MazelMeet Privacy Notice

1. Information we collect

We collect account and profile information needed to operate the service, including your name, sign-in details, age eligibility, language, city, coarse matching location, profile fields, photos, prompts, messages, community activity, reports, blocks, support conversations, consent choices, security records, and device or network information. We do not request precise device location or phone contacts.

If you choose romance features, we may collect Jewish identity, beliefs and observance, relationship intentions, partner and gender preferences, family plans, lifestyle details, interview answers, and summaries or inferences derived from those answers. These details are covered by the separate Sensitive Information Consent.

2. Identity verification and biometric processing

If you choose identity verification, Persona collects and evaluates a government identity document and an active-liveness capture under its configured inquiry flow. MazelMeet receives an opaque inquiry reference, status, decision, and limited operational timestamps. Persona may process facial imagery or geometry to perform liveness and identity comparison. MazelMeet does not create or store a reusable face template, face geometry, document number, or copy of the government document in its database.

MazelMeet separately collects a photo of you holding the document and a short video in which you speak a randomized phrase. These raw files are stored in a private bucket and are available only to trained, scoped reviewers after high-security confirmation. Reviewers use them with the provider result and selected profile photos. A verification badge is a trust signal, not a guarantee about a person.

Identity verification requires a separate explicit consent before the provider opens. Declining that consent leaves identity verification unavailable but does not by itself close an otherwise eligible account. You can withdraw the identity-verification consent in the Privacy Center. Withdrawal cancels active verification work, revokes provider trust, and schedules raw evidence and the provider inquiry for deletion, subject to a specific legal or safety hold.

3. How we use information

We use information to create and protect accounts, provide the paths and community features you select, prepare and review introductions, support members, deliver enabled notifications, process enabled Apple subscriptions, prevent fraud, verify identity, investigate safety concerns, enforce rules, document consent, and meet legal obligations. Depending on the activity and your location, our basis may be your request, consent, legitimate interests in secure operations, or a legal obligation.

Sensitive profile and interview information is not used for romance matching until you accept the current Sensitive Information Consent. Identity evidence is not used for advertising, matching compatibility, or training a general-purpose facial recognition system.

4. Providers and human review

Supabase provides authentication, database, and private file storage. Persona performs the government-ID and active-liveness inquiry. Apple and RevenueCat handle enabled subscription records. Expo routes enabled push notifications. Cloudflare handles website and protected HQ traffic. Resend handles enabled service email. Anthropic and Voyage AI receive only the limited inputs described in the service when their features, processor terms, retention controls, and member consents are active.

Providers may use information only for the contracted purpose and not for their own advertising. Authorized MazelMeet personnel receive only the information needed for their role. Businesses, venues, sponsors, and advertisers do not receive member contact details, private preferences, identity evidence, or matching data. MazelMeet does not sell personal information or share it for cross-context behavioral advertising.

5. Retention and deletion

Unsubmitted identity sessions expire within 24 hours. Submitted supplemental raw evidence is scheduled for deletion within seven days and never later than 30 days after a decision, unless a documented safety or legal hold applies to the exact object. Persona inquiry redaction is independently queued, retried, and operationally monitored. Provider-event and reviewer-audit records are access restricted, anonymized during account deletion, and removed after a bounded 400-day period.

Account deletion checks and empties every member storage bucket, including identity-verification media, before deleting the profile. A missing bucket, remaining object, active provider purge, or preservation hold makes deletion fail closed and retry safely. Narrow consent, transaction, fraud, security, safety, and legally required records may remain only while the applicable reason continues.

6. Security, rights, age, and contact

We use protected transport, private storage, least-privilege access, short-lived media access, rate limits, audit records, reviewer scope, high-security confirmation, and bounded deletion workers. No system can guarantee complete security.

Depending on where you live, you may request access, correction, deletion, restriction, portability, consent withdrawal, or review of a decision. California residents may also request categories, sources, purposes, recipients, and specific pieces of information and may limit sensitive-information use where the right applies. We verify requests in proportion to their sensitivity and do not discriminate for using a privacy right.

MazelMeet is for adults 18 and older. Contact privacy@mazelmeet.com if you believe a child provided information. Material changes receive a new version and renewed acceptance before protected processing continues.