19. Scope and Applicability
This Privacy Policy describes how Wali Marriage LLC, doing business as “Wali Marriage” (“Company,” “we,” “us,” or “our”), collects, uses, stores, shares, and protects information about you when you use the Wali: Halal Marriage App. This Privacy Policy applies to all users worldwide, including users in the United States, the European Economic Area, the United Kingdom, Canada, and all other jurisdictions where the App is available.
This Privacy Policy is incorporated by reference into our Terms of Service and forms part of the binding Agreement between you and the Company. By using the App, you consent to the data practices described in this Privacy Policy.
20. Information We Collect
20.1 Identity and Verification Data
Full name or alias provided during registration
Government-issued photo identification (passport, driver’s license, national ID)
Facial biometric data collected through selfie and liveness verification (see Section 21)
Phone number (primary identity key). Every account verifies one phone number once, including accounts created with Sign in with Apple.
If you use Sign in with Apple: Apple's identifier for you in our app, and a token Apple issues when you sign in, which we keep only so we can ask Apple to revoke your sign-in when you delete your account. We ask Apple for no name and no email address.
Date of birth or age
20.2 Profile Data
Profile photos (stored in blurred/hidden state by default until authorized reveal)
City and approximate location
Ethnicity (if voluntarily provided)
Languages spoken
Religious practice data: prayer frequency, masjid attendance, hijab or beard observance, self-assessed religiosity level, and your answer about faith at home if you give one (used only to show the shared list described in the Terms, Section 4.14)
Marriage intent data: timeline, relocation preferences, spouse preferences, values
Bio and open-ended questionnaire responses
20.3 Communication Data
All messages sent and received through the App’s chat system
Voice notes you send in a conversation, and the written transcript we make of each one so that it can be checked against our safety rules before it is delivered (Section 25.3). The transcript is never shown to the other person.
Match interest requests sent and received
Photo unlock approvals and denials
Wali approval and denial records
Report submissions and moderation correspondence
Messages sent and received in Wali Community Groups (see Section 23 and Terms Section 7.5)
20.4 Behavioral and Technical Data
City (self-entered at registration; used for city-level distance bucketing visible to other users — see Section 23B)
IP address — we do not keep a history of IP addresses. When you ask for a sign-in code, a one-way coded form of your IP address is counted for two days to stop abuse (fair-use counters, Section 26); the raw address is never stored. Our sign-in provider (Supabase) records the IP address of each signed-in session and of each authenticator check while that session or check exists, for security. If you joined our website waitlist, the IP address of that sign-up was recorded with it. An IP address is NEVER shown to other users
Device type, operating system version, and unique device identifiers
App usage patterns: session duration, feature usage, navigation patterns
Interaction timing: when messages are sent, when requests are reviewed
Screenshot detection events
**We do NOT collect: **live GPS location, continuous location tracking, foreground or background location permissions, or any location data at sub-city precision.
20.5 Wali Relationship Data
Identity and verification documents of linked Walis
Documentation establishing the guardianship relationship
Verification media submitted for relationship confirmation
Records of Wali actions taken within the platform
20.6 Financial and Transactional Data
Subscription tier and billing history
Transaction identifiers from payment processors
Referral activity and reward redemption records
We do not directly store full payment card numbers, bank account details, or other sensitive financial data. Such data is handled exclusively by our payment processors.
20.7 Marriage Confirmation Data
If you tell us you married someone you met here, we collect: which of your conversations it was with, your spouse’s confirmation or denial, the month and year, and, only if you choose, a short story and whether your city and a role (“a brother”, “a sister”) may appear with it. A story is shown on our website only if both of you agree and we have reviewed it; either of you can withdraw at any time and it is removed from the website at once. It never includes a name, photo, date or contact detail. We count confirmed marriages only in total and do not show the total until it is at least ten.
20.7A Referral Data
If you share or use an invite code: your code; which account used it and when; a keyed code (HMAC) of the phone number that used a code, so a number can use a code only once; the weeks of Standard earned and when they run; and, for a mosque or community code, which organisation your account is connected to. The organisation does not receive your profile.
20.7B Requests You Make
If you ask for a copy of your data, the email address you type is used once to send you the link and is then deleted; we keep only its domain (for example “gmail.com”) and when the file was sent. The file itself is deleted after 7 days. We also keep short-lived counters of how often an account does certain things (Terms Section 5.2A) for two days, the profiles suggested to you each day in Today’s Picks for 14 days, and the yearly renewal reminders and price-change notices we send you about your plan.
20.8 Data You Provide Indirectly
We also collect information you provide through interactions with our support team, moderation submissions, appeals, and any communications with the Company outside the App.
21. Biometric Data — Special Disclosures
21.1 What Biometric Data We Collect
We collect biometric identifiers and biometric information as defined under applicable law, including: facial geometry derived from selfie photographs submitted during identity verification; liveness verification data used to confirm you are a real, present individual; and any biometric data extracted by our third-party identity verification provider, Didit Identity, Inc. (or, only as a back-up, Persona Identities, Inc.), in the course of verifying your identity.
21.2 Purpose of Collection
Biometric data is collected exclusively for the purpose of verifying user identity, preventing fraud, detecting duplicate accounts, and confirming the liveness of the person submitting verification documents. We do not use biometric data for any commercial purpose beyond identity verification and fraud prevention.
21.3 Third-Party Processing
Your biometric data may be transmitted to and processed by our third-party identity verification provider, Didit (or, only as a back-up, Persona), which is required to be compliant with applicable biometric privacy laws, including BIPA. We require our verification provider to maintain reasonable data security measures and to use biometric data only for the purposes for which it was disclosed.
21.4 Retention of Biometric Data
Biometric data will be retained for the duration required to complete identity verification, and for a maximum of three (3) years from the date of collection, or one (1) year after your account is terminated, whichever is earlier, unless a longer retention period is required by law or legal hold. After the applicable retention period, biometric data will be permanently destroyed in a manner consistent with applicable law. Didit deletes the face comparison (the scan of face geometry, the biometric identifier) when each check ends. The ID images, the selfie video and the data read from the ID are not biometric identifiers; Didit keeps them for up to 2 years after the check and then deletes them.
