Letaskunu is structured as a waqf — a charitable Islamic endowment held in perpetuity for the benefit of the community. It is not-for-profit and will never be sold to a corporate entity. The protection of your personal information is not just a legal obligation — it is an Islamic one. We treat your data with the same care and trust you place in this platform.
1. Who we are
Letaskunu is a halal matrimonial platform operated as a waqf entity. The platform is developed and maintained by LayersFlow Pty Ltd (ABN 81 694 343 998), acting as technical administrator on behalf of the waqf. References to ‘we’, ‘us’, or ‘our’ in this policy refer to the Letaskunu waqf entity and LayersFlow Pty Ltd in their respective capacities.
This platform is designed for the Australian Muslim community with plans to expand to the United Kingdom, United States, and Canada. All infrastructure is owned and controlled by the waqf entity. No data is sold, shared with advertisers, or used for commercial profiling.
2. What information we collect
Information you provide during registration
- —Account credentials — email address and password (password stored as a hashed value, never in plain text)
- —Mobile phone number — used for SMS verification and, for female profiles, wali contact purposes
- —Date of birth — used to verify age eligibility (18+) and calculate your age for display
- —Full legal name — collected for female profiles and stored encrypted. Never displayed publicly.
- —Alias name — your chosen public display name shown to other users in place of your real name
- —Profile information — height, nationality, languages, residency, sect, lifestyle details, relationship goals, and additional information you choose to share
- —Profile photo — processed and stored in two versions: original (private) and blurred (displayed publicly for female profiles)
- —Wali details — for female profiles: wali full name, relationship, and phone number. Stored securely and only transmitted to a man upon connection acceptance.
- —Reference person details — name, phone, and relationship of an optional character reference (male profiles only)
Information generated by your use of the platform
- —Connection history — requests sent and received, connections accepted or declined, outcomes
- —Check-in responses — your responses to the day 7, 14, and 30 check-in prompts
- —Dissolution reasons — the reason selected when a connection ends (not shared with the other party)
- —Concern reports — details submitted if you raise a concern about another user
- —Subscription records — your plan, billing period, and payment status (card details are never stored by us — processed by Stripe)
- —Device push notification tokens — stored to deliver platform notifications to your device
- —Audit logs — a record of sensitive actions including when your photo URL was generated, when your wali contact was transmitted, and screenshot detection events
Information we do not collect
- —We do not collect GPS or precise location data
- —We do not collect browsing history outside the platform
- —We do not run advertising trackers or third-party analytics pixels
- —We do not store payment card numbers — all card processing is handled by Stripe
3. How we use your information
We use your information only to operate the platform and provide the service you signed up for. Specifically:
- —To verify your identity and age eligibility
- —To create and display your profile to other registered users
- —To power the matching algorithm that surfaces compatible profiles for you to browse
- —To facilitate connection requests and manage the connection lifecycle
- —To transmit your wali contact details to a connected man at the appropriate stage
- —To send automated check-in emails, verification SMS messages, and platform notifications
- —To detect and prevent misuse — including AI text scanning of profile fields, screenshot detection, and pattern analysis of concern reports
- —To process subscription payments through Stripe
- —To maintain a secure audit trail of sensitive actions on the platform
- —To display anonymised platform statistics on the public landing page
4. How we protect your information
We take the security of your personal information seriously. The following protections are in place:
Encryption and access controls
- —Female users' real names are encrypted using Supabase Vault and are never stored in plain text
- —Wali phone numbers are stored server-side only and are never returned in browse API responses
- —Profile photos are stored in a private storage bucket and are never served via public URLs
- —Unblurred photos are only accessible via server-generated temporary links that expire after 15 minutes
- —All connections to the platform use HTTPS encryption
- —Admin accounts require two-factor authentication (TOTP) for all access
Data minimisation
- —Only the minimum information necessary to operate each feature is accessed and returned
- —The browse API never returns real names, wali contact details, or original photo paths regardless of who is requesting
- —Audit logs are append-only and accessible only to the platform via service role — no user can query them directly
5. Wali contact details — special notice
We recognise that the wali’s contact details are sensitive personal information belonging to both the female user and her wali. We handle this information with particular care.
- —The wali's name and phone number are added by the female user as a mandatory profile field
- —The wali is notified via SMS when his details are added and asked to confirm his involvement
- —The wali's contact details are never visible to any other user during browsing
- —The wali's contact details are only transmitted to a man at the precise moment a connection is accepted — not before
- —The transmission is logged in the audit trail with a timestamp
- —The wali's phone number is never included in any marketing, analytics, or third-party communication
6. Sharing your information
We do not sell your personal information. We do not share your information with advertisers or data brokers. We share your information only in the following limited circumstances:
With other users — limited and controlled
- —Your public profile fields (alias name, age, nationality, blurred photo for females) are visible to other registered users during browsing
- —Your full profile details are visible to a user who is in an active connection with you
- —Your real name and unblurred photo are transmitted to the man upon connection acceptance
- —Your wali's contact details are transmitted to the man upon connection acceptance
With service providers — for platform operation only
- —Supabase — database and authentication infrastructure. Data stored in their cloud.
- —Vercel — web hosting platform
- —Twilio — SMS delivery for verification codes and wali confirmation messages
- —Resend — transactional email delivery
- —Stripe — payment processing. We share only what Stripe requires to process payments.
- —Expo — mobile push notification delivery
With law enforcement — only when required
We may disclose information if required by Australian law, a court order, or to protect the safety of our users or the public. We will notify affected users where legally permitted to do so.
7. Data retention and deletion
Active accounts
Your information is retained for as long as your account is active. You may update or delete your account at any time through the platform settings.
Account deletion
- —When you delete your account, all personally identifiable information is removed immediately
- —An anonymised record is retained for 90 days for safety and abuse prevention purposes
- —After 90 days, the anonymised record is permanently deleted
- —Your email address and phone number are added to a blacklist to prevent re-registration with a deleted account
Connection and dissolution records
Records of connections and their outcomes are retained for the duration your account is active. These records help you understand your history on the platform. On account deletion these records are anonymised.
8. Your rights
Under Australian privacy law and applicable data protection regulations, you have the following rights:
- —Access — you may request a copy of the personal information we hold about you
- —Correction — you may update your profile information at any time through the platform
- —Deletion — you may delete your account and all associated personal information at any time
- —Wali update — you may update your wali contact details at any time (subject to a 30-day cooldown between changes)
- —Portability — you may request an export of your personal data in a machine-readable format
- —Complaint — you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
To exercise any of these rights, contact us at privacy@letaskunu.app
9. Children
Letaskunu is strictly for users aged 18 and over. Age is verified at registration via date of birth. Users who are found to be under 18 are immediately blocked from completing registration. We do not knowingly collect any information from persons under 18 years of age.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify all registered users by email and through an in-app notification before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions, requests, or complaints:
Email: privacy@letaskunu.app
Website: letaskunu.app
Platform operated by: LayersFlow Pty Ltd (ABN 81 694 343 998) on behalf of the Letaskunu waqf entity
Letaskunu · Privacy Policy · Effective April 2026