Quietly, by design.
Taaruf is built to host one of the most private conversations of your life. The data choices behind it are made with that in mind.
What we collect
The minimum we need to run a session: the answers you actually write, your chosen display name, and — only if you make an account — your email address. You can use Taaruf without making an account at all. We do not ask for, or store, anything we don't need. If you donate, we keep the amount and the payment's reference, plus a name and message if you leave them — never your card details, and we do not ask for an email address for a donation.
What we don't collect
- No IP addresses, browser fingerprints, or device details — we read none of it, and none of it reaches our database. One caveat, because it is true of every website: our host sees the IP and browser of each request in its own short-lived server logs, simply because that is how a page gets delivered. We do not collect it, export it, or connect it to anything you write.
- No selling or sharing of your data with advertisers, ever.
- No third-party analytics that profile you across the web.
- No public profiles. There is no feed. There is no leaderboard.
Where it is held
Your sessions are stored in the EU. We would rather be precise than reassuring here: the companies that run our backend and our hosting are American, and their terms allow data to reach the United States for things like monitoring and support, under the EU's Standard Contractual Clauses. So "stored in the EU" is the promise we can make; "never leaves the EEA" is not, and we are not going to make it. If you sign in with Google, Google handles that step in the United States — you can skip it by using an email and password, or staying anonymous. If you donate, the payment is handled by Mollie in the Netherlands. The full detail is in the in-app privacy policy.
Who can see your answers
Only the people in your session — you, the person you are doing it with, and a mahram, if one of you invites them. Your answers are not revealed to the other side until you have both answered. Nobody at Taaruf reads them.
Keeping or deleting your answers
Sessions delete themselves. A session goes three days after the last thing anyone does in it, and either of you can extend it if you need longer. Deletion is permanent and clears both sides' answers — though your own finished sessions stay in your history on your own device. To delete an account outright, email us and we will do it; there is no self-service delete button in the app yet.
Security
Data is encrypted in transit and at rest. Every read and write is authorised on the server, one operation at a time. Session codes and mahram tokens are generated with a cryptographic random number generator, and passwords are stored using industry-standard cryptographic hashing. We treat your trust the way we'd want our own treated.
Contact
Questions about your data, or a request to delete it, can be sent to support@taaruf.dev. We answer data requests within one month, and usually much sooner. The full privacy policy and terms are in the app.