Privacy

1. Who processes the data

Personal data operator: [to be specified: name, address, TIN]. Person responsible for the processing of personal data: [to be specified: full name/position, email].

Processing is carried out in accordance with the Law of the Republic of Uzbekistan “On Personal Data” [to be specified with a lawyer: applicable legislation].

2. What data we process

Account: phone number, email (optional), password hash (the password itself is not stored), sign-in dates, confirmation of being 18+ and acceptance of the Terms. If the code is delivered via Telegram, the Telegram chat ID.

Profile: name, sex, date, time and place of birth, place of residence, marital status, children and plans for children, education, occupation, languages, interests, the “About me” text, expectations of a future spouse, blood type (optional), photos; the representative’s contact details and the owner’s phone/email for the invitation.

Service data: consents and their dates, requests and payment statuses, chats, reports, the log of administrator actions, IP address, technical cookies.

Blood type is health information. Providing it is optional; by providing it, you give separate consent to its processing [to be specified with a lawyer: procedure for processing special categories of data].

3. Purposes and legal grounds

To create an account, show the profile in matching, explain the choice, enable introductions, accept payment and ensure users’ safety.

Grounds: your consent (the consents of the profile owner), performance of the service agreement, and legal requirements.

4. Who sees what

A draft profile is visible only to its participants (the owner and representatives) and the moderator.

Other users see only the public fields of an active profile. Contact details and the exact time of birth are not shown to anyone other than the profile’s participants and the moderator.

Photos are shown to others as a blurred copy. They are visible clearly to the profile’s owner and representatives, the moderator, and a buyer whose paid selection includes the profile. Any viewing of clear photos by an administrator is recorded in the log.

Photo file metadata (including geolocation) is removed on upload.

5. Disclosure to third parties

Anthropic (the Claude service, USA) and Google (the Gemini service, USA): to assess compatibility and write match explanations, only with the owner’s consent to AI processing. Claude is the primary service; Gemini is the fallback if the primary service is unavailable. For quick compatibility assessment (scores only, no text), TypeSafe (the Jev service, USA) may also be used via OpenRouter (USA). The fields used for matching are transferred without the name, contact details, photos or exact date of birth.

Telegram: to deliver confirmation codes, if you chose to receive the code in Telegram. SMS providers: to deliver codes by SMS — Eskiz.uz (Uzbekistan) for Uzbek numbers, Twilio (USA) for numbers in other countries. Only the phone number is transferred.

The hosting provider where the server and database are located [to be specified: provider and country]. Payment providers, once online payment is connected [to be specified].

Transfer outside the Republic of Uzbekistan is carried out only with your consent and subject to data protection [to be specified with a lawyer].

6. Where the data is stored

The legislation of Uzbekistan requires that the collection, systematization and storage of personal data of citizens of the Republic of Uzbekistan be carried out in databases located in the territory of the Republic of Uzbekistan and registered in the State Register of Personal Databases. [to be specified: server location and database registration before launch].

7. Retention periods and deletion

You can delete your profile, as well as your account, in the “Account” section. The profile, photos and consents are deleted immediately; request records are retained in anonymized form, as they are needed to reconcile incoming payments.

Retention periods for backups, the action log and chats: [to be specified].

8. Your rights

To know whether your data is held and what it consists of, to access it, to correct it, to withdraw consent and to demand its deletion, and to appeal against the Operator’s actions to the competent authority or a court.

For requests, write to the person responsible for data processing: [to be specified: email]. A response will be provided within the period established by law.

9. Security and cookies

Passwords are stored as bcrypt hashes, sign-in attempts are rate-limited, administrator sign-in is protected by a second factor, and access to photos is checked on every request.

The website uses only necessary cookies: the sign-in session and the selected language. There are no advertising or analytics cookies.