Last updated: July 16, 2026
This policy explains what Yahalaly processes when adults use the matchmaking platform, why it is processed, who may receive it, and the choices available to members. Matching profiles can contain highly personal information, so optional fields should be completed only when you are comfortable using them for discovery and compatibility.
This policy covers Yahalaly account registration, profiles, values answers, preferences, recommendations, photos, matches, messaging, guardian features, support, moderation, security, and service communications.
The data controller is YaHalaly · Legal operator: Firas Mbarek · Broel strasse 20, 50169 Kerpen, Germany · Email: support@yahalaly.com. Privacy contact: privacy@yahalaly.com.
Depending on the processing and your location, Yahalaly relies on performance of the service contract, legitimate interests in account security, safety, fraud prevention and reliable operation, compliance with law, and consent where required.
Optional profile fields can reveal religious belief or ethnicity. Registration records a separate explicit choice for sensitive-data processing before those matchmaking features are used. You then decide which optional fields to provide. Withdrawing consent stops future consent-based use, but does not make earlier lawful processing unlawful; withdrawal may require erasing the account where sensitive matching cannot otherwise continue.
Reports and safety records may contain sensitive information. They are processed where necessary to protect members, establish or defend legal claims, comply with law, or on another basis available under applicable data-protection law.
Optional public-site analytics runs on consent. Declining or withdrawing the choice does not affect account access. Withdrawal stops future collection; existing daily totals cannot be connected back to a person because the aggregate contains no visitor identifier.
Yahalaly uses structured profile fields, preferences, and values answers to filter and score possible introductions. Values alignment contributes up to 60 points, matching marriage intentions up to 25, and lifestyle or profile context up to 15. The viewer's own importance weights influence the values score, so two people can see different directional context.
Compatibility scoring does not use private message content to predict a relationship and does not make a legal or similarly significant decision. Members choose whether to like, pass, match, reveal a photo, message, involve a guardian, block, or report. A score is not a safety check or marriage prediction.
You can change preferences and values answers, inspect the factors shown with a recommendation, or decline any introduction. More detail is available on the public Matching Methodology page.
Yahalaly does not sell personal data and does not use third-party advertising or marketing trackers at launch.
Infrastructure or support processing may involve a country outside your own. Where a restricted international transfer occurs, Yahalaly must use an available legal mechanism such as an adequacy decision, approved contractual clauses, and supplementary safeguards where required. You may ask privacy@yahalaly.com for information about the mechanism relevant to your data.
Account and profile data, values, preferences, photos, matches, and messages are kept while the account is active because they provide the service. Session and one-time-token records are retained until expiry, revocation, use, and operational cleanup. Reports, moderation actions, email-suppression records, and audit data may be retained longer when reasonably necessary for safety, repeat-abuse prevention, legal compliance, or legal claims.
The in-product erasure control verifies the member's password and, when enabled, two-factor code; removes profile, preferences, values answers, photos and stored photo objects, interactions, messages, sessions, notifications, guardian links, and related account records; and replaces direct account identifiers with a restricted deletion tombstone. Billing events are unlinked from the member account.
When content was already attached to a safety report, a limited evidence snapshot may be preserved for safety review, repeat-abuse prevention, legal obligations, or legal claims. Audit records and the anonymized deletion tombstone may also remain for traceability. These exceptions do not permit continued matchmaking use of erased profile data.
Exact deletion schedules differ by record type and cannot be shortened where preservation is legally required. Yahalaly will publish a more specific operational retention schedule when automated erasure jobs are implemented and verified.
Optional public-site analytics is stored only as daily aggregate counters and is retained for up to 400 days. The consent-choice cookie lasts up to one year unless you replace or delete it sooner.
Send requests from the registered email to privacy@yahalaly.com. Yahalaly may request proportionate information to confirm the requester is the account holder and will respond within the period required by applicable law. Optional analytics can also be withdrawn immediately through Analytics choices; aggregate counters cannot be retrieved for or linked to an individual.
Yahalaly uses password hashing, HTTP-only session cookies, CSRF controls, role-based access checks, photo authorization, audit records, and operational monitoring. Access is limited by role and purpose. No online service can promise absolute security, so use a unique password, enable two-factor authentication when available, and report suspicious access promptly.
Yahalaly is for adults 18+ and does not knowingly offer matchmaking to children. The date of birth entered at registration is self-declared. If you believe a minor has created an account, contact safety@yahalaly.com so the account and related data can be reviewed promptly.
Material changes will receive a new effective date and, where appropriate, an in-product or email notice. Changes do not retroactively create consent where consent is legally required.
For privacy questions, rights requests, or the relevant transfer safeguard, contact privacy@yahalaly.com. For urgent platform misconduct, use the in-app report first and contact safety@yahalaly.com. Yahalaly is not an emergency service.
