Privacy, in plain language.

Information you provide

• Account email, display name, password hash, and confirmation that you are 18 or older.
• Profile details, interests, activities, birth date, city, and photos you choose to upload.
• Messages, invitations, meeting preferences, blocks, reports, and support communications.
• Approximate search-area information used only after an invitation is accepted.

Payments, identity checks, and media

Stripe processes card details; ChaiHabibi stores order, payment, refund, and entitlement identifiers—not card numbers. If you choose an identity check, Stripe collects and handles the identity document and any other evidence required by the configured flow. ChaiHabibi stores only the Stripe session reference, result status, and timestamps—not document images, selfies, ID numbers, or verified details. Profile photos are kept in private storage, re-encoded to remove embedded location/device metadata, and hidden from other members until approved. Video upload is not currently available.

Accepted-invitation planning locations

After both people accept, each person may submit only their own current location for venue planning. ChaiHabibi rounds each point to three decimals and makes it unusable after 120 minutes. Expired rows are removed while planning or by the next scheduled daily cleanup, so physical deletion can occur later than expiry. ChaiHabibi never shows a point to the other participant and sends both approximate points to SafeSpotEngine only to balance venue travel.

Service providers

We use managed providers for hosting/database and private media storage (Vercel), payments and optional identity checks (Stripe), transactional email (Resend), and accepted-invitation coffee-shop searches (SafeSpotEngine). Each receives only the data needed for its job. Profile interests, media, chat, identity evidence, and precise unrounded coordinates are not sent to SafeSpotEngine.

Safety and operations

Authorized staff can review reports, sanitized pending photos, and identity-check status—not identity documents. Staff media access and administrative changes are logged. Suspending or deleting an account revokes its identity badge. An identity badge is not proof of age, a background check, or a guarantee of conduct or safety; a venue suggestion is not a safety certification.

Retention and your choices

We retain active account data while providing the service, payment/audit evidence as required for fraud, tax, or legal obligations, and short-lived delivery records for operations. Delivered or suppressed invitation/account email records are removed after the configured retention period. You can hide your profile, remove media, block members, and request account assistance.