Privacy Policy

1. Accountability and contact

FaithPair is accountable for personal information under its control. The Privacy Officer can be reached at admin@faithpair.ca. No personal residential address is published.

2. Information collected

• Account, identity and contact information: email, first name, hashed password, verification status and language preference.
• Eligibility, profile and photos: 18+ confirmation, age, city, occupation, biography, languages and chosen profile content.
• Relationship and potentially sensitive information: faith, beliefs, values, preferences, life plans, non-negotiables, FIND, AVIE and Marriage Compass responses where applicable.
• Consent, onboarding state and derived information needed for Pair formation, including private scores or interpretations.
• Technical and security data reasonably needed to operate the service: sessions, device or platform details, security logs, technical errors and transactional-email delivery data.
• Communications with FaithPair, reports, support requests and privacy requests.

3. Uses

• Create, authenticate, verify and secure accounts and confirm eligibility.
• Create and display profiles according to member choices; save and resume onboarding.
• Provide FIND and, with valid FIND consent, assess compatibility and personalize candidate, profile and Pair opportunity ordering.
• Operate, secure, debug and improve the service; prevent abuse and respond to reports.
• Send transactional messages, handle support or privacy requests and comply with legal obligations.

4. Public profile and private information

Fields expressly presented as part of the public profile may be shown to eligible members. Responses marked “private alignment” and private interpretations or derived data are not returned by public-profile APIs.

Sensitive information does not become public because it is used for Pair formation. Transactional emails do not include raw private AVIE, Marriage Compass or FIND responses.

5. Pair formation, profiling and FIND consent

FaithPair uses information you choose to provide in FIND to assess relationship compatibility and personalize the profiles or Pair opportunities presented to you. Some FIND information may be sensitive, including information about beliefs, values, relationship preferences and life plans. Sensitive FIND answers are not displayed publicly unless a field is expressly identified as part of your public profile.

Before this processing, FaithPair requests separate, explicit and versioned FIND consent. These features do not make medical, psychological, legal, employment, credit, insurance or health decisions and are not professional diagnoses.

6. Withdrawing FIND consent

You may withdraw consent under Settings > Privacy & Data. Pair formation and new derived processing stop immediately; the basic account may stay active. Raw and derived private FIND information is deleted from live systems within 30 days. FaithPair keeps only minimal consent evidence, without deleted answers. Later use of FIND requires fresh consent and re-entry; old answers are not silently restored.

7. Disclosure and commercial use

FaithPair does not sell or rent identifiable member information or private FIND information to data brokers, advertisers or other third parties. FaithPair may use aggregated or anonymized information for analytics, research, service improvement and, where legally permitted, commercial or statistical insights, provided that such information does not reasonably identify individual members.

Private FIND information, including religion, beliefs, values, preferences and compatibility data, is not used to create third-party advertising audiences or target third-party ads. FaithPair does not bundle marketing consent with signup, the Terms, this Policy or FIND consent. Resend is used only for transactional messages.

8. Providers and cross-border processing

FaithPair uses providers to operate the service: Cloudflare for runtime, delivery and security; Neon/PostgreSQL for the database; and Resend for transactional email. The current provider list and known geographic details are on the Subprocessors page.

Information may be processed outside Canada and be subject to the laws where a provider handles it. The known staging Neon database is hosted on AWS in us-east-2, United States. Cloudflare uses its global network; no Data Localization service is enabled and, without regionalization, HTTPS traffic may be decrypted and processed in its data centres globally. Resend’s primary processing operations take place in the United States and information may be transferred to and processed there.

9. Retention

• Unverified account: no more than 30 days after creation.
• Active account and core profile: while active and needed; deletion from live systems no later than 30 days after a valid deletion request.
• Public profile and photos: while active and required; deletion no later than 30 days after account deletion.
• Private FIND answers and compatibility data: only while consent is active and the information is needed; deletion no later than 30 days after withdrawal or account deletion.
• Minimal consent evidence: up to 3 years after closure or withdrawal, without underlying sensitive answers.
• Privacy requests or complaints: up to 3 years after resolution and limited to what is necessary.
• Security and audit logs: no more than 12 months unless a specific incident or legal requirement reasonably justifies longer.
• Resend email data: retained for 30 days on standard plans; flexible retention may be available on Enterprise. Resend’s DPA provides for deletion of customer/Member data within 90 days after the account or agreement ends.
• FaithPair-controlled recovery history or backups containing personal data: no more than 30 days. The current technical Neon history window must be confirmed before launch.
• Truly anonymized information: longer retention only when a member cannot reasonably be identified or re-identified.

10. Account deletion

Account deletion is requested under Settings > Privacy & Data and requires explicit confirmation. Normal authenticated use, discovery, Pair formation and Pair eligibility stop immediately. FaithPair marks the deletion state, removes profile, FaithPair-controlled photos and private or derived data from live systems within 30 days, and keeps a minimal tombstone so a backup restoration cannot silently reactivate the account.

11. Access, correction and assistance

You may request access, correction, FIND consent withdrawal or privacy assistance under Settings > Privacy & Data or by emailing admin@faithpair.ca. FaithPair retains only metadata reasonably required to track and document a request. Identity verification and limits permitted by applicable law may apply.

12. Safeguards

FaithPair uses reasonable administrative and technical safeguards, including password hashing, protected sessions, access controls, private responses that are not publicly cached, and separation of public and private fields. No safeguard guarantees absolute security; promptly report suspected unauthorized access.

13. Cookies and local storage

The web service uses a necessary member-session cookie, protected from script access where the member session requires it, plus a cookie and browser local storage to remember the FR/EN choice. The mobile application may use secure device storage to restore a session. This Policy does not add advertising SDKs or marketing tracking consent.

14. Adults and changes

FaithPair is limited to adults 18 and older. A material Policy change receives reasonable notice and, where appropriate, renewed versioned acceptance before protected features are available.