at any time.
• Pause your profile so no one can see it, or delete your account entirely from settings.
• Contact us to request a copy of your data, ask a privacy question, or request permanent erasure of your data.

Zawaj.lk is only for adults aged 18 and over. We may update this policy from time to time; the latest version will always be posted here with a revised date, and significant changes will be notified in the app.