Privacy Policy
Last updated: 23 February 2026
This Privacy Policy describes how Kube IT Consulting FZCO ("Mouqabalah", "we", "us", or "our"), the operator of the website and mobile application accessible at mouqabalah.com ("Platform"), collects, uses, stores, and protects the personal information of users ("User", "you") in connection with our Sunnah-first, wali-mediated marriage introduction service. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use the Platform.
Mouqabalah is operated by Kube IT Consulting FZCO, a company incorporated in the Dubai Silicon Oasis, DDP Building A2, Dubai, United Arab Emirates. As the controller of your personal data, we are committed to responsible data handling and transparency.
1. Data We Collect
1.1 Account & Identity Data
• Full name (first name and last initial displayed publicly)
• Email address and hashed password
• Google OAuth authentication token (if sign-in via Google)
• Date of birth and age
• Gender and marital status
1.2 Profile Data
• Location (country, region, city)
• Ethnic and geographic origins
• Languages spoken
• Physical attributes: height, build
• Health conditions (self-declared, optional)
• Occupation and professional situation
• Religious practice information: prayer level, sunnah adherence, hijab style (for women), religiosity self-assessment
• Bio, personal qualities, areas of improvement (free text)
• Profile photo and any uploaded media
1.3 Wali Data (Women Only — Highly Sensitive)
• Wali full name and relation to the user
• Wali phone number and email address
Wali contact details are treated as sensitive PII. They are stored encrypted and are never visible to other users or to the public. They are only disclosed to a specific approved party after the user has explicitly approved an interest request, and only to that party. All access to wali data is audit-logged.
1.4 Preference & Matching Data
• Preferred age range, height range, origins, locations
• Languages and other preferences for a potential match
• Free-text descriptions of what you are looking for
1.5 Activity Data
• Interest requests sent and received, and their status
• Approved introductions and mouqabala (supervised chat) history
• Block and report actions
• Usage logs and session data
1.6 Verification Data
• Identity documents (ID card, passport) uploaded for verification
• Wali authorization letters (where applicable)
• Reference contact information
1.7 Payment Data
• Subscription plan, billing cycle, and subscription status
• Stripe Customer ID and Stripe Subscription ID (server-side only)
We do not store raw card numbers or full payment card data. All payment processing is handled by Stripe, Inc. under their own PCI-DSS compliant infrastructure.
1.8 Technical & Security Data
• IP address and device/browser metadata
• Security event logs (login attempts, failed authentications)
• Audit logs for sensitive operations (wali data access, admin actions)
• Error and diagnostic logs (via Sentry/GlitchTip)
1.9 Analytics Data
• Anonymised or pseudonymised usage events (via PostHog)
We apply strict PII redaction rules to analytics data. No name, email, wali data, or other directly identifying information is transmitted to PostHog.
2. Legal Bases and Purposes for Processing
We process your personal data on the following legal bases:
• Performance of a contract: to provide, maintain, and operate the Platform and all its features, including creating your account, matching you with compatible profiles, and managing subscriptions.
• Legitimate interests: to detect and prevent fraud, abuse, and security threats; to improve the Platform; to send transactional emails and service notifications; and to enforce our Terms of Use.
• Legal obligation: to comply with applicable law, including UAE law, and where applicable the GDPR as it applies to users located in the EEA.
• Consent: for analytics cookies and non-essential tracking. You may withdraw consent at any time via our Cookie Policy settings.
3. How We Use Your Data
• Provide and operate the Sunnah-first marriage introduction service
• Display your profile to potential matches (according to your privacy settings)
• Facilitate wali-mediated introductions after mutual approval
• Process subscription payments via Stripe
• Send transactional emails (interest notifications, account alerts, subscription receipts) via Resend
• Verify identity and maintain platform integrity
• Detect, investigate, and prevent fraud, abuse, harassment, or violations of our Terms
• Maintain security audit logs for sensitive operations
• Improve the Platform through anonymised analytics
• Respond to your support requests
• Comply with legal and regulatory obligations
We do not use your personal data for automated decision-making that produces legal effects without human review.
