Privacy Policy

Last updated: 26 September 2026

This document describes what the Hisn Alzawaj bot collects about you, why, who sees it, how long it stays, and how you delete it. It is written to be read, not signed: no twisted legal phrasing, and no promise that the service itself does not keep.

Who we are and what this covers

Hisn Alzawaj is a service for finding a marriage partner. It runs inside Telegram, through the bot @HisnAlzawaj_bot, and in the browser, through the web app app.hisnalzawaj.com.

This document covers the bot, the web app and this landing page. It does not cover Telegram itself — a separate platform with its own policy, which governs what happens to your account there.

What you give us yourself

Registration asks for the following. You type every answer, and you can change or clear it at any time from "Edit my data":

• Name, date of birth, gender.
• Nationality, country, city.
• Religion and school of thought.
• Education, occupation, income level.
• Marital status, children, acceptable marriage types.
• Physical description, smoking, hijab, languages spoken.
• A short bio, and the qualities you want in a partner.

Optional fields may be left blank. You appear less often in search results; nothing else is withheld from you.

What Telegram gives us — and what it does not

Telegram passes us three things about your account: your numeric ID, your username if you have one, and your app language.

It does not pass us your phone number, your contacts, or your chat list. Telegram gives bots none of that, so we do not hold it even if we wanted to.

If you sign up on the website — Google, Facebook and email

You can sign up to the web app with a Google or Facebook account, or with the Telegram account you use in the bot. What reaches us in each case:

• Google: your Google account ID, and your email address if Google has verified it.
• Facebook: your Facebook account ID, and your email address if it is shared with us. If it is not, we store an internal address in its place that no mail can reach.
• Telegram: nothing new — you sign in with your existing bot account, and the previous section applies to it.

We do not receive your password, your photo, your friends or contacts, or your posts from Google or Facebook, and we ask them for nothing beyond the above.

We use the account ID to recognise you when you come back, and the email address to tie your account to it. We send it no marketing, and we show it to no other user.

Signing up with an email and password is available by invitation only. The password is stored hashed, not as text, so we cannot read it ourselves.

What you then write under “Complete your profile” is stored exactly like a bot profile, and everything in this document applies to it: blurring, chat, publishing and deletion.

When a new account is created on the website, your browser goes through an automated check that tells people from bots, provided by a specialised protection provider. For that purpose alone it sees signals from your browser and device; all that reaches us is the result: passed or not.

Your web app session is a sign-in token kept in your browser. It is valid for one day and is erased when you press “Sign out”. The web app uses no cookies and no tracking or advertising tools.

What Google or Facebook do with your account on their side is governed by their own policies, not by this document.

What your use of the service creates

Your last-active time, your likes and matches, reports you send or that reach us about you, and the chat messages exchanged inside the bot — the last of these are deleted automatically after 30 days, detailed below.

Your photo — blurred until you allow it

Your photo is not shown clearly to anyone until you allow that person, request by request. The default everyone sees is a blurred version.

Permission can be temporary, with a viewing window that starts at the first actual opening rather than at the moment you approve — an approval given at 3 a.m. while the requester sleeps must not expire before they see it. Photos shown through a temporary window are deleted from the viewer’s chat once it ends.

You may withdraw permission at any time. Changing your photo revokes every previous permission at once, without your having to ask.

Identity verification — the video is not kept

Verification is entirely optional. You send a short video in which you perform a gesture and show a code issued to you at that moment.

In the bot, the video is not stored with us in any form: it is downloaded into working memory, sent for automated analysis, then released. Neither the video nor its Telegram identifier is written to our database.

On the website one thing differs: a browser can only hand the video over for analysis through our server, so it is held in our database temporarily until it is analysed — usually seconds, and at most half an hour if analysis fails — and then deleted. The website never shows it to anyone, you included. If the decision needs human review, it is sent to the moderator alone before it is deleted.

What remains is the decision alone: approved, referred to human review, or rejected — with its reason and its time.

The card published on our pages

To help you reach a partner sooner, we publish an introductory card about you on our channel and official pages. It carries:

• Your first name only — no family name.
• The public fields of your profile: age, nationality, marital status and the like.
• A generic illustrative image based on your gender — never your own photo, not even a blurred copy of it.

