Privacy policy

Zehu holds sensitive information about people's personal and religious lives. This page explains, in plain language, what we collect, who can see it, and what we will never do with it. If anything here is unclear, ask us.

What we collect

• Account: email, a hashed password (we cannot read it), sign-in times.
• Profile: everything you type in — name, date of birth, city, community, bio, preferences.
• The private section (“Just between us”): your answers about Shabbos, kashrus, and your notes.
• Photos you upload, and technical details inside them (camera model, date, editing software) that we use only to detect fake or AI-generated images.
• Verification selfie: the live photo you take with a pose prompt.
• Activity: who you liked or passed, matches, messages, reports, and blocks.

Who can see what

• Other approved members see your first name, age, city, community, bio, and approved photos. They never see your last name, email, or date of birth.
• Your private section is hidden from members by default. You choose whether to show it on your profile, share it only with matches, or keep it to matchmakers. You can change this any time.
• Matchmakers and admins see your full profile including the private section, so they can make good introductions and verify accounts. They are bound by confidentiality and are removed if they break it.
• Your verification selfie is seen only by admins (and, if enabled, sent once to a face-matching service — see below). It is never shown to members or matchmakers.
• Messages are private to the two people in the conversation. Like any service, we may access account data when needed to enforce our terms or keep members safe.

Third-party services

We may use a face-matching service (such as Amazon Rekognition) to compare your selfie to your photos, and an image-analysis service to flag AI-generated pictures. These services receive the image bytes, return a score, and do not keep your photos under our agreements with them. We do not sell or share your data with advertisers. There are no ad trackers on this site.

What we will never do

• Reveal your private section to anyone you did not allow.
• Contact your family, community, or employer.
• Sell your data, ever.
• Use your photos for anything other than showing them to members you allow and verifying your account.

Retention and deletion

You can delete your account yourself from More → Delete my account. That permanently removes your profile, photos, selfie, matches, and messages. We keep a minimal record of removed accounts (email and reason) for up to a year so that banned users cannot simply rejoin. If you were reported, we may keep the report and related messages for up to a year for safety.

Security

Passwords are hashed with bcrypt. Session tokens are stored hashed. Photos are stored outside the public web root and only served after an authorization check. All traffic is encrypted in transit. Admin actions are logged.

Your rights

You can see everything we hold about you on your profile page, correct it, export it on request, or delete it. Email us through the contact page for anything you cannot do yourself.