Privacy Policy
Last updated: 18.10.2026.
Who is responsible
Niyyah is run by Orhan Bajramović, who is the controller of your personal data. For anything in this policy, write to [email protected].
What we collect
What you give us: your name, date of birth, gender, email address, city, photos, and your answers on the profile (such as religious practice, marital status, children and plans for marriage). What arises as you use the app: likes, matches, messages and voice messages, community posts and comments, coin purchases, reports you file, and technical data such as your device type, app version and a notification token. If you join the waitlist on our website, we keep only your email address and language: to tell you when Niyyah launches and to give you a welcome gift if you sign up with the same address. We delete it at the latest 12 months after the launch email.
Why we use it
To run the service you signed up for: showing you suitable profiles, delivering your messages, keeping the community safe and moderated, processing purchases, and answering you when you write to us. We do not build advertising profiles from your data, and we do not use your messages to target you with anything.
Photos and the face check
Profile photos appear as soon as you add them; moderators remove photos that are reported and break the guidelines. For the face check you take a live photo, which a person at Niyyah compares with your profile photos. The live photo is never published. It is stored encrypted and kept only while your account carries the verified badge, so a later check has something to compare with; it is deleted when the check is rejected, when the badge is removed, or when you delete your account. Because a face is sensitive data, the check is your choice.
Mahrem identity documents
A mahrem who wants to read a conversation confirms their identity with an ID document and a selfie. These are stored encrypted, seen only by the person who reviews them, and deleted as soon as the decision is made.
Location
We use your location only to work out your city. Your exact position is not stored: it is reduced to the centre of your city before it is saved, and nothing other members see is more precise than that. You can withdraw location permission in your phone settings.
Who sees what
Other members see your profile as you have set it up. A mahrem you approve sees the conversation from the moment of approval. Moderators see reported content and what is needed to judge it. Nobody at Niyyah reads private conversations as a matter of routine.
Who processes data for us
Contabo (the servers the app runs on), Cloudflare (network protection), Google Firebase (push notifications), Apple and Google (sign-in and in-app purchases), RevenueCat (processing in-app purchases) and Resend (sending email). Each receives only what its part requires. We never see your card details — payments go through the App Store or Google Play. On our website, Meta (Facebook) measures visits only if you agree to it. We do not sell personal data, to anyone.
How long we keep it
Chat messages are deleted three days after they are sent, unless both of you have chosen to introduce your families, or the message has been reported (then until 30 days after the report is decided). Unanswered intro messages: 30 days. Replies to stories and who viewed them: 30 days after the story ends. Profile views and read notifications: 180 days. Reports: their content is cleared 90 days after a dismissal and two years after a decision. Server backups: up to 30 days. When you delete your account, your profile, photos, matches and messages are deleted. We keep payment and coin records without your name, for accounting, and an encrypted fingerprint of your email or Google/Apple sign-in, so that a ban, a block or unpaid coins cannot be escaped by opening a new account.
Your rights
You can get a copy of your data (Settings sends it to your email), correct what is wrong, delete your account, object to a particular use of your information, and withdraw consent for the face check. For anything else write to [email protected] — you will get an answer within 30 days. You also have the right to complain to the data protection authority: in Bosnia and Herzegovina the Personal Data Protection Agency, in the EU your national authority.
Security, minors and changes
Data travels over encrypted connections, and access inside the team is limited to the people whose work requires it. No system is perfect, so tell us at once if something looks wrong with your account. Niyyah is not for anyone under 18; if we find such an account we close it and delete its data. If we change this policy in a way that matters, we will tell you in the app before it takes effect.