MazelMeet Privacy Notice

1. Information we collect

We collect account and profile information needed to operate the service, including sign-in details, name, age eligibility, language, city, profile fields, photos, prompts, messages, community activity, reports, blocks, support conversations, consent choices, security records, and device or network information. Romance features may involve Jewish identity, beliefs and observance, relationship preferences, family plans, interview answers, and matching inferences under the separate Sensitive Information Consent.

If you separately choose identity verification, the app captures the front and back of one government-issued identity card, a live photo of you holding the same card, and a short live video in which you keep your face and the card visible, tilt the card, and say a randomized phrase. The raw files are temporarily stored in private object storage. MazelMeet does not extract or store the document number and does not create face geometry, a reusable face template, a voiceprint, or an automated biometric comparison.

2. Identity review purpose and limits

Trained reviewers with current city scope and fresh high-security access may compare the four captures with the current profile-photo snapshot to decide identity, adult age eligibility, account uniqueness, or whether new evidence is required. Client software cannot approve a member. A suspected minor remains unverified and the evidence fails closed under the documented safety process.

This human review can identify visible mismatches and signs of reuse, but it cannot guarantee that a document is authentic or detect every alteration. Suspected altered, borrowed, reused, or mismatched documents are rejected and may be escalated for safety review. Identity evidence is never used to infer or verify religion or Jewish status. Community-purpose and Jewish self-attestation are separate from identity review.

3. Use and disclosure

We use information to provide authentication, matching, messaging, community features, safety, support, billing, service communications, and legal compliance. Identity files are not shown to members, businesses, sponsors, or advertisers and are not used for matching or advertising. Review access is time-limited, logged, and restricted. Reviewer policy prohibits downloading, copying, photographing, or recording evidence, although no technical system can guarantee that a person cannot take an external screenshot.

4. Service providers and transfers

Supabase provides authentication, database services, Edge Functions, and private object storage. Apple and enabled sign-in providers support account access. Other processors handle only the enabled services described in this Notice and under restricted contracts. The manual identity review described here is performed by authorized MazelMeet reviewers and does not send identity media to an external identity-verification provider. Information may be processed in the United States and other locations where contracted providers operate, subject to applicable safeguards.

5. Security, retention, and deletion

Identity upload intents are caller-bound, single-use, randomized, and short-lived. The server binds immutable storage object identifiers and SHA-256 evidence hashes before submission, rejects duplicate captures, and records access and decisions in restricted audit logs. These controls reduce replacement and replay risk but do not prove document authenticity.

Unsubmitted sessions expire within 24 hours. Submitted raw identity files are scheduled for deletion within seven days and never later than 30 days after a decision, unless an exact object is under a documented legal or safety hold. Withdrawal before a decision cancels active work and starts cleanup. Narrow security, consent, audit, dispute, and legal records may remain for their documented periods.

6. Choices and rights

Identity verification is optional unless a clearly identified feature requires verified status. You may withdraw identity-verification consent in the Privacy Center before a decision and may request a new review after rejection or ask support about an outcome. Depending on location, you may request access, correction, deletion, portability, restriction, objection, or an appeal. Contact [email protected]. We do not sell personal information or share it for cross-context behavioral advertising.

7. Adults only and changes

MazelMeet is for adults age 18 and older. If you believe a child provided information, contact [email protected]. A material change receives a new version and requires renewed consent before protected processing continues.