21.4A Public Retention Schedule and Destruction Guidelines
This Section is our public written policy for biometric identifiers and biometric information. (a) Purpose: we collect them only to verify identity, confirm liveness and prevent fraud and duplicate accounts. (b) Retention: they are destroyed when that purpose has been satisfied, and never later than three (3) years after your last interaction with us, whichever comes first. For a Didit check the purpose is satisfied when the result is returned: Didit permanently deletes the face comparison (the face template) when each check ends. Didit keeps the ID images, the selfie video and the data read from the ID for up to 2 years after the check, then permanently deletes them, and in every case no later than three (3) years after your last interaction with us. (c) Wali Marriage itself never receives or stores a face scan: we keep only the result, the sex shown on the ID (one letter), the issuing country and whether the liveness and face checks passed. (d) Destruction means permanent deletion from the provider's systems and backups in the ordinary course, which the provider confirms under its contract with us.
21.5 No Sale of Biometric Data
We will never sell, lease, trade, or otherwise profit from your biometric data, and neither may Didit or Persona. We will not disclose your biometric data to any third party other than our identity verification provider, except: (a) as required by applicable law, legal process, or governmental order; (b) in connection with a merger, acquisition, or asset sale where biometric data is transferred to the acquiring entity subject to equivalent privacy protections; or (c) with your explicit, written consent.
21.6 Your Consent
By submitting your selfie and identity documents, you expressly consent to the collection, storage, use, and processing of your biometric data as described in this Section. If you do not consent to biometric data processing, you may not use the App’s verification features and will not have access to the full functionality of the platform.
22. How We Use Your Information
We use the information we collect for the following purposes:
22.1 Platform Operation
To create, maintain, and secure your account
To verify your identity and prevent fraud and duplicate accounts
To set the gender on your account from your verified ID, so that Discover shows each person to the right people
To provide the core matchmaking functionality of the App
To enforce the Wali system and all platform rules
To process subscription payments and manage billing
22.2 Safety and Moderation
To check communications automatically for contact details and other content our rules do not allow, before they are delivered
To show profiles with recent reports from several different people lower in discovery while those reports are reviewed (Section 31)
To investigate reports of violations and take appropriate moderation actions
To respond to legal requests and prevent harm
To detect, investigate, and prevent fraudulent activity
22.3 Platform Improvement
To analyze usage patterns and improve the App’s features and functionality
To troubleshoot technical issues and improve performance
To develop and test new features
22.4 Communication
To send you notifications about your account, matches, and messages
To send you important legal and policy updates, including updates to this Agreement that require re-acknowledgment (see Part IV)
To respond to your inquiries and provide customer support
To send marketing and promotional communications, subject to your opt-out rights
Waitlist emails. If you join the waitlist on our website, we send you a welcome and then about one email every two weeks until we open. Every email has a one-click unsubscribe link and our postal address. Each email also contains a small image that tells us whether it was opened; if three emails in a row go unopened, we stop writing to you. You may tell us your country and city; we use them only to decide where to open next, counted together with everyone else's. When you join the waitlist we also record the country your internet address belongs to, using an offline database in our own systems (DB-IP Lite); your address is not sent to anyone for this. If your address belongs to a cloud or hosting network, we record no country. A phone number given on our website receives only what its sign-up text describes: a launch notification, sign-in codes and account notifications, never a newsletter.
Messages to our social media accounts. If you comment on or send a message to Wali Marriage's accounts on Instagram, Facebook or another platform, we keep what you wrote, your identifier on that platform and our reply, so that we can answer you. If your comment asks for it with the word we name in the post, we send you one private message with our waitlist link. Our systems never write to anyone who has not written to us first. A member of our team may answer, by hand and in public, a public question about Muslim marriage on a forum or social network; to prepare that answer we keep the link to the public thread and a short summary of it for at most 90 days.
Organisations we contact. If you run or speak for a mosque, a student association, a community group, a podcast or a publication, we may email you at an address you published for that purpose. Every such email lets you opt out for good with one click, and we keep only the address, the page where we found it and our correspondence.
22.5 Legal Compliance
To comply with applicable laws, regulations, and legal process
To exercise or defend our legal rights
To enforce this Agreement and our Community Guidelines
23. The Wali Access System and Community Groups — Privacy Disclosures
23.1 No Privacy as Between User and Wali
When a Wali is linked to your account, the Wali is granted access to all communications within the App’s chat system that involve your account. This includes both real-time access and historical access as described in Terms Section 4.3. By linking a Wali to your account, you consent to the Wali’s access to your communications through the App. Any man who communicates with a woman who has a linked Wali is hereby notified that the Wali may access those communications.
23.2 Disclosure to All Parties
The presence of a Wali and the Wali’s potential access to conversations is disclosed to all parties in any chat through a visible banner. All users of the App are deemed to have received notice that any chat involving a woman with a linked Wali may be monitored by that Wali.
23.3 Company Not Responsible for Wali Actions
The Company is not responsible for the use that any Wali makes of information accessed through the platform. The Company does not control what a Wali does with information they view through the App outside of the App’s platform. Users who have concerns about Wali conduct should report it through the App’s reporting system.
23.4 Circles and Profile Sharing
Circles are group conversations in which families and communities discuss potential matches (see Terms Section 7.5). Any verified user may create or join one, and a person seeking marriage may be a member of their own family's Circle.
Joining a Circle discloses your first name and your city to its other members. It discloses nothing else.
A profile shared into a Circle is stored as a reference, not as a copy. What each member sees when they open that card is determined at the moment they open it, from that member's own permissions, and being a member of the Circle confers no permission by itself. In practice:
(a) A card shared without a name shows age, general location, religious practice, and a short excerpt of the written profile. It shows no name and no photographs.
(b) A woman's first name appears on a shared card only where she has affirmatively approved that specific share into that specific Circle. Her photographs are never disclosed by a share; they remain governed by the separate photo-reveal consent described elsewhere in this Policy.
(c) A man's name and photographs are already visible to women browsing the App, and a shared card reflects that same position.
(d) We do NOT notify a person when their profile is shared without their name, because such a card discloses nothing that the members concerned could not already see. We DO notify a woman, and require her approval, whenever her name is proposed to be shown. This is a deliberate choice rather than an oversight, and it is paired with the disclosure in paragraph (e).
(e) Every user can see, at any time in Settings, a complete list of every Circle their profile has been shared into, who shared it, whether their name was shown, and when. Any share may be withdrawn from that list. Withdrawal takes effect for every member of the Circle the next time they view the card.
