Privacy Policy

Introduction

Welcome to BibahoBangla ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our matrimony service through:

• our website, bibahobangla.com;
• our web application, app.bibahobangla.com;
• our Bibaho Bangla Matrimony apps for iOS and Android.

By using BibahoBangla, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Information You Give Us

Account Information

• Name (the name shown on your profile)
• Mobile phone number, which is your login id and is confirmed by an SMS one-time code at sign-up
• Password, stored only as a one-way hash
• Email address, only if you choose to provide one, for example when contacting support
• Whether the profile is for yourself or for someone you represent, and the profile type (General or Islamic)

Biodata (Profile) Information

To be matched, you fill in a biodata. It contains:

• Personal details: date of birth and age, gender, marital status, number of children, height
• Education and career: education level, occupation, employer, annual income
• Where you live: country, district and area, citizenship (typed by you; we do not use your device's location)
• Religious information: your religion. This is sensitive information, and we process it only because a matrimony service cannot work without it. You provide it with your consent when you fill in the biodata.
• Languages known
• Family details: parents' occupations, number of brothers and sisters
• Partner preferences: the age range, religion, education and occupation you are looking for. We save these so your home screen shows matching profiles, and we use the saved filters and your searches to improve matching.

Photos and Videos

• Profile photo and gallery photos you upload from your camera or photo library.
• Automatic screening: every uploaded photo is checked by automated software before it is accepted. The check confirms a face is present and rejects nudity, offensive content and pictures that are mostly text (such as posters). Our staff may also review photos.
• Face verification recording: see the dedicated section below.

Communication and Activity

• Messages: the private chat messages you send and receive in the app, stored on our servers so both members can read them
• Interests, shortlists, photo-view requests and the decisions you make on them
• Blocks and reports you submit about other members
• Support tickets and other messages you send to our support team

Payments and Purchases

• Purchase history: the packages you buy, wallet top-ups, wallet balance, contacts unlocked, and the dates and amounts
• bKash payments: you enter your bKash number and PIN on bKash's own secure pages, never in our app. We receive and store only the bKash payment id, the amount, and whether the payment succeeded.
• On iOS, purchases may be made on our website and are then reflected in the app.

Face Verification (Biometric Data)

You can earn a "verified" badge by completing an optional face verification in the app. Here is exactly what happens:

• You point the front camera at your face and follow on-screen instructions (turn left, turn right).
• Camera frames are sent in real time to our own verification server, which checks that a live person is present and that the face matches your profile photo. This involves biometric processing of your facial features.
• A short recording of the session is stored with your account as proof that the verification took place. Recordings of failed attempts may be kept temporarily so we can investigate abuse and improve the check.
• Face data is used only for verification and fraud prevention. It is never used to identify you elsewhere, never shared with third parties, and never used for advertising.
• Verification is optional. You can use the app without it, and you can ask us at any time to delete your verification recording.

By starting the verification, you consent to this processing of your biometric data.

Information Collected Automatically

• Device and app information: device model, operating system and version, app version, language, and an installation or device identifier we assign to your device
• Push notification tokens issued by Apple, Google (Firebase Cloud Messaging) and Expo, so we can deliver notifications to your device
• IP address and browser or user-agent string, used for security, fraud prevention and troubleshooting. Our apps do not use location services. On our website, our analytics and advertising tools may infer an approximate location from your IP address.
• Usage information: app opens, screens viewed, features used, searches performed and saved search filters, and how you interact with the service
• Crash and error reports: crash logs and technical error reports (including device model, OS version, app version and your account id), collected through Google Firebase Crashlytics and our own error logging
• Advertising identifier (Apple IDFA or Google Advertising ID), only when you allow tracking, as described in the next section
• Cookies and similar technologies on our website, described below

Advertising Measurement and Tracking

We run advertisements for BibahoBangla on Meta platforms (Facebook and Instagram) and Google. To know whether those ads work, we use the following tools:

• Meta (Facebook) SDK in our mobile apps and the Meta Pixel on our website, which report app events such as app open, registration completed, content viewed, checkout started and purchase made (with the amount).
• Meta Conversions API, through which our servers send Meta the same events together with a hashed (SHA-256) copy of your mobile number and account id, so that Meta can match the event to the ad that brought you to us. Meta cannot read your number from the hash.
• Google Ads and Google Analytics tags on our website.

Your choice on iOS: when you first open the app we ask, through Apple's App Tracking Transparency prompt, whether we may track you. If you choose "Ask App Not to Track", we do not share your device's advertising identifier, and the events we still send to Meta are flagged so that Meta uses them only for aggregated measurement and not for ad targeting. You can change this at any time in iOS Settings under Privacy & Security, then Tracking.

Your choice on Android: you can reset or delete your advertising id in Android Settings under Privacy, then Ads.

We do not show third-party advertisements inside the app, and we do not sell your data to advertisers.

