Your privacy, in plain words

Your profile is never listed on the open internet. Search engines are told not to index shared pages, and the addresses of those pages are long random strings that can't be guessed or enumerated.

A shared page exists only once you create it. You can hold several links at once — one per shadchan, if you like — and each one carries its own settings: whether it shows your last name, your photos, your family, your siblings, your references, your contact person, your phone number, your email; how someone should get in touch; and when the link should stop working.

Taking a link down, or letting it expire, stops it on the spot — the page and its PDF both. Other links are unaffected. You can also swap a link for a fresh address if you sent the old one somewhere you regret.

One honest caveat: switching off your last name removes it from the heading. Names you typed into other fields — a father's name, a reference — still appear if you left those sections switched on.

We count how many times each of your links has been opened, when it was last opened, and roughly where the click came from (“whatsapp.com”, “direct”). We do not record IP addresses, device fingerprints, or anything else that identifies a reader — not for you, and not for us.

Photos go into private storage, never a public folder. Before anything is stored we re-encode the image and strip its metadata, so the location and camera details your phone attaches don't travel with it. Photos are served through short-lived, single-use addresses, and only to people entitled to see them.

You can download everything your account holds — profile, references, links and their counts, photo records, consents, imports, what you kept from conversations and changes connected apps made — as a JSON file, at any time, from Settings.

Closing your account takes every link down immediately, then waits 30 days before erasing anything, so you can change your mind. After that your profile, photos, references, links and view history are deleted for good.

When you import a résumé, we read it and show you what we read; nothing goes on your profile until you check it and press Apply. What was read is removed once you apply or discard it.

You can connect Claude or ChatGPT to your account. What you say in those conversations is held by Anthropic or OpenAI under their own terms; it reaches us only when you or the app send it. You choose, when you connect, what the app may do: send things for your review, read your profile as you wrote it, or change it. If you let it change your profile directly, every change is listed in Settings with an Undo, and we keep that list for 90 days. You can disconnect an app at any time.

What a conversation understood about you is kept only after you review it item by item. It is private unless you mark an item for your shadchan, and an impression you haven't confirmed is never shown to anyone but you. Discussion notes you keep are yours alone. All of it is in your data download, and you can review and delete it from “What's stored from your conversations”.

Introductions and matchmaker-reviewed matches and the guided conversation are designed but not built. When they arrive, this page will say plainly what each of them shares and with whom — before you are asked to use them.

The formal legal privacy policy is being finalised with counsel and will be published here before public launch. It will not contradict this page.