DATA PROTECTION & USER RIGHTS

Privacy Policy

Last Updated: September 2026

At Shadi Krao, privacy is our cornerstone. We are committed to safeguarding your personal data, identity, and matrimonial search with absolute integrity and bank-grade security.

1. Information We Collect & Data Minimization

We enforce strict data minimization: we collect only the data necessary to verify authenticity and assist match discovery.

  • Profile Demographics: Name, age, gender, city/country, career, education, living preferences, and family background.
  • Identity Proof (CNIC/NICOP): Scans submitted strictly for manual Stage 1 & Stage 2 verification to eliminate fake profiles. Documents are stored in encrypted vaults accessible only to authorized safety officers.
  • Guardian & Wali Details: Phone and relationship for family chaperone coordination.
  • OAuth Data: Email address and name provided during Google sign-in.

2. Protection of Minors (Strict 18+ Age Restriction)

Shadi Krao is exclusively intended for adults aged 18 years or older seeking Nikkah/matrimony. We do not knowingly collect or solicit personal data from children or individuals under 18. Any account discovered to belong to a minor will be terminated immediately and all associated data permanently erased.

3. Pardah Photo Vault & Anti-Screenshot Protection

We recognize the sacred sensitivity of matrimonial photo sharing. Shadi Krao employs our proprietary Pardah Photo Vault:

  • Strict Server-Side Photo Protection: Profile pictures are never served with client-side CSS blur filters that can be bypassed in browser inspection tools. Unauthorized visitors only receive a protected avatar placeholder until you explicitly grant photo access.
  • Protected Image Watermarking: Approved images are served with dynamic viewer watermarks to deter unauthorized redistribution.
  • Mutual Consent Unlocks: Photos and phone numbers are disclosed only after mutual match approval by both parties and family chaperones.

4. Third-Party SDK & Google OAuth Data Policy

Shadi Krao integrates Firebase (for push notifications) and Google OAuth strictly for authentication.

  • No Advertising Trackers: We do not use third-party ad networks or sell your behavioral data.
  • No AI Model Training: Your private data is never used to train public LLMs or machine learning models.

5. Data Deletion Request & Account Erasure (Right to be Forgotten)

You hold the absolute right to request complete deletion of your account, verification documents, and associated personal records.

Option A: Self-Service Deletion

Log in to your Candidate Dashboard → Profile Settings → Click "Delete My Account & Data".

Option B: Email Request

Send an email from your registered address to privacy@shadikrao.pk or support@shadikrao.pk with the subject line "Data Deletion Request". Our team will verify and permanently purge your records within 48 hours.