Privacy Policy

Last updated: 2026-10-23

toNikah (“we”, “us”, or “our”) operates tonikah.com, the toNikah web application, and related Android and iOS mobile applications (collectively, the “Platform”).

We respect your privacy, handle personal data responsibly, and align with Islamic principles of trust, modesty, transparency, and protection of dignity. We do not sell personal data, track users across third-party sites/apps for advertising, or use interest-based advertising. Any optional analytics or marketing features are used only with your explicit consent, where required by law.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you use the Platform. It complements our Cookie Policy.

1. Who We Are (Data Controller)

  • Web Hive UG (Germany) – Global platform operator and primary Data Controller
  • Enumeration Technologies Pvt. Ltd. (India) – Payment collection partner for users in India

Contact: privacy@tonikah.com

2. Who This Policy Applies To

This applies to registered users, visitors, and Platform administrators. The Platform is for adults 18+ only. Age is collected based on the date of birth you provide. We may request additional verification where required or if we suspect a minor. We do not knowingly collect data from minors; suspected cases may lead to account suspension.

3. Personal Data We Collect

A. Account & Identity

  • Name, username, email, phone (optional/verified), date of birth (age or age range shown publicly), gender
  • Profile photos (private photos obscured for other users unless you reveal them)
  • Selfie/ID documents (optional for verification badge)

B. Profile & Preferences

  • Location (city/country; precise coordinates if enabled)
  • Nationality/ethnicity, languages, education/profession
  • Religious practice/faith details, marriage intentions, partner preferences
  • Hobbies, bio, appearance

C. Communications

  • Messages/chats, shared media, support requests

D. Technical/Usage

  • IP address, device/browser info, login history, cookies/local storage, push tokens

Android/iOS apps store login credentials in secure device storage and may cache profiles, messages, inboxes, images, audio, offline messages, preferences, and an installation identifier in app storage. Camera, photo, microphone, location, and notification access is requested for relevant features through device permissions. You can manage permissions in device settings. App cleanup, clearing storage, and uninstalling remove applicable local data; secure credentials are managed separately by the operating system. Legal pages, login, or checkout opened in a browser may use browser cookies.

E. Moderation & Safety Data

  • Profile text, uploaded images and media submitted for automated or human review; moderation status, reason codes, automated assessments, technical processing records, reports, and human-review decisions

Public vs Private Information

  • Publicly visible (to other users)Username, age (or age range), city/country, profile basics (e.g., headline, bio summary), photos you set as public
  • Private (not visible to others)Email/phone, precise location coordinates, verification documents, payment info, device/technical logs, private photos

4. Why We Process Personal Data

  • Provide matchmaking, profiles, messaging
  • Verify identity/safety/fraud prevention
  • Process payments/subscriptions
  • Support, legal compliance, service communications
  • Optional marketing (opt-in only)
  • Analyze profile text, images, and media for safety, policy enforcement, fraud prevention, and profile integrity

5. Legal Bases

  • Contract: Core service provision
  • Consent: Optional features (marketing, verification, precise location) and sensitive/special category data (e.g., religious beliefs, biometrics for verification)
  • Legal obligation: Compliance/law enforcement
  • Legitimate interests: Security, fraud prevention (balanced against rights)

We do not make decisions based solely on automated processing that produce legal or similarly significant effects without human involvement.

Content moderation: We rely on contractual necessity and legitimate interests to operate a safe service and enforce our rules. Authorized moderators may review flagged or uncertain content. We do not use automated moderation alone to make decisions that produce legal or similarly significant effects.

You can remove or edit sensitive fields at any time. Where you choose not to provide them, core service remains available (except where required for a specific feature).

6. Payments

No card details stored. Processed by third-party providers (Stripe, Razorpay, PayPal, potentially PayU). We retain transaction identifiers/invoices for accounting/legal compliance. Enumeration Technologies Pvt. Ltd. acts as our payment collection partner (and merchant of record where applicable) for Indian users.

7. Storage & Transfers

Primary storage in the EU (e.g., Frankfurt region). India users’ payment records may be processed/stored in India. International transfers use Standard Contractual Clauses (SCCs) or other safeguards for adequate protection.

8. Third Parties

Shared only as necessary with processors bound by law:

  • Google: Login (OAuth), Maps/Places for location features
  • Cloud infrastructure and verification-related services (e.g., SMS delivery, identity checks)
  • Cloudflare: image storage/delivery (cdn.enerig.com)
  • OpenAI processes profile photos for automated safety checks; Google Gemini may process profile text when enabled. Submitted content and necessary request data are sent to the configured provider. Checks can flag unsafe content, contact details, copied images, or apparent visual presentation inconsistent with the profile. This is not identity or gender verification. Provider retention and international processing depend on the applicable service terms and settings; we do not promise zero retention. Authorized moderators review uncertain or reported content. Contact privacy@tonikah.com for provider and transfer information. AI checks of profile photos and Headline, Bio, Company and About Partner text require separate account-wide permission. Without it, new submitted content remains unpublished pending admin review. You can change this permission in Data & privacy; changes apply to future checks.
  • Twilio and WhatsApp/Meta deliver verification codes. Your WhatsApp number, code/message content, and delivery metadata are processed for delivery and abuse prevention. Your number is not displayed to other members. Requesting a verification code does not subscribe you to marketing. These services may process data internationally under their applicable terms and privacy notices.
  • Google Firebase, Expo, and Apple notification services, depending on the device and delivery route, process push tokens and notification payloads when notifications are enabled. Notification content may appear on your lock screen according to device settings.
  • Vercel Speed Insights, when enabled on web deployments, measures page performance and technical request information. This is separate from advertising. Applicable disclosures and consent requirements must be satisfied before enabling non-essential measurement.
  • Payment processors: Stripe, Razorpay, PayPal, PayU
  • Email delivery services

9. Data Retention

Account deletion disables the account and makes its conversations unavailable to both participants on our servers. Entire conversations, messages and associated chat attachments are scheduled for deletion from active storage at the next successful cleanup run after seven days. Failures are retried. Necessary evidence, legal holds, payment/security records and backups may have separate retention periods. Already downloaded or cached recipient copies cannot be remotely erased. Deleted-account name/email snapshots are normally anonymized after 90 days. Other data is retained only as needed for the stated purposes or law.

Rejected images are removed from the active profile and active storage, with cleanup retries if needed. Reported-image evidence may instead be kept in restricted storage for investigations and disputes, normally for 90 days under the default retention setting, then scheduled for deletion. Moderation decisions and audit records are retained while needed for review, repeat-abuse prevention, disputes, or legal obligations. Backups and provider-held data follow their own applicable retention cycles. Contact privacy@tonikah.com for the schedule applicable to your data.

Verification codes expire after five minutes; expiry is not a promise of immediate data deletion. We store a protected code digest, attempt and timing data, and abuse-prevention records. Successful challenges are consumed, and the verified number and verification date remain with the account until changed or deleted, subject to justified legal or safety retention. Expired or unsuccessful challenge records may remain until replaced by a new request or removed with the account. Hashed abuse-limit identifiers use 24-hour windows and are eligible for automatic database expiry afterward.

Under the default cleanup settings, session IP addresses and user-agent data are anonymized 30 days after session expiry or revocation; deleted-account name/email snapshots are anonymized 90 days after account deletion. These are scheduled cleanup periods, not immediate deletion guarantees. Applicable legal records and backups have separate retention criteria.

10. Your Rights

Access, correct, delete account/data, withdraw consent (as easy as giving), object/restrict processing, portability (GDPR). We respond within 30 days (or as required by law). EEA/UK users may complain to supervisory authorities. Contact privacy@tonikah.com.

You may contact privacy@tonikah.com to question a moderation decision or exercise an applicable data-protection right. We may retain information where necessary for safety, fraud prevention, disputes, or legal obligations.

10A. Region-Specific Privacy Rights

We apply one global privacy standard, with additional rights where local law gives you extra protections. These sections explain how we handle requests from users in the EEA/UK, India, the UAE, and other regions.

EEA/UK users (GDPR/UK GDPR)

  • You may request access to personal data we hold about you, including categories of data, purposes, recipients, retention periods, and available safeguards for international transfers.
  • You may request correction of inaccurate data and completion of incomplete profile or account data.
  • You may request deletion of your account and personal data, subject to legal obligations, safety investigations, fraud prevention, payment/accounting records, and limited backup retention.
  • You may withdraw consent for optional processing such as marketing, precise location, optional verification, push notifications, and other consent-based features. Withdrawal does not affect earlier lawful processing.
  • You may object to or request restriction of processing where applicable, including processing based on legitimate interests, and you may request data portability for data you provided to us.
  • You may complain to your local data protection authority. If you are in Germany, you may contact the competent state supervisory authority.

India users (Digital Personal Data Protection Act, 2023)

  • You may request information about the personal data we process and the purposes for which it is processed.
  • You may request correction, completion, updating, or deletion of personal data as permitted by law.
  • You may withdraw consent for consent-based processing, with consequences explained where a feature depends on that data.
  • You may raise privacy grievances through privacy@tonikah.com. We will review them in accordance with applicable Indian law.
  • You may nominate another person to exercise your rights where applicable under Indian law.

UAE users (UAE Personal Data Protection Law)

  • You may request access to, correction of, or deletion of your personal data where applicable.
  • You may object to or restrict certain processing where applicable, especially where processing is not required to provide the service or comply with law.
  • You may withdraw consent for consent-based processing, without affecting earlier lawful processing.
  • We may store or process data outside the UAE using cloud, CDN, payment, email, notification, and security providers. We use contractual and technical safeguards for such transfers.
  • Arabic privacy information is provided through the Arabic version of this policy where available in the Platform language selector.

To exercise rights, email privacy@tonikah.com. We may ask you to verify your identity before acting on a request. Some requests may be limited if we must keep data for legal, safety, fraud-prevention, dispute, tax, payment, or backup reasons.

11. Security

Passwords hashed. Data encrypted in transit (TLS) and at rest where appropriate. Secure tokens, access controls, monitoring. No system is 100% secure.

12. Changes

Updates posted here; significant changes notified via Platform/email.

13. Contact

privacy@tonikah.com

toNikah — Operated by Web Hive UG (and Enumeration Technologies Pvt Ltd. for Indian payments)

Privacy Policy | toNikah