Nafsync

Privacy Policy

Your privacy matters.

Last updated: August 2026.

This Privacy Policy explains what data Nafsync collects, why, who we share it with, and what your rights are. Nafsync is a dating app for Muslim adults where compatibility between profiles is assessed by artificial intelligence; this document therefore also covers what is sent to our AI provider and why. Nafsync is the controller of your data and is committed to protecting it in line with the GDPR and applicable laws.

1. Data you provide

When you sign up and use the app: first name, email address, date of birth (only your age is shown), gender, and the profile details you fill in (bio, origins, family situation, education, profession, height, religious practice, interests, and so on). You also add media (photos, videos) and, optionally, a voice intro and your wali's contact details.

2. Location

With your permission, we use your location to suggest nearby profiles and calculate a distance. You can enter a city manually instead of turning on location, and revoke access at any time in your phone settings. We never show your exact location to other members.

3. Identity verification data

If you choose to get verified, we process a selfie with a requested gesture, solely for manual review by our team. These images are stored in a private space, are never made public, and are used only for verification.

4. Phone number and contacts

So that we never suggest someone you know — a family member, a close friend — we ask for your phone number and, if you agree, access to your address book.

Your number is never stored as-is: it is immediately turned into an irreversible fingerprint, using a secret that never leaves our servers. It is not shown to other members, not shared, and not used to contact you — we send no SMS and do not verify this number.

If you allow access to your address book, only the numbers are transmitted, never the names. They are turned into irreversible fingerprints in the same way, and the original numbers are destroyed without ever being stored. These fingerprints are used solely to keep those people out of your suggestions; we never contact your contacts, never send them invitations, never reconstruct a social graph, and make no commercial use of them.

Importing your address book is optional and based on your consent: you can decline without losing access to the app, and erase it at any time from Settings → People I know. Keeping your own number is necessary for this protection to work. All these fingerprints are deleted along with your account.

5. Technical and usage data

To provide and secure the service, we process technical data: account identifier, push notification token, connection logs, device type, and in-app interactions (pulses, Super Pulse, visits, messages). This data also helps us fight fraud and abuse.

6. Purposes and legal bases

We process your data to: create and manage your account (performance of the contract), suggest profiles and run syncs and chat, estimate compatibility between profiles using AI (Insight and Direct Sync — performance of the contract, at your request), handle purchases and subscriptions, ensure moderation and security (legitimate interest), send you notifications, and meet our legal obligations. Location and notifications rely on your consent.

7. Messages and encryption

The content of your conversations is encrypted at rest on our servers (AES-256). This is not end-to-end encryption: to handle moderation when content is reported and to keep the service running, Nafsync can technically access reported content. Never share sensitive information (bank details, official documents) in chat.

8. Providers and sharing

We do not sell your data. We use processors to run the service: Supabase (authentication, database, storage), Bunny.net (media delivery network), Expo and Firebase / Apple (push notifications), RevenueCat with the App Store and Google Play Store (payments and subscriptions), Google AdMob (advertising), Giphy (GIF search in chat), Anthropic (AI compatibility analysis) and Resend (emails). Each one only accesses the data needed for its function. For the AI compatibility features (“Insight” and “Direct Sync”), the content of your profile and of the other person’s profile (attributes, bio, prompt answers — never your name or photos) is sent to Anthropic to generate a compatibility estimate and its explanation; this data is used only for that analysis and is not used to train models.

9. Public profiles and other members

The information you mark as public (including display name, age, region) is visible to other members; private fields are only revealed after a sync. Keep in mind that another member can see, and potentially save, whatever you make visible. Only post what you are willing to share.

10. Advertising

For non-Premium members, ads may be shown via Google AdMob. Depending on your device and consent choices, advertising identifiers may be used. You can limit ad tracking in your phone's privacy settings (iOS and Android).

11. Data retention

We keep your data for as long as your account is active. Accounts inactive for 12 months are deleted after a warning email. Some activity data (pulses, Super Pulse, visits) is only kept on a rolling window. When you delete your account, your personal data is erased and your conversations are anonymized, subject to legal retention periods.

12. Your rights

You have the right to access, correct, erase, restrict, object to, and port your data. You can export your data (once a month) and delete your account directly from settings, or email us at support@nafsync.app. You can also lodge a complaint with the competent data protection authority (in France, the CNIL).

13. Security

We use technical and organizational measures to protect your data (message encryption at rest, restricted access, private spaces for sensitive data). No system is completely secure, so we cannot guarantee absolute security, but we work to preserve it continuously.

14. Minors

Nafsync is strictly for adults (18 and over). We do not knowingly collect data from minors. If we learn that an account belongs to a minor, it is deleted.

15. International transfers

Some of our providers may process data outside your country of residence. When they do, we make sure appropriate safeguards cover these transfers, in line with applicable regulations.

16. Changes

This policy may be updated. If there is a significant change, we will let you know in the app. The last-updated date appears at the top of this document.

17. Contact

For any question about your personal data or to exercise your rights: support@nafsync.app.