Privacy Policy
Last updated: June 2026
1. Who We Are
Fitrah (“we”, “us”, “our”) is operated by Badir Studio Ltd, a New Zealand company. We are the agency responsible for your personal information under the New Zealand Privacy Act 2020. We are Muslim-owned and independent — not affiliated with any foreign dating conglomerate.
2. What We Collect
When you create an account and take the Character Assessment, we collect:
- Account information: name, email address, password (hashed — we never store your actual password), gender, country, city
- Assessment responses:your answers to our 24-question Character Assessment across personality, deen & values, life vision, and background
- AI-generated profile: your Character Profile, generated by AI from your assessment answers (see Section 5)
- Preferences: your stated preferences for a partner (when you provide them)
- Referral source: if you arrived via a shared link, we record the referral code
- Technical data: UTM parameters and basic analytics to understand how visitors find us
Sensitive information: Your assessment responses include information about religious practice, personal values, and relationship preferences. Under the Privacy Act 2020, we treat this as sensitive personal information and apply additional safeguards described below.
3. How We Use Your Data
- To create your account and authenticate your sessions
- To generate your personalised Character Profile using AI (see Section 5)
- To facilitate compatibility matching when matching opens in your region
- To send you service-related emails (account confirmation, matching updates) and occasional product updates (you can unsubscribe from non-essential emails at any time)
- To understand community-wide patterns using aggregated, anonymised data — individual responses are never shared publicly
4. Data Protection & Storage
Your data is stored securely using industry-standard protections:
- Database: Neon PostgreSQL with TLS encryption in transit and encryption at rest
- Passwords: hashed using bcrypt — we never store or can read your actual password
- Sessions: secured with JWT tokens, 30-day expiry
- Hosting: Vercel, with data processed in secure cloud infrastructure
We never sell, share, or trade your personal information with third parties for marketing or advertising purposes.
5. AI Processing & Character Profiles
Your assessment answers are processed by Anthropic's Claude AI to generate your Character Profile. This means:
- Your assessment answers are sent to Anthropic's API for profile generation — Anthropic does not use this data to train their models
- The generated profile (scores, narrative, insights) is stored in our database and linked to your account
- AI-generated profiles are tools to support your self-reflection and matching — they are not clinical or psychological assessments
- You can request deletion of your profile and regeneration at any time
6. Third-Party Processors
We use the following service providers to operate Fitrah. Each processes only the data necessary for their function:
- Neon — database hosting (stores your account and assessment data)
- Vercel — application hosting and deployment
- Anthropic (Claude) — AI profile generation from your assessment answers
- Resend — transactional and product update emails
We do not share your data with advertisers, data brokers, or any parties outside of what is needed to operate the platform.
7. Data Sovereignty & Jurisdiction
Fitrah is operated from New Zealand. Your personal information is governed by the New Zealand Privacy Act 2020 — one of the most protective privacy frameworks in the world. Our service providers may process data in other jurisdictions, but we ensure they maintain equivalent or higher protections. Your data stays under Muslim-owned governance and is never monetised through advertising.
8. Your Rights
Under the Privacy Act 2020, you have the right to:
- Access — request a copy of all personal information we hold about you
- Correction — request correction of any inaccurate information
- Deletion — request deletion of your account and all associated data
- Withdraw — unsubscribe from non-essential emails at any time
- Complain — lodge a complaint with the NZ Privacy Commissioner if you believe your privacy has been breached
To exercise any of these rights, email us at privacy@findfitrah.com. We will respond within 20 working days as required by the Privacy Act.
9. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required by law to retain certain records. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for research and product improvement.
10. Cookies & Analytics
We use privacy-focused analytics to understand how visitors interact with our site. We do not use invasive tracking cookies or share browsing data with advertisers. UTM parameters and referral codes are stored in your browser's local storage only to attribute your visit to the correct source.
11. Children's Privacy
Fitrah is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly.
12. Changes to This Policy
We may update this policy as Fitrah evolves. Significant changes will be communicated via email to registered users. The “Last updated” date at the top reflects the most recent revision.
13. Contact
Questions or concerns about your privacy? Reach us at privacy@findfitrah.com.