Privacy Policy

Walima ("we," "us," "our") operates a web-based premarital compatibility quiz service for Muslims considering marriage. This Privacy Policy explains how we collect, use, and protect your information.

Information you provide:

• First name and gender (to tailor quiz questions)
• Email address (to deliver quiz invitations and compatibility reports)
• Wali's name and email address (required for women, optional for men; receives a copy of the report)
• Optional viewer email and role (imam, marriage counselor, or family member)
• Quiz responses (priorities, values, and scenario answers)

Information collected automatically:

• Basic analytics data (page views, device type) via PostHog, a privacy-respecting analytics platform
• Error and performance data (crash reports, page load times) via Sentry, used solely to fix bugs and improve reliability
• Payment transaction metadata via Stripe (we do not store credit card numbers)

Automatic data collection only occurs if you accept non-essential cookies via our cookie banner. You can reject them at any time.

• To generate and deliver your compatibility report
• To send quiz invitations to the other party
• To deliver reports to your wali and any additional viewers you designate
• To process your payment via Stripe
• To send occasional marriage tips if you opted in (you can unsubscribe at any time)

This is the most important section of this policy.

• Encryption: Quiz answers are encrypted on our servers the moment they arrive using AES-256-GCM. We store only encrypted data that we cannot read.
• Temporary storage: Encrypted quiz data is held only until both parties complete the quiz and the report is generated. Incomplete quizzes are automatically deleted after 30 days.
• Report expiration: Your compatibility report is available for 72 hours after generation. After that, the report link stops working and all associated data is permanently deleted.
• No recovery: Once data is deleted, it cannot be recovered by anyone, including us. Download the PDF if you wish to keep your report.
• No training: Your quiz answers and report content are never used to train AI models or for any purpose beyond generating your specific report.

We use AI to generate your personalized compatibility questions and report insights. Our pipeline uses two providers:

• Anthropic (Claude): Selects relevant Islamic sources from our knowledge base for your report.
• OpenAI (GPT): Generates personalized quiz questions and compatibility insights based on your answers and the selected sources.

Your quiz answers are sent to these APIs for one-time processing. Neither Anthropic nor OpenAI retains input data for model training. The processing occurs in memory and is not stored after your report is generated.

• Payment records: Transaction IDs and amounts (required for tax and refund purposes). Stored via Stripe. We do not handle or store credit card details.
• Email addresses: Only if you opted in to marketing communications. You can unsubscribe at any time.
• Quiz completion status: Whether a quiz was completed (paid/incomplete/completed) for refund processing. No answer content is retained.

We do not store quiz answers, report content, names, or any personal details beyond what is listed above.

• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• OpenAI: AI processing for question generation and insights. Subject to OpenAI's Privacy Policy. We use the API with zero data retention.
• Anthropic: AI processing for Islamic source selection. Subject to Anthropic's Privacy Policy. We use the API with zero data retention.
• Supabase: Database hosting. Subject to Supabase's Privacy Policy.
• PostHog: Privacy-respecting analytics (page views, device type). Subject to PostHog's Privacy Policy.
• Sentry: Error tracking and performance monitoring. Subject to Sentry's Privacy Policy.

Your compatibility report is shared only with:

• Both parties who took the quiz
• The designated wali
• Any additional viewer you chose to add (imam, counselor, or family member)

All viewers are disclosed to both parties before the quiz begins. We do not sell, share, or disclose your information to anyone else, except as required by law.

We use cookies and similar technologies as follows:

• Essential: Supabase authentication tokens (required for the quiz to function). These do not require consent.
• Analytics (PostHog): Tracks page views and device type to help us understand how people use the site. Sets a cookie and localStorage entry to identify returning visitors. Only active if you accept non-essential cookies.
• Error tracking (Sentry): Captures errors and performance data so we can fix bugs. Only active if you accept non-essential cookies.

When you first visit the site, a banner asks whether you accept non-essential cookies. If you reject them, PostHog and Sentry are not loaded and no tracking cookies are set. You can clear your preference at any time by clearing your browser's localStorage for this site.

• Access: You can request a copy of any personal data we hold about you.
• Deletion: Given our zero-retention policy, most data is automatically deleted. You can request deletion of your email from marketing lists at any time.
• Refund: Full refund within 14 days if the quiz has not been completed by both parties.
• Opt out: Unsubscribe from marketing emails at any time via the link in any email.

We implement encryption at rest and in transit, use secure authentication for all server access, and follow industry best practices for data protection. Our zero-retention architecture means that even in the unlikely event of a breach, there is minimal personal data to expose.

Our service is intended for adults considering marriage. We do not knowingly collect information from anyone under the age of 18.

We may update this policy from time to time. Material changes will be communicated via email to active users. The "Last updated" date at the top reflects the most recent revision.

For privacy-related questions or requests, contact us at: support@olana.dev