Privacy Policy

1. Introduction

Welcome to Qalb ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (the "Service"). We are committed to protecting your privacy and handling your personal information with the utmost care and in compliance with applicable data protection laws, including the Protection of Personal Information Act (POPIA) of South Africa and the General Data Protection Regulation (GDPR) of the European Union.

By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not download, register with, or use this application.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Name, age, and demographic information
• Email address and contact information
• Profile photographs and biographical information
• Religious preferences and cultural background
• Location data (with your explicit consent)
• Device information and unique identifiers
• Usage data and interaction patterns
• Communication data between users

2.2 Automatically Collected Information

• IP address and device identifiers
• Operating system and browser information
• Application usage statistics
• Crash reports and performance data
• Analytics and advertising identifiers

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and maintain our Service
• To facilitate meaningful connections between users
• To personalise your experience and improve our matching algorithms
• To communicate with you about your account and Service updates
• To ensure the safety and security of our platform
• To comply with legal obligations and prevent fraudulent activity
• To analyse usage patterns and improve our Service
• To provide customer support and respond to inquiries

4. Legal Basis for Processing (GDPR/POPIA)

Under GDPR and POPIA, we process your personal information based on:

• Consent: When you explicitly agree to processing for specific purposes
• Contract Performance: To provide our Service as agreed in our Terms & Conditions
• Legitimate Interests: For improving our Service, security, and fraud prevention
• Legal Compliance: To meet our legal and regulatory obligations

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our application, conducting business, or providing services to you, including:

• Cloud hosting and data storage providers
• Analytics and performance monitoring services
• Payment processing services
• Customer support platforms
• Marketing and communication services

5.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Investigate potential violations of our Terms of Service
• Protect against fraud or security threats

6. Data Security

We implement comprehensive security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection practices
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

Under GDPR and POPIA, you have the following rights regarding your personal information:

7.1 Access and Portability

• Request a copy of your personal information
• Receive your data in a portable, machine-readable format
• Transfer your data to another service provider

7.2 Correction and Updates

• Update or correct inaccurate personal information
• Complete incomplete data

7.3 Deletion and Erasure

• Request deletion of your personal information
• Exercise your "right to be forgotten"
• Delete your account and associated data

7.4 Processing Restrictions

• Object to processing based on legitimate interests
• Restrict processing while disputes are resolved
• Withdraw consent for specific processing activities

8. Account and Data Deletion

You have the right to request deletion of your account and personal information at any time. To request account deletion:

1. Go to Settings → Account → Delete Account in the app
2. Email us at privacy@qalb.app with your deletion request
3. Contact our support team through the in-app help centre

Upon receiving your deletion request, we will:

• Confirm your identity and process the request within 30 days
• Delete your personal information from our active systems
• Notify relevant third-party processors of the deletion
• Retain only information required by law or for legitimate business purposes
• Provide confirmation of successful deletion

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account information: Until account deletion or 7 years after last activity
• Communication data: 2 years after account closure
• Transaction records: 7 years for tax and accounting purposes
• Legal and compliance records: As required by applicable law

10. International Data Transfers

Your information may be transferred to and processed in countries other than South Africa. When we transfer personal information internationally, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Other legally recognised transfer mechanisms

11. Children's Privacy

Our Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to remove such information from our systems.

12. Child Safety Policy

12.1 Purpose and Commitment

Qalb is committed to maintaining a safe, respectful, and lawful environment for all users. We strictly prohibit any form of Child Sexual Abuse Material (CSAM), child exploitation, grooming, or any content or behavior that endangers the safety of minors.

This policy aligns with international laws and best practices, including the UN Convention on the Rights of the Child, NCMEC guidelines, and the Tech Coalition's Project Protect principles.

12.2 Prohibited Content and Conduct

The following are strictly prohibited on Qalb:

• Child Sexual Abuse Material (CSAM): Any sexualized depiction or description of a person under 18, including edited or illustrated content
• Child Exploitation: Any act, attempt, or facilitation of sexual contact, abuse, or trafficking involving minors
• Sexual Solicitation of Minors: Grooming, enticement, or attempts to establish inappropriate contact
• Sexualized Comments or Requests: Any explicit or suggestive messages directed towards someone under 18
• Sharing of Personal Information of Minors: Any exchange of private contact details intended to bypass safety measures

12.3 Enforcement

• Zero Tolerance: Any user found engaging in CSAE-related activity will be immediately banned and reported to relevant authorities
• Mandatory Reporting: All suspected CSAE content or conduct is reported to local law enforcement and, where applicable, the National Center for Missing & Exploited Children (NCMEC)
• Content Removal: All prohibited material is removed as soon as detected or reported

12.4 Safety Measures

Qalb uses a combination of automated detection tools, human moderation, and user reporting features to prevent and respond to CSAE:

• Photo and Video Scanning: AI-assisted detection to identify known CSAM using PhotoDNA and similar technologies
• Profile Verification: Mandatory age verification during account creation
• Active Moderation: Trained moderators review reported profiles, messages, and media
• User Reporting Tools: Easy-to-access options to flag inappropriate behavior or content

12.5 User Responsibilities

Users are required to:

• Be at least 18 years old to use Qalb
• Immediately report any CSAE-related content or contact
• Never share, request, or forward inappropriate images of minors

12.6 Reporting CSAE on Qalb

If you encounter CSAE-related activity on Qalb:

• Email: Contact us directly at theqalbapp@gmail.com
• Emergency: If a child is in immediate danger, contact your local law enforcement before reporting to us

13. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to the practices of companies we do not own or control. We encourage you to review the privacy policies of any third-party services you access.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our application
• Sending you an email notification
• Displaying an in-app notification

Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Regulatory Authorities

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the relevant supervisory authorities:

• South Africa: Information Regulator (POPIA)
• European Union: Your local Data Protection Authority
• United Kingdom: Information Commissioner's Office (ICO)