4. Sharing and Disclosure of Data
We do not sell, rent, or trade your personal data to third parties. We may share data only in the following circumstances:
• Service Providers: We use trusted sub-processors including Supabase (database and authentication hosting), Stripe (payments), Resend (transactional email), PostHog (anonymised analytics), Sentry/GlitchTip (error tracking), and Cloudflare (CDN, DDoS protection). Each sub-processor is bound by data processing agreements and may only use data to provide services to us.
• Legal Requirements: We may disclose data if required to do so by applicable law, court order, or governmental authority.
• Safety: We may disclose data where necessary to protect the rights, property, or safety of Kube IT Consulting FZCO, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Wali contact details are never shared publicly. They are disclosed solely to an approved interest recipient, only after explicit approval by the user, and this disclosure is logged in our audit system.
5. Security Measures
• All data is encrypted in transit via TLS/HTTPS
• Sensitive data including wali information is stored with Row Level Security (RLS) policies enforced at the database level via Supabase Postgres
• Passwords are hashed and never stored in plaintext
• Audit logs are maintained for all sensitive data accesses
• Wali data access is gated behind mutual approval and role-based access controls
• Rate limiting is applied to sensitive API endpoints
• Admin actions are logged and restricted to authenticated administrators
Despite these measures, no system is 100% secure. We cannot guarantee absolute security of information transmitted over the internet. You use the Platform at your own risk.
6. International Data Transfers
Our Platform is operated from the United Arab Emirates. Your data may be processed by our sub-processors in other countries, including within the European Economic Area, the United States, and elsewhere. Where we transfer data outside the EEA, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses) in compliance with applicable data protection law.
7. Data Retention
• Account and profile data is retained for as long as your account is active and for a reasonable period thereafter to allow you to reactivate your account.
• Upon account deletion, personal profile data is erased within 30 days, subject to legal retention obligations.
• Payment records and invoices may be retained for up to 7 years to comply with tax and accounting obligations.
• Security and audit logs may be retained for up to 5 years for fraud prevention and legal compliance purposes.
• Anonymised analytics data may be retained indefinitely as it does not identify you.
8. Your Rights
Depending on your location (in particular if you are in the EEA, UK, or Switzerland), you may have the following rights regarding your personal data:
• Right of access: obtain a copy of the personal data we hold about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data, subject to legal retention obligations
• Right to restriction: request that processing be limited in certain circumstances
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw any previously given consent at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (extendable by a further 2 months where requests are complex or numerous, with notification). We reserve the right to verify your identity before processing any request. Where requests are manifestly unfounded or excessive (in particular because of their repetitive character), we may, in accordance with Article 12(5) GDPR: (a) charge a reasonable administrative fee taking into account the costs of responding; or (b) refuse to act on the request. We will notify you of our decision.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the competent supervisory authority in your country of residence (for example, the CNIL in France, the APD in Belgium, or the Autoriteit Persoonsgegevens in the Netherlands).
9. Minors
The Platform is strictly reserved for persons aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that a minor has registered, we will immediately suspend and delete the account. If you believe a minor is using the Platform, please contact us immediately at [email protected].
10. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we do, we will update the "Last updated" date at the top of this page and, where changes are material, notify you by email or through a prominent notice on the Platform. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised policy.
11. Contact & Data Controller
Kube IT Consulting FZCO
Dubai Silicon Oasis, DDP Building A2
Dubai, United Arab Emirates
Email: [email protected]
Stay Updated
Subscribe to our newsletter for updates on new features and Islamic marriage guidance.
We respect your privacy. Unsubscribe at any time.
Mouqabalah
Find your zawaj the Sunnah way. Built with respect, family values, and Islamic principles.
Contact Details
Email: [email protected]
© 2026 Mouqabalah. All rights reserved. Built to help Muslims find their halal match.