- What we collect
- Selfie and ID
- Who sees what
- How we use it
- Providers
- Retention
- Your rights
- Adults only
Last updated 14 October 2026
What we collect
- Account: your phone number, or your Apple or Google account, used to sign in.
- Profile: first name, date of birth (others see only your age), gender, photos, and the answers you give about faith, values, family plans, marital history, interests and prompts. Some of these are sensitive personal data; we collect only what matching needs.
- Location: your city and a rounded location. We never show your exact location to anyone.
- Messages and photos you send in chat.
- Device: a push notification token, and a hashed device identifier used to keep removed members from returning.
Selfie and ID checks (biometric data)
With your consent at the selfie step, our verification provider, Didit, compares your selfie with your main photo and checks it is a live person. If two members report your account, you may be asked to confirm your ID the same way. Your selfie, face data and ID documents are processed by Didit and are not stored in our database; we keep only the result. [Lawyer to add the biometric retention and deletion schedule required by Illinois BIPA.]
Who can see what
- Other members see your profile, your age and your rounded distance. Your photos are blurred unless you make them public to verified members or share them with a specific match.
- Your wali, if you invite one, can read your conversations and see your matches’ profiles and the photos you can see. A match’s wali can see the same about you in that conversation, and you’ll always see a notice when a wali is present.
- Our moderators can read a reported or flagged message and the messages around it, review photos, and see the reports about an account.
- Islamic centers in Community Matrimony never receive your data from us. A biodata PDF is made on your phone and is only sent if you send it yourself.
How we use it
- To create your introductions and compatibility score.
- To keep members safe: verification, scam warnings on messages, reports, and stopping removed members from returning.
- To send the notifications you’ve allowed. Message text is never put in a push notification.
We don’t sell your data or use it for advertising.
How long we keep it
- When you delete your account, or an account is removed, its profile, photos, messages and matches are deleted 30 days later.
- For removed accounts we keep hashed signals (such as phone number and device identifier) so they can’t sign up again, plus moderation records.
Your choices and rights
- Edit your profile, change photo visibility, pause, turn off your wali’s access or delete your account in the app.
- Ask for a copy of your data or a correction at privacy@halfmoonmatch.com.
Adults only
Halfmoon is not for anyone under 18, and we delete accounts we find belong to minors.