This policy explains what Shia Rishta collects, why, how it is protected, and what control you keep over it. It is written to be read, not to be skipped.
Your email address, a one-way hashed password, display name and authentication tokens. Passwords are hashed with bcrypt and cannot be read back by us or anyone else. One-time email-verification and password-reset links are stored only as SHA-256 hashes, so a database leak cannot be replayed as a valid link.
Your email address, phone number and contact details are never shown on your profile or to another member. Contact exchange happens only by mutual agreement.
You choose who sees your photos: everyone, only after mutual interest, or only after matching. The default is the most private of those. Photos uploaded for identity verification are encrypted before they touch the disk and are readable only by administrators reviewing them.
A wali or guardian link can be revoked by the member at any time, permanently. Revocation takes effect immediately and cannot be undone by us.
Sensitive data is encrypted at rest with AES-256-GCM. Access tokens are revocable, and server-side role checks enforce who may read or change what.
You can request a copy of your data, ask for corrections, or ask us to delete your account. Use the contact form and we will action it.
Questions, privacy requests or takedown requests go through our contact form, which reaches the operations team directly.