How We Use Your Information

Service Delivery

• Create and manage your account, and sign you in with your mobile number and password
• Display your profile to potential matches and show you matching profiles
• Facilitate communication between members: interests, chat, contact sharing and photo-view requests
• Process your purchases and keep your wallet balance and package status accurate
• Send SMS one-time codes and deliver push notifications

Safety and Security

• Verify that members are real people (mobile confirmation and optional face verification)
• Screen photos and videos automatically and review reports from members
• Detect and prevent fraud, abuse, spam and security threats
• Enforce our Terms of Service

Improvement, Personalization and Analytics

• Understand how the service is used and fix crashes and errors
• Personalize your home screen and recommendations from your saved preferences and searches
• Develop new features and measure audience size and characteristics

Marketing

• Measure and attribute our advertising, as described in the section above
• Send reminders and promotional messages by SMS, email or push notification, which you can opt out of at any time

How We Share Your Information

With Other Members

Your profile and biodata are visible to other registered members. You control the most sensitive parts with the privacy settings in the app: you can lock your profile photo so that other members must ask your permission to see it, and lock your mobile number so it is only shared when you allow it. Your messages are visible only to the member you are chatting with.

With Service Providers

We share information with companies that help us run the service. They may use it only to provide their service to us:

Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes, court orders, or government requests
• Enforcement of our terms and conditions
• Protection of our rights, property, or safety, or the safety of our members
• Investigation of fraud or security issues

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to this privacy policy.

Your Choices and Controls

• Photo lock and number lock: in Settings, hide your photo and mobile number until you approve a request
• Deactivate your profile: in Settings, hide your profile from everyone and reactivate it later
• Block and report: block any member at any time and report profiles that break our rules
• Notifications: turn push notifications off in the app or in your device settings
• Tracking: decline or withdraw tracking permission in iOS Settings, or reset your advertising id on Android
• Marketing messages: contact us to stop promotional SMS or email
• Cookies: control website cookies in your browser settings
• Delete your account and data: see our Data Deletion Policy or write to support@bibahobangla.com

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in transit: all traffic between your device and our servers uses SSL/TLS
• Password protection: passwords are stored only as one-way hashes
• Access controls: access to member data is limited to authorized personnel
• Secure storage: data is stored on servers protected by firewalls, with mobile numbers of other members hidden until they choose to share them
• Regular audits: security assessments and vulnerability testing

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security measures.

Your Privacy Rights

You have the following rights regarding your personal information:

• Access: request a copy of your personal data
• Correction: update or correct inaccurate information, most of it directly in the app
• Deletion: request deletion of your account and data, including your face verification recording
• Restriction: limit how we use your information
• Portability: receive your data in a portable format
• Objection: object to certain processing activities, including marketing
• Withdraw consent: withdraw consent for processing that is based on consent, such as face verification or tracking

To exercise these rights, please contact us at support@bibahobangla.com or visit our Data Deletion Policy page.

Cookies and Tracking Technologies on the Website

Our website uses cookies and similar technologies:

• Essential cookies: required for basic site functionality and to keep you signed in
• Analytics cookies: Google Analytics, to understand how the site is used
• Advertising cookies and pixels: the Meta Pixel and Google Ads tag, to measure our advertising

You can control cookies through your browser settings. Disabling cookies may limit some features of our website. Our mobile apps do not use cookies; their tracking controls are described in the "Advertising Measurement and Tracking" section.

Data Retention

• Active accounts: your data is retained while your account is active
• Deactivated profiles: kept so you can reactivate, until you ask us to delete the account
• Deleted accounts: permanently deleted within 90 days of your request; photos and verification recordings are removed from our servers as part of this
• Payment records: kept as long as required by accounting and tax rules
• Crash and analytics data: kept for the retention periods of Firebase and Meta, and no longer than needed for analysis
• Backup systems: data may persist in backups for up to 90 days
• Legal requirements: some data may be retained longer for legal compliance

Children's Privacy

BibahoBangla is intended for adults aged 18 and above. Every biodata requires a date of birth showing an age of at least 18. We do not knowingly collect information from individuals under 18. If you believe a minor has provided us with personal information, please contact us immediately and we will delete it.

International Data Transfers

Our servers are located in Bangladesh and the European Union, and some of our service providers (such as Google, Meta, Expo and Twilio) process data in other countries, including the United States. Whenever your information is transferred outside Bangladesh, we ensure appropriate safeguards are in place to protect it in accordance with this privacy policy.

Third-Party Links

Our platform may contain links to third-party websites or services, such as bKash's payment pages. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

Push Notifications

With your permission, we send push notifications about:

• New matches, interests and profile views
• Messages from other members
• Photo-view requests and their approval
• Verification reminders, service updates and announcements

You can disable push notifications in your device settings or in the app at any time.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Displaying a notice in our apps
• Sending a notification where the change affects how we use your data

Your continued use of our services after changes indicates acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

• Email: support@bibahobangla.com
• Phone: 09639-224782
• Address: Dhaka, Bangladesh