No phone number or contact handle of yours is published. Anyone who wants to reach you goes through the bot.

Publishing happens only with your explicit consent at the end of registration, in the bot or on the website. We do not promise to remove what is published from every public platform: some offer no automatic deletion.

Chat messages

Messages between two parties pass through the bot and are stored with us for 30 days, then deleted automatically. They are not a permanent archive, and they are not kept beyond that period for any purpose.

There is one reason for this and no other: handling reports. Someone who says they were mistreated cannot be given justice if nothing remains of what was said. Messages are not read except on a report or a suspicion of abuse.

That is why the period is 30 days and no more: someone who was mistreated reports it within days, so keeping messages any longer increases what could be lost in a breach without increasing what gives anyone justice.

Payments

Premium membership is paid with Telegram Stars or with cryptocurrency. Both happen outside our bot, at the provider.

So we never see or store card or wallet details. What stays with us is the transaction identifier, the amount, the provider name and the date — the minimum needed to activate your membership and to request a refund if one is due.

Who sees your data

• Other users: what appears on your profile and in search results.
• Service moderators: on a report, a verification review, or a complaint.
• Telegram: the platform the whole service runs on.
• Google: automated analysis of the verification video — not kept on our side after the check, as described above.
• A machine translation service: translating your bio when someone views it in another language, and when your card is published to an English destination.
• A cloud hosting provider: running the server and the database.
• Publishing platforms — Telegram, Facebook, Instagram, Threads, YouTube and TikTok: only the card described above, and only for those who have not switched publishing off.

We do not sell your data, do not hand it to advertisers, and do not build targeted advertising on it. None of that is asked of you in exchange for using the service.

Google is the one operational provider we name here, because the verification video is the most sensitive thing that passes through us — and a promise not to store it is not credible if you do not know who receives it. Anyone who asks for the names of the others may write to us.

For those who sign up on the website: Google or Facebook — whichever you chose to sign in with — knows that you signed in to us, and the bot-protection provider sees the check when an account is created. Details under “If you sign up on the website”.

How long your data stays

It stays as long as your account does — because the service itself is showing your profile to those who match what you are looking for.

Limited records survive deletion: moderation entries and the payment log, to the extent needed for accounting and to keep a banned account from returning immediately under a new one.

Deleting your account — thirty days, then erasure

Use /delete, or the "Delete my account" button on your profile screen. Once you confirm, your account is hidden from everyone at once and kept for thirty days: if you come back to the bot or sign in to the website within them, you find it as you left it, with no need to register again. After that, the following is erased for good:

• Your entire profile, photo and bio included.
• Your likes, matches, conversations and their messages.
• Photo permissions you granted and requested.
• Your pending notifications and your browsing queue.

At the same time we try to take down whatever was published about you on our channel and pages, since deleting the account withdraws consent. But some platforms offer no automatic deletion, so what was published there may remain.

From the web app: the “Delete my account” button on your profile screen erases all of the above, together with the link between your account and Google or Facebook. Your Google or Facebook account itself stays as it is — it lives with them, not with us.

Your rights, exercised by you

• Access and correction: "Edit my data" in the menu.
• Full deletion: the /delete command.
• Publishing on our pages: by your consent at the end of registration; it is withdrawn only by deleting your account, within what each platform allows.
• Stop reminder messages: from the message itself.
• Withdraw photo permission: the photo privacy screen.
• A question, complaint, or request the above does not cover: write to us.

None of these requires writing to us or waiting for a reply. They were all made one tap away inside the bot deliberately.

Age

The service is for those aged 18 and over. Any account we find to belong to someone younger is deleted.

Security — and what we do not promise

Connections to our servers are encrypted, and administrative access to data is limited to those who need it for their work.

No system is perfectly secure, so we will not promise what we cannot guarantee. What we do guarantee is twofold: that we do not collect what we do not need, and that the most sensitive thing that ever passes through us — your verification video — is not kept after it is checked.

Changes to this document

If what we do changes, we change this document and update the date at its top. A material change is announced on our channel, not slipped in here quietly.

Contact

Write to us inside the bot @HisnAlzawaj_bot — the fastest route, since your account is already known there and you need to prove nothing.

You will also find us on our channel @Hisn_Alzawaj.

Back to the home page