Privacy Policy

Last Updated: 9 July 2026

This Privacy Policy explains how MUSNIKAH LIMITED ("MusNikah", "we", "us", or "our") collects, uses, shares, and protects your personal data when you use the MusNikah mobile application and website (together, the "Service"). We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

• Company: MUSNIKAH LIMITED
• Company Number: 16991578
• Contact Email: privacy@musnikah.com

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@musnikah.com.

2. Children's Privacy & Age Restrictions

MusNikah is intended solely for users who are 18 years old or above. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a user is under 18, we will immediately freeze the account and initiate a complete data purge of all personal information associated with that account.

If you believe a person under 18 has provided us with personal data, please contact us at privacy@musnikah.com so we can take appropriate action.

3. Personal Data We Collect & How We Use It

We collect and process personal data under one or more lawful bases permitted by UK GDPR (Article 6), including: consent, contract performance, legitimate interests, and legal obligations. Below we describe each category of data we collect.

A. Account Creation & Authentication

When you register for a MusNikah account, we collect your name, email address, phone number, and date of birth. We use this data to create and manage your account, verify your identity, and communicate with you about the Service. Authentication tokens are managed via Google Firebase Authentication and, on iOS devices, via Apple Sign-In.

B. Profile Media & Content

You may upload photos and other media to your profile. All uploaded media is encrypted at rest using AES-256 encryption and stored on AWS S3. Access to your media is controlled via time-limited signed URLs only — no permanent public links are ever generated.

C. Identity Verification (KYC)

To ensure the safety and integrity of our community, we use Didit for Know Your Customer (KYC) identity verification. During this process, you may be asked to submit identity documents and biometric data (such as a selfie for facial matching).

KYC biometric data is not retained on MusNikah servers. All biometric processing is handled by Didit in accordance with their own privacy policy, and verification results (pass/fail status) are returned to us without retaining the underlying biometric data on our infrastructure.

D. Premium Subscriptions & Payments

Premium subscriptions are purchased through in-app purchases via the Apple App Store or Google Play Store. Payment processing is handled entirely by Apple or Google — we do not collect or store your credit or debit card details on our servers. We receive only a transaction reference and subscription status via RevenueCat, which we use to manage and validate subscription entitlements across platforms.

E. Video & Voice Communications

MusNikah offers peer-to-peer video and voice calling via Daily.co. Live calls are never recorded or stored — they are conducted via peer-to-peer WebRTC connections. We do not have access to the content of your calls.

F. Technical & Usage Data

We collect technical data such as device type, operating system, app version, IP address, and usage analytics to improve the Service, diagnose issues, and ensure security. Anonymised crash diagnostics are collected via Google Firebase Crashlytics.

4. Cookies, Mobile Identifiers & In-App Tracking

Our website may use essential cookies to maintain your session and preferences. The mobile application may use mobile advertising identifiers and device tokens for push notification delivery via Google Firebase Cloud Messaging.

We do not use third-party advertising trackers or sell your data for advertising purposes. Any analytics data collected is used solely to improve the Service and is processed in accordance with UK GDPR.

5. Automated Content Moderation

To maintain a safe environment, we use AWS Rekognition for automated image-safety moderation. This service scans uploaded profile photos to detect and flag inappropriate or unsafe content. Moderation decisions are subject to human review where appropriate.

Automated moderation is carried out under our legitimate interest in protecting users and maintaining community standards. You have the right to request human review of any automated decision that affects you.

6. Data Sharing and Third-Party Service Providers

We share personal data with third-party service providers only to the extent necessary to operate the Service. Each provider processes data solely on our behalf and in accordance with data processing agreements. We do not sell your personal data.

7. Data Security & Encryption

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

• All media files are encrypted at rest using AES-256.
• Media access is restricted to time-limited signed URLs only.
• All data in transit is encrypted using TLS 1.2 or higher.
• Live video and voice calls are never recorded or stored and are conducted via peer-to-peer WebRTC.
• KYC biometric data is not retained on MusNikah servers.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.

8. International Data Transfers

Some of our third-party service providers may process your data outside the United Kingdom. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (UK IDTAs); or
• UK Addendum to EU Standard Contractual Clauses (EU SCCs).

These safeguards ensure that your data receives a level of protection equivalent to that provided under UK GDPR, regardless of where it is processed.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When you delete your account:

• Your profile data, media, and conversations will be removed in accordance with our deletion schedule.
• Certain data may be retained for a maximum of 24 months post-deletion for legal, regulatory, or fraud prevention purposes.
• Anonymised and aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

10. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data.
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Rights related to automated decision-making — request human review of automated decisions that significantly affect you.

To exercise any of these rights, please contact us at privacy@musnikah.com. We will respond to your request within one month, as required by UK GDPR.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

• Website: https://ico.org.uk
• Telephone: 0303 123 1113

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via the app or by email before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. The "Last Updated" date at the top of this page indicates when the policy was most recently revised.

For any privacy-related queries, please contact us at privacy@musnikah.com.