By using the App, each user acknowledges that: (i) approved shares are visible to the other members of that Circle; and (ii) the Company is not responsible for further disclosure made by members of a Circle outside the App.
23A. Administrative Access and Audit Logging
23A.1 Categories of Staff Access
The Company’s administrative system defines five staff role categories, with graduated data access:
Level 1 Administrators: may access any user data as necessary to operate the platform, respond to legal process, investigate fraud, or protect user safety
Lower-Level Administrators: may access operational data and user records. A ban requested by anyone other than a Level 1 Administrator takes effect only after a second staff member approves it
Moderators: may view profile content and flagged chat content only in the context of an active report, appeal, or verification review; may not browse user data outside that context
Customer Support Agents: may view non-sensitive account data (profile, subscription status, support history, and your state but not your city); are structurally prohibited from viewing chat content, government ID data, or biometric data
Analysts: may see aggregated statistics only (counts and rates across all members); no individual user’s data
Any Administrator, Moderator or Customer Support Agent may also look up a single account by its reference when you contact us or a safety matter requires it, but only after writing down the reason, which is recorded with the lookup in the audit log (Section 23A.3)
23A.2 Conditions Under Which Staff Access Occurs
In response to a user report or user-initiated support request
In the course of verification review (identity, wali relationship, age)
To investigate suspected abuse, fraud, or safety risks detected by automated systems or user reports
To comply with applicable law, legal process, or governmental request
To enforce the Terms of Service and Community Guidelines
To respond to a privacy rights request or data breach
As necessary to maintain, troubleshoot, or secure the platform
23A.3 Audit Logging of Staff Access
Every staff access to user data through our administrative system — including every view of chat content and photographs, and every action taken on an account — is logged to an append-only, tamper-evident audit log. The audit log records the identity of the staff member, the timestamp, the data accessed, the context (report, appeal, or written reason), and the action taken. A copy of the whole log is sent off our systems every day, so a change to it can be detected. The audit log is retained for at least seven (7) years and is reviewed by Level 1 Administrators for anomalous patterns, with automatic alerts for unusual reading, night-time access and changes to staff roles. Identity documents and biometric data are reviewed inside our identity-verification provider’s own system (Persona, Section 25.3), not ours: those views are recorded by that provider in its own access log, not in ours.
23A.4 User Right to an Access Report
Users may request a record of staff access to their account data by submitting a privacy rights request under Section 27. The Company will provide, within the response window applicable under GDPR or CCPA, a summary describing: the dates of staff access, the categories of staff roles involved, the categories of data accessed, and the purpose of access. For access that occurred in connection with an active investigation, the Company may withhold specifics until the investigation is closed, as permitted by applicable law.
23A.5 Financial Controls — Disclosure
We do not hold user funds. Every purchase in the App is made through Apple, which processes the payment and pays the Company; refunds are decided and paid by Apple. No staff member can take money from, or send money to, a user through the App. A staff member can grant a free period of a plan, which is recorded with its reason in the audit log and limited to Level 1 Administrators.
23B. Location Data — Privacy Model
23B.1 What Location Data We Collect
Your city — self-entered at account registration and editable at any time in Settings
Your IP address only as described in Section 20: a coded two-day counter when you ask for a sign-in code, the sign-in provider’s record of an active session, and a website waitlist sign-up. We do not work out your location from your IP address
23B.2 What Location Data We Do Not Collect
Live device GPS coordinates
Continuous or periodic location tracking
Foreground or background location permissions (the App does not request either)
Neighborhood-level, street-level, or sub-city-level location
Location data from third-party data brokers
23B.3 How Location Is Displayed to Other Users
When another user sees your profile, they see your city and a bucketed distance label (e.g., ‘In your city,’ ‘5–15 miles,’ ‘Outside [state]’) computed server-side from the cities each of you entered. They never see your exact coordinates, street address, neighborhood, or a numeric distance below 5 miles. Bucket granularity is capped at 5 miles by platform design and cannot be overridden by any admin, moderator, or user-configurable setting.
23B.4 Which Areas the App Serves
Whether the App is open in your area is decided from the city you enter, not from your IP address. An IP address is never made visible to other users, never sold, and never used for advertising.
23B.5 Your Rights Over Location Data
You may change your entered city at any time in Settings; the change takes effect immediately for all future discovery and distance displays
Deleting your account removes your city data per the retention schedule in Section 26
Requesting a data export (Section 27) includes your entered city. There is no IP history to include
California and EEA users retain all rights described in Section 27 with respect to location data
24. Chat Permanence — No-Deletion System
24.1 Permanent Message Storage
All messages sent through the App’s matching-system chat are permanently stored and cannot be deleted, edited, or retracted by any user after sending. This is a fundamental and disclosed feature of the platform designed to support accountability, safety, and Wali oversight. By using the App’s chat features, you expressly consent to this permanent storage policy.
24.2 Scope of Permanence
Message permanence applies to all matching-system chat content, including: text messages, voice notes (the recording and its transcript), system messages, and any notifications within chat threads. It applies regardless of whether the other party in the conversation has terminated their account, been banned, or is otherwise no longer using the App.
24.2A Circles Are Outside the Permanence Policy
This Section 24 does NOT apply to Circles. Messages in a Family Circle or a Community Group may be deleted by their sender within twenty-four (24) hours of sending, and by the owner of that Circle at any time, as set out in Terms Section 7.5.4.
The reasons for permanence stated in Section 24.3 describe a conversation between two people who do not yet know one another, one of whom may be under a Wali's oversight in that conversation. A Circle is a conversation among people who already know one another, and applying permanence to it would discourage exactly the candid family discussion the feature exists to support.
Deleting a message in a Circle removes it from view for every member. It does not erase our underlying record. We retain the message content, its sender, and its timestamp for the safety, moderation, audit, and legal-hold purposes described in Section 26. You should not treat deletion in a Circle as destruction, and you should not send anything in a Circle that you would not want retained.
24.3 Exception for Wali Community Group Messages
Messages within Wali Community Groups are governed by a different deletion policy, as described in Terms Section 7.5.4: the sender may delete a message within 24 hours of posting, and a Group Admin may delete a message at any time. This is a deliberate design difference from matching-system chats.
24.4 Account Deletion and Chat Data
The permanent storage policy for matching-system messages is subject to the following limitations imposed by applicable law: (a) upon valid account deletion request, the content of messages will be deleted from user-facing systems within thirty (30) days; (b) metadata — including sender identifiers, recipient identifiers, timestamps, and moderation flags — may be retained for safety and legal compliance purposes for up to two (2) years; (c) content that is subject to a legal hold, ongoing investigation, or law enforcement request may be retained indefinitely until such hold is lifted; and (d) when you delete your account, the phone number you signed up with is released from it, and you may use that number to open a new account later. The exception is an account that, at the time it is deleted, has been blocked by another member, is the subject of an open report, or is subject to a suspension or removal by us: in that case we keep a one-way keyed code (an HMAC) derived from the number, not the number itself, so that a block, restriction or removal continues to apply to any new account later opened with the same number. For an open report, the code is kept until the report is resolved, and deleted if the report does not lead to removal; for a block, suspension or removal it is kept indefinitely. The code cannot be turned back into your number, is not used to contact you, is not shared, and is not visible to any other user. Before an account is deleted from within the App, we send a one-time code to that number to confirm that the request comes from the account holder.
SMS / Text Messaging Program
When you provide your mobile phone number, you consent to receive SMS text messages from Wali Marriage. The categories of messages we send are: (a) one-time passcodes for phone verification during registration and login, and to confirm your identity before sensitive account actions such as deleting your account; (b) transactional account notifications such as profile approval and match requests; (c) customer support replies; and (d) if you joined our waitlist by text, one message when the App becomes available to you.
Message frequency varies based on your activity. Message and data rates may apply. You can opt out at any time by replying STOP to any message, and reply HELP for help.
No mobile information, including your phone number and SMS opt-in consent, will be shared with or sold to third parties or affiliates for marketing or promotional purposes. We share your mobile number only with our SMS delivery provider strictly to send the messages described above, and that provider is contractually prohibited from using it for any other purpose.
25. Data Sharing and Third-Party Disclosure
25.1 We Do Not Sell Your Data
We never sell member data, and we never give it to any other company for its own purposes, including any other business our owner runs.
We do not sell, rent, or lease your personal information to third parties for their own marketing or commercial purposes.
25.2 Sharing Within the App
Profile information is shared with other users in accordance with the visibility rules described in the App. Your anonymized profile data (age, approximate distance, religious practice and your written answers) is visible to men browsing the platform; your name, photos and city are not. Your first name and your city reach a man only after you choose to share your photos with him in a conversation and that sharing takes effect; once shared, he keeps knowing your name even if you later re-blur your photos. Your full profile is visible to women and to linked Walis in accordance with the App’s rules. Chat content is accessible to chat participants and linked Walis as described herein.
25.3 Service Providers
We share data with the following third-party service providers, who perform functions on our behalf. This is the complete list of services that receive personal data from the App:
Supabase, Inc. (United States) — hosts our database, account sign-in, stored photographs and server functions. It holds the data described in this Policy on our behalf.
Twilio Inc. (United States) — sends the text messages that carry sign-in and confirmation codes. It receives your phone number and the code.
Didit Identity, Inc., 1111B S Governors Ave STE 34855, Dover, Delaware 19904, United States ("Didit") — verifies the identity of members and walis. It receives a photo of your government ID, a short selfie video and signals about your device, checks that the ID is genuine and that you are the person on it and present, and tells us the result, only after the written release described in Section 21. It acts as our processor. We have set Didit to delete the face comparison when each check ends, and your ID images, selfie video and the data read from your ID 2 years after the check. We keep only: the result, the sex shown on your ID (one letter), the country that issued it, and whether the liveness and face checks passed. We never receive or keep your face scan.
Persona Identities, Inc. (United States) — our back-up verification provider, used only if Didit is unavailable. When it is used, it receives the identity document, selfie and face comparison described in Section 21, and only after the written release described there.
RevenueCat, Inc. — manages subscriptions, as described in Section 25.3.1.
Sightengine (Kozelo SAS, France) — checks uploaded photographs against our content standards, as described in Section 25.3.2.
Apple Inc. — processes App Store purchases and delivers push notifications to iPhones. It receives what the App Store and Apple's notification service require, including a device token.
Expo (650 Industries, Inc., United States) — relays push notifications to Apple. It receives a device token and the notification text, which never contains a name, a message or a place.
PostHog, Inc. (United States) — product analytics. It receives records of which screens and buttons are used, tied to a random identifier for the device. It never receives your name, phone number, messages, profile text or account identifier.
Sentry (Functional Software, Inc., United States) — reports app crashes and errors so we can fix them. Phone numbers, email addresses and database values are removed from each report on the device before it is sent, and a report records which part of the screen was tapped, never the words on it.
Groq, Inc. (United States) — turns each voice note you send into written text, so that it can be checked for contact details and other content our rules do not allow before it is delivered, and reads the text on a biodata photo you choose to import. It receives the recording or the image only. We use its zero-data-retention setting, so it keeps nothing after processing. We do not store the photo or its text either; only the profile lines you confirm are saved, as part of your profile.
Daily (Daily.co, Inc., United States) — carries family video calls (Terms, Section 4.12). It receives the call's random room name, the label each person is shown with ("Him", "Her", "His family" or "Her family", never a name), the room's closing time, and the audio and video of anyone who joins while the call is live. Calls are not recorded, and the room has no text chat.
Resend — sends email from our domain, such as waitlist confirmations, the link to a copy of your data you ask for, and, if email sign-in is offered, sign-in codes. It receives the email address and the message.
Apple Inc. (Sign in with Apple) — if you sign in with Apple, Apple confirms your sign-in to us and, when you delete your account, we ask Apple to revoke it. Apple receives our app’s request; we receive only Apple’s identifier for you in our app.
All service providers are contractually required to: (a) use personal data only for the purposes for which it was disclosed; (b) implement reasonable security measures; (c) not sell or further disclose personal data; and (d) comply with applicable privacy law.
25.3.1 RevenueCat (Subscription Management)
We use RevenueCat, Inc., 340 S Lemon Ave #1085, Walnut, CA 91789, United States ("RevenueCat"), to manage subscriptions and in-app purchases. RevenueCat sits between the App and the Apple App Store and Google Play billing systems and tells us whether a given account currently holds a paid subscription.
Categories of data shared: a pseudonymous account identifier that we generate, the subscription product purchased, the purchase and renewal timestamps reported by the store, the trial status, the platform (iOS or Android), and coarse device and country information supplied by the operating system. We do not share your name, phone number, email address, photographs, religious affiliation, profile content, or identity-verification data with RevenueCat.
RevenueCat acts as a data processor under our instruction; Wali Marriage LLC remains the data controller. We never receive or store complete payment card details, and neither does RevenueCat: card data is handled entirely by Apple and Google. RevenueCat's privacy policy is available at https://www.revenuecat.com/privacy.
We record separately, in our own systems, the exact subscription terms displayed to you immediately before any purchase or free trial begins, together with the time you agreed to them. That record exists so that both of us have the same account of what was agreed, and it is retained for the period stated in Section 26.
25.3.2 Sightengine (Image Content Moderation)
We share user-uploaded photographs with Sightengine, an automated image moderation service operated by Kozelo SAS, 16 bis rue d'Odessa, 75014 Paris, France ("Sightengine"). Sightengine processes these photographs to automatically detect content that violates our Community Guidelines and content standards, including but not limited to sexual content, nudity, violence, weapons, illegal substances, and self-harm imagery. This processing is performed before the photograph is made visible on the platform.
Categories of data shared: user-uploaded image files and a unique per-request identifier. We do not share user names, contact information, profile data, or biometric identifiers with Sightengine.
Sightengine acts as a data processor under our instruction; Wali Marriage LLC remains the data controller. Sightengine has no direct relationship with our users and processes your photographs only at our direction. Our relationship with Sightengine is governed by a Data Processing Agreement between Wali Marriage LLC and Kozelo SAS. Sightengine retains submitted images for the time needed to provide the moderation service and for a reasonable period thereafter to support audits, legal compliance, and dispute resolution, in accordance with their privacy policy. Sightengine may use sub-processors to assist with its services and maintains contractual restrictions on their access, use, and disclosure of your data.
Sightengine is located in the European Union. By using the platform, you acknowledge that your photographs will be transferred internationally from the United States to France for moderation processing, subject to the protections of the Data Processing Agreement referenced above and applicable contractual safeguards.
You may exercise your data rights regarding Sightengine's processing of your photographs by contacting us at izharbid@walimarriage.com. We will coordinate with Sightengine to fulfill your request. Sightengine's privacy policy is available at https://sightengine.com/policies/privacy.
25.6 Ads for Wali Marriage, and Your Choices
On the website: if you choose "Analytics and ads" in the cookie banner, we load the Meta Pixel and our server tells Meta when a waitlist sign-up happens (Meta's Conversions API), so we can measure our ads. If you then join the waitlist, we may later upload a one-way scrambled copy (SHA-256) of your email address to Meta Platforms, Inc. so it can show our ads to people similar to our members. If you choose "Analytics only" or "No thanks", none of this happens, and Global Privacy Control counts as "No thanks".
In the App: we ask only through Apple's App Tracking Transparency prompt. If you choose "Allow", we may upload a scrambled copy of your account email to Meta for the same purpose. If you choose "Ask App Not to Track", nothing is uploaded.
What Meta receives: the scrambled email only. Never your profile, answers, messages or photos, and nothing about you beyond the fact that you signed up to a Muslim marriage service. We never upload phone numbers, and we never sell this data.
Signing up to a Muslim marriage service can reveal your religion, which several US states treat as sensitive data that needs opt-in consent. We do not upload anyone whose state requires that opt-in (today Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas and Virginia), anyone whose state we do not know, or anyone outside the United States.
You can change your mind at any time: "Your privacy choices" at the bottom of every page of the website, or Settings, Your privacy choices in the App (on iPhone, the tracking permission itself is in the Settings app, under Privacy & Security, Tracking). Unsubscribing from our emails also leaves you out of every later upload. When you opt out, we leave you out of the next upload and ask Meta to delete what it received.
25.4 Legal Disclosures
We may disclose your information, including communication content, without prior notice to you when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce this Agreement; (c) protect the rights, property, or safety of the Company, its users, or the public; (d) prevent or investigate possible wrongdoing; or (e) respond to an emergency involving risk to life.
25.5 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. You will be notified of such transfer and the privacy protections applicable to your data, and you will have the opportunity to delete your account if you do not wish your information to be transferred.
26. Data Retention Schedule
Data Category | Retention Period | Notes
Chat message content | Account lifetime + 30 days after deletion | Content deleted on request; metadata retained for safety audit
Circle message content | Account lifetime + 30 days after deletion | Removed from view on deletion by sender or Circle owner; underlying record retained for moderation, audit and legal hold
Circle membership and profile-share records | Account lifetime + 3 years | Who was in which Circle, which profiles were shared into it, on what basis, and who approved or withdrew each share
Paywall disclosure receipts | Account lifetime + 7 years | What subscription terms were displayed immediately before purchase, and when they were agreed; retained as proof of consent
Keyed code (HMAC) of the phone number of a deleted account that was blocked, reported, suspended or removed at deletion | Until an open report is resolved without removal; otherwise indefinitely | The number itself is released at every deletion. The code only lets an earlier block, restriction or removal continue to apply to a new account opened with the same number; it cannot be turned back into the number and is never used to contact you or shared (Section 24.4(d))
Discovery record (which profiles were shown to whom, roughly how long each stayed on screen, and the parts of the order that placed it there) | Until you delete your account | The working copy Discover uses lasts 90 days; older entries are kept in an archive used only for our own statistics, and erased when either person deletes their account. Used only to order Discover and to check that it treats people fairly; never used for advertising or sent to analytics providers; erased when either person deletes their account
Saved Discover filters and "Not now" choices | Account lifetime, and "Not now" choices at most 90 days | Your filters also decide who you are shown to (they apply in both directions); visible only to you; erased on deletion
Device time zone | Account lifetime | Read from your device when you open the App, so that quiet hours and daily limits follow your own day; erased on deletion
Hide-my-profile setting | Until you show your profile again or delete your account | Whether you have hidden your profile, and when; visible only to you
Voice notes in a conversation, and their transcripts | As chat message content (above) | The recording is delivered only after its transcript passes the same checks as a written message; the transcript is kept with the message as a moderation record and is never shown to the other person
Profile reports you file | Account lifetime + 3 years | Kept with moderation records; the person you report is never told who reported them
Profile data and photos | Account lifetime + 30 days after deletion | Deleted from user-facing systems; moderation history retained
Identity check result (Didit) | Until you delete your account | Approved or not, the sex shown on your ID, the issuing country, and whether the liveness and face checks passed; never images, names or document numbers
ID images, selfie video and data read from the ID (held by Didit) | 2 years after the check, and never later than 3 years after your last interaction with us | Set in Didit's console; then permanently deleted by Didit
ID-check review | Account lifetime + 3 years | When the sex on your ID differs from your sign-up, or cannot be read, and what our team decided; kept with moderation records
Government ID documents (back-up provider, Persona, only if it is used) | Verification approval + 90 days | Purged after retention window unless legal hold applies
Biometric data (the face comparison, or face template) | Deleted by Didit when each check ends; never more than 3 years from collection or 1 year post-termination | Permanently destroyed after retention period per BIPA/CUBI (Section 21.4A)
Financial and subscription records | 7 years | Required for financial and tax compliance
Moderation and report records | Account lifetime + 3 years | Retained for legal defense and regulatory compliance
Reported and flagged content | Indefinite if under investigation | Retained for legal proceedings; restricted access only
Marriage confirmation records | 7 years | Which two accounts, the month and year, and the confirmation dates; shown only as a total, and only once it is at least ten
Referral records | Account lifetime; the phone-number code indefinitely | So one number can use a code only once; an unstarted week is removed when the account is deleted
Data export files | 7 days | The file is deleted after 7 days; the request row keeps only the email domain and dates
Today’s Picks | Until you delete your account | Which profiles were suggested to you each day; after 14 days kept only in the archive described for the Discovery record
Days you used the App | Until you delete your account | One entry per day you opened the App, used for our own retention statistics; erased at deletion
Daily totals | Kept | Counts per day (sign-ups, active members, interests, connections, messages, subscriptions, deletions) with no information about any person; they remain after accounts are deleted
Fair-use counters | 2 days | How many times an account did a limited action in a window
Sign in with Apple token | Until the account is deleted | Used once, to revoke your Apple sign-in at deletion
Success story content | Only while both spouses maintain consent | Removed from the website at once when either spouse withdraws; printed material already distributed cannot be recalled
Terms & Privacy acceptance receipts | Account lifetime + 7 years | Retained to demonstrate proof of consent
Administrative access / audit logs | 7 years minimum | Append-only; tamper-evident; a daily copy is sent off our systems; covers all staff access to user data through our administrative system (identity-document reviews are logged by Persona)
Copyright notices (DMCA) and their record | Account lifetime + 3 years | The notice, the complaining party’s name and contact details, what was removed, any counter-notice, and the strike it counted toward
Circle moderation actions | Account lifetime + 3 years | A hidden circle message, a member removed from a circle, or a circle closed, with the staff reason; kept with moderation records
Payment notification log | 7 years, with the financial records | Each notice the payment provider sent us about a purchase: its outcome and event reference, never card details
Refused circle logo uploads | 90 days | When an upload was refused and the reason (for example a face or content our rules do not allow), so that repeated attempts can be stopped; the refused image itself is not kept
Changes our team makes to plan limits | Kept permanently | Who changed a plan's limits, when, the numbers before and after, and why; contains no member data
Waitlist email record | Until you ask us to delete it | Your email address or phone number, the date you joined, the country and city you gave us, which emails we sent and whether each was opened; after you unsubscribe we keep the record so that we never write to you again
Comments and messages to our social media accounts | 2 years | What you wrote, your identifier on that platform and our reply
Public threads we may answer by hand | 90 days | The link to a public thread and a short summary of it; an unanswered one is set aside after 14 days
Organisations we contact | Until you ask us to delete it | The published address, the page where we found it, and our correspondence; an opt-out is kept so we never write again
Rishta groups you created or joined, requests to join, and announcements you posted | Until the group or your account is deleted | Includes whether you chose to show the Mosque community badge, until you switch it off or leave the group. If you delete your account, a group you own passes to its longest-standing admin, or is closed if it has none
Cards shared into groups, and introduction requests | Until you delete your account | A withdrawn card stops being shown at once
Shared profile links and their view counts | A link works 30 days; the record until you delete your account | A number of views, never who viewed
A profile a parent started | Until claimed or discarded by the parent | The invitation stops working after 60 days; the lines are erased when it is claimed or discarded
Families talk messages | As long as the conversation they belong to (Section 24) |
Your path marks and reminders | As long as the connection |
Nikah checklist ticks and notes, and call or meeting times | As long as the connection (Section 24) |
Family call rooms | The room closes 3 hours after the agreed time | We keep the room's random name with the accepted call; calls are not recorded
Profession and degree badges | Until you remove them or delete your account | For a work email, the domain only, never the address; the code is kept 30 minutes
Matchmaker applications and suggestions | Until you delete your account |
Your Matchmaker plan status and renewal date | While you are a matchmaker; with your account |
Waitlist country from your internet address | With the waitlist record |
Your answers to "What matters at home" | Until you change or clear them, or delete your account | Erased at deletion
A biodata photo or pasted text you import | Not kept | Read once and discarded; only the lines you add become part of your profile, kept as your profile is
Account recovery email | Until you remove it or delete your account | Used only to help you get back into your account; never a way to sign in
Account emails we send you (welcome, verification results, receipts, deletion confirmation) | The record is deleted 30 days after sending | The address is used to send and then not kept on the message record; the deletion confirmation goes to the address you give at deletion, once
Notes from our team to you | 1 year after you read them | Shown in the App; kept with the account until then
Appeals and moderation actions | As moderation and report records (above) |
Your wali's advice on an interest | 30 days after the interest closes | Visible only to you and the wali you asked
Undo uses | 30 days | Which interest you undid and when, so the weekly free undo can be counted
Attempts to sign up under 18 | 3 years | A record that an attempt was refused; no date of birth is kept
Requests to reopen a conversation | 60 days |
Phone number change requests | 1 year after decided (7 days if never completed) |
Support requests | Until you delete your account | The messages you sent us and our replies
Plan grants from our team (complimentary access) | Until you delete your account | Who granted it, when, for how long and why
Wali change records | As moderation and report records | Kept when a ward changes wali often, for safety review
The record of when a name was shared in a conversation | As long as the connection (Section 24) |
Legal hold data | Until hold is lifted | Cannot be deleted during active legal hold
Deleting your account also clears, at once, your madhhab, whether you want children, how you hope to live after marriage, and your answers to "What matters at home"; and it removes, at once, your profile links, the profiles you started or claimed, the cards about you or shared by you in Rishta Groups and the introductions they carried, your introduction requests, your group memberships and announcements, your matchmaker record, suggestions and plan status, and your profession and degree badges.
27. User Rights — GDPR, CCPA, and Applicable Law
27.1 Rights Available to All Users
Regardless of your jurisdiction, you have the following rights with respect to your personal data:
Right to Access: you may request a copy of the personal data we hold about you. Your copy of your data includes your Rishta Groups, the cards shared about you, introductions you asked for, links and profiles you started, what you wrote in Families talk, the steps and checklist items you marked, your answers to "What matters at home", your badges and, if you are a matchmaker, your matchmaker record. It never includes another member's name, photograph or messages.
Right to Correction: you may request correction of inaccurate or incomplete data
Right to Deletion: you may request deletion of your personal data, subject to the limitations in Section 24 and our legal obligations
Right to Portability: you may request a machine-readable copy of your personal data
Right to Opt Out of Marketing: you may opt out of marketing communications at any time
27.2 Additional GDPR Rights (EEA and UK Users)
If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and applicable UK data protection law:
Right to Restrict Processing: you may request restriction of processing of your data in certain circumstances
Right to Object: you may object to processing based on legitimate interests
Right to Withdraw Consent: where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing
Right to Lodge a Complaint: you have the right to lodge a complaint with your local data protection supervisory authority
Legal bases for processing under GDPR include: (a) contract performance (operating your account); (b) legitimate interests (fraud prevention, safety, platform improvement); (c) legal obligation (compliance with law); and (d) explicit consent (biometric data, sensitive religious data, marketing).
27.3 California Privacy Rights — CCPA
California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
Right to Know: you may request disclosure of the categories and specific pieces of personal information collected about you
Right to Delete: you may request deletion of your personal information, subject to certain exceptions
Right to Correct: you may request correction of inaccurate personal information
Right to Opt Out of Sale: we do not sell personal information, but you may submit a request to confirm this
Right to Non-Discrimination: we will not discriminate against you for exercising your California privacy rights
In the preceding twelve months, we have collected the following categories of personal information as defined by CCPA: identifiers; biometric information; internet and network activity; geolocation data; and inferences drawn from the above. We do not sell personal information. Only after your choice (the cookie banner's "Analytics and ads" on the website, or "Allow" on Apple's tracking prompt in the App), we "share" (as California defines it) a scrambled copy of your email with Meta for advertising Wali Marriage, as Section 25.6 describes. You can opt out at any time ("Your privacy choices" on the website or in Settings, or by writing to us), and we honour Global Privacy Control as an opt-out.
27.4 How to Exercise Your Rights
You can download a copy of your data yourself in the App (Settings, Download my data): we email you a link to a machine-readable file of your account, profile, answers, photos, interests, conversations and settings, which works for 7 days. It never includes another person’s private details; the people you spoke with appear as “them”. To exercise any other right, contact us at izharbid@walimarriage.com with your request. We will respond within: (a) 45 days for CCPA requests (extendable by an additional 45 days with notice); (b) 30 days for GDPR requests (extendable by up to two additional months with notice). We may require verification of your identity before processing your request.
28. Children’s Privacy and COPPA Compliance
28.1 Prohibition on Minors
The App is strictly prohibited for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take immediate steps to terminate the account and delete the associated data.
28.2 COPPA Compliance
While the App is not directed at children under 13 within the meaning of the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., we comply with COPPA by prohibiting use of the App by anyone under 18, and by promptly deleting any data collected from such individuals upon discovery.
28.3 Reporting Suspected Underage Users
If you have reason to believe that a user of the App is under 18 years of age, please report this immediately through the App’s reporting system or by contacting us at izharbid@walimarriage.com. We will investigate and take appropriate action, which may include account termination and referral to appropriate authorities.
28.4 Parental or Guardian Actions
If you believe your child under 18 has created an account using your information or otherwise, contact us immediately at izharbid@walimarriage.com. We will promptly terminate the account and delete all associated data upon verification of the report.
29. Security Practices and Disclaimer
29.1 Security Measures
We implement reasonable and appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include: encryption of data in transit using TLS; encryption of data at rest for sensitive data categories including government ID data and biometric data; access controls restricting data access to authorized personnel; audit logging of access to sensitive data; and regular security assessments.
29.2 Security Disclaimer
NO SECURITY SYSTEM IS IMPENETRABLE. WE CANNOT GUARANTEE THE SECURITY OF OUR SYSTEMS OR YOUR DATA. BY USING THE APP, YOU ACKNOWLEDGE THAT YOU PROVIDE YOUR PERSONAL INFORMATION AT YOUR OWN RISK. IN THE EVENT OF A DATA BREACH, WE WILL NOTIFY AFFECTED USERS AS REQUIRED BY APPLICABLE LAW. SEE SECTION 34 FOR OUR BREACH NOTIFICATION POLICY.
30. International Data Transfers
Your information may be stored and processed in the United States or in any other country where we or our service providers maintain facilities. By using the App, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws than your home country.
For transfers of personal data from the European Economic Area or United Kingdom to countries not recognized as providing adequate data protection (including the United States), we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms as required by applicable law.
Didit may process the images and data from your identity check in the European Union, through its Spanish affiliate Didit Identity Spain, S.L. (Barcelona), under the European Commission's Standard Contractual Clauses.
31. Automated Decision-Making and AI Systems
We use automated systems to make or assist in making certain decisions that affect your use of the App. Photographs are checked by an automated image-moderation service (Sightengine, Section 25.3) and voice notes are turned into text by an automatic transcription service (Groq, Section 25.3); the checks on messages themselves are fixed rules, not artificial intelligence. These automated systems are used to:
Block messages that contain contact details (phone numbers, email addresses, social-media handles and links, including spelled-out forms) before they are delivered, and photographs that our image rules do not allow
Show a profile lower in discovery, without telling anyone, while it has open reports from two or more different people in the last 30 days, or a warning or restriction in the last 90 days. One person’s report alone never does this. The report itself is always reviewed by a person
Apply the eligibility rules that decide whether a profile can be shown in discovery (for example, an incomplete, hidden, restricted or suspended profile is not shown), and then order the eligible profiles for each viewer. Discover shows people one at a time, in an order our system works out for each viewer. The order considers how well two people fit each other's stated preferences (the filters each person saves apply in both directions, so you are shown only to people whose filters you also fit), how complete a profile is and whether identity or a wali is verified (having no wali never counts against anyone), roughly how recently someone used the App, measured by the day, approximate distance, whether someone has had few chances to be seen, and how many interests are already waiting for them. New members are shown a little more often in their first days. Nothing about this order is ever shown to anyone: there is no score, rank, activity or online status, and no count of who saw you. Someone you pass on moves to the end of your list, and after three passes stops appearing. To do this we keep a private record of which profiles were shown to whom and roughly how long each stayed on screen (Section 26). No payment affects this order, and we do not currently sell boosts or any paid placement
Put reports about the same account higher in our moderation queue when more than one person has reported it
Some of these decisions may significantly affect your access to the App’s features, including reducing your visibility in discovery or restricting your ability to send requests. These automated decisions are not solely determinative — human reviewers are involved in consequential decisions such as account restrictions and bans.
If you are located in the EEA or UK, you have the right under GDPR Article 22 to not be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects. Where automated decision-making does significantly affect you, you may request human review of the decision through our appeals process as described in the App.
32. California Privacy Rights — Supplemental Disclosures
In addition to the rights described in Section 27.3, California residents are entitled to the following information under the Shine the Light Law (Cal. Civ. Code § 1798.83) and the California Online Privacy Protection Act (CalOPPA):
We do not disclose personal information to third parties for their own direct marketing purposes without your consent
California residents may request information about categories of personal information shared with third parties for direct marketing purposes by contacting izharbid@walimarriage.com
Under the California Consumer Privacy Act, you may designate an authorized agent to make requests on your behalf. We require authorized agents to provide written proof of authorization
Do Not Track: our App does not currently respond to Do Not Track browser signals because no uniform industry standard for such signals has been adopted for mobile applications. If such a standard is adopted, we will update this policy.
33. Texas and Illinois Biometric Data — Supplemental Disclosures
33.1 Illinois (BIPA)
If you are an Illinois resident, the following disclosures apply pursuant to the Illinois Biometric Information Privacy Act (740 ILCS 14/):
We have a publicly available written policy establishing a retention schedule and guidelines for permanently destroying biometric data: Section 21.4A, also published on its own at walimarriage.com/biometric-policy
We will not sell, lease, trade, or profit from your biometric data
We will not disclose your biometric data without your consent except as described in Section 21.5
You have the right to bring a private action under BIPA for violations of this Section
33.2 Texas (CUBI)
If you are a Texas resident, the following disclosures apply pursuant to the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001 et seq.):
We capture biometric identifiers for the purpose of identity verification
We do not sell, lease, or disclose biometric identifiers to third parties except as described in Section 21.5
We store biometric identifiers using reasonable security measures
We destroy biometric identifiers within the retention period specified in Section 21.4
34. Data Breach Notification Policy
In the event of a data breach that compromises the security of your personal information, we will:
Investigate the breach and take appropriate steps to contain and remediate it
Notify affected users without unreasonable delay, and within the time frames required by applicable law (e.g., within 72 hours under GDPR; within 30 days under applicable U.S. state laws)
Notify applicable regulatory authorities as required by law
Provide affected users with information about: the nature of the breach; the categories of data affected; the likely consequences of the breach; the measures we have taken; and steps you can take to protect yourself
For breaches involving biometric data, comply with any additional notification requirements under applicable state biometric privacy laws
35. Changes to This Privacy Policy
We may update this Privacy Policy at any time. We will provide notice of material changes by posting the revised policy in the App with an updated effective date, and by notifying you through in-app notification or email. If you continue to use the App after the effective date of the revised policy, you are deemed to have accepted the changes. If you do not agree to the revised policy, you must discontinue use and delete your account.
See Part IV of this document for the in-app implementation specification describing how material changes to this Privacy Policy are presented to the user for re-acknowledgment, including scrolling, the acknowledgment checkbox, and the acceptance receipt.
36. Contact and Data Protection Officer
For all privacy-related inquiries, rights requests, data breach reports, or questions about this Privacy Policy, contact us at:
Privacy / Legal Email: izharbid@walimarriage.com
Mailing Address: Wali Marriage LLC, 9155 Beloit Avenue, Bridgeview, Illinois 60455
36.1 Data Protection Officer
Wali Marriage LLC has not designated a formal Data Protection Officer at this time. Until a DPO is appointed, all GDPR-related inquiries, access requests, correction requests, deletion requests, and complaints should be directed to izharbid@walimarriage.com. The Company commits to appointing a qualified Data Protection Officer before the App is made available to users located in the European Economic Area or the United Kingdom.
36.2 EU / UK Representative
Wali Marriage LLC will appoint a Representative in the European Union and a Representative in the United Kingdom, each pursuant to Article 27 of the applicable GDPR, before the App is made available to users located in those regions. Until such Representatives are appointed, EEA and UK users should direct their inquiries to izharbid@walimarriage.com. The names and contact details of the appointed Representatives will be published in this Section when available.
36.3 Complaints to Supervisory Authorities
If you are an EEA or UK user, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with applicable data protection law. For EU users, the lead supervisory authority will be determined based on our establishment and the nature of the complaint.
Final Acknowledgment
BY USING THE WALI APP, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THESE TERMS OF SERVICE AND PRIVACY POLICY IN THEIR ENTIRETY, INCLUDING THE MANDATORY ARBITRATION PROVISION (SECTION 15), CLASS ACTION WAIVER AND JURY TRIAL WAIVER (SECTION 16), BIOMETRIC DATA COLLECTION CONSENT (SECTION 21), CHAT PERMANENCE POLICY (SECTION 24), WALI ACCESS DISCLOSURE (SECTION 23), AND COMMUNITY GROUP DISCLOSURES (SECTION 23.4 AND TERMS SECTION 7.5).
Effective Date: April 20, 2026 — Wali Marriage LLC