Privacy Policy

The UNOAH application and related services (the “Service”) are operated and published by ARIANEXT TECHNOLOGIES PRIVATE LIMITED (“Arianext”, “we”, “us”, “our”), a company incorporated under the Companies Act, 2013, which is the Data Fiduciary responsible for your personal data under India’s Digital Personal Data Protection Act, 2023.

UNOAH is a brand owned by UNOAH AI LTD, a company licensed in the Dubai International Financial Centre (DIFC) (Commercial Licence No. CL13235), on whose behalf Arianext develops and operates the Service.

For any privacy matter, contact privacy@unoah.com.

Grievance Officer (in accordance with the DPDP Act, 2023):

Our website carries a form called “Build Your Covenant Profile”. You can fill it in and send it without an account and without signing in. The rest of this policy is written for members who hold an UNOAH account and a Union profile, and it does not describe what happens when you use that form. This section does.

What the form collects

When you submit it, we receive:

There is nothing else. We store only the fields listed above, and anything else sent with the form is discarded. We do not ask you at this stage for your date of birth, your address, an identity document or any payment detail, and you should not put them in the free-text box.

What we check before accepting it

We check that a submission comes from a person rather than an automated script, using Cloudflare Turnstile, which receives technical signals from your device and your IP address. We also limit how many submissions and how many file uploads one internet address may make in an hour; that count is held for the hour and then expires, and your IP address is not written into the record of your enquiry.

There is no account, and no profile

Submitting the form does not create an UNOAH account and does not create a Union profile. What we store is an enquiry: your name, the contact detail you gave, your free text, the files you attached, and a status our staff move from new to contacted, and then to converted or dismissed. We do not use your phone number or your email address to look for an existing UNOAH account, and we do not join your enquiry to one.

An enquiry is not published anywhere. No member can see it, it appears in no search result, it is not indexed by search engines, and no part of the Service returns the files you attached to any caller. It becomes a Union profile only if you sign up yourself and build one — we cannot turn an enquiry into a profile on your behalf, and we do not. Until you do, you have no Union profile, no shortlist and no verification record.

A person reads it

A member of UNOAH staff reads what you wrote and opens the document you attached. That is the purpose of the form: a person, not a machine, decides whether Union is a fit for you and gets in touch with you. Nothing you send through it is sent to an AI provider — not to Google, not to Amazon Textract, not to any other — and nothing in it is scored, ranked or automatically decided. The files are held in private storage that is not reachable from the internet and is readable only by the staff reviewing them, and those staff act under confidentiality obligations.

What we use it for

We use an enquiry to contact you about Union, using the phone number or email address you gave us, and to decide whether to invite you to sign up. We do not use it to advertise to you, we do not sell it, and we do not share it with anyone outside UNOAH other than our hosting provider, which stores it for us. It is held in our India (ap-south-1) region, like the member data described in section 11.

The legal basis is your consent, given when you submit the form, and nothing else. You may withdraw it at any time by writing to privacy@unoah.com.

How long we keep it, and how to have it deleted

We keep an enquiry, and the CV and photographs attached to it, for thirty days from the day you send it. At the end of that period both are deleted. If you sign up before then and we help you build a Union profile, the enquiry and its files are deleted at that point instead, and your profile is covered by the rest of this policy — there is no copy of the enquiry left behind. Nothing about an enquiry is kept beyond thirty days except a record that it was deleted, which holds none of the details you sent.

You can ask us to delete an enquiry at any time before that, by writing to privacy@unoah.com from the email address you used or naming the phone number you gave. There is no self-service control for it, because there is no account to sign in to. We delete the enquiry and the files attached to it, and tell you when it is done. You can also ask us for a copy of what you sent, or ask us to correct it. If an enquiry has been submitted in your name by somebody else, tell us and we will remove it.

This section describes what we hold about you as a member — once you have an UNOAH account and are building or running a Union profile. If you have not signed up and have only sent us the form on our website, section 2 is the one that applies to you. Everything below comes from you — what you type, select, upload, or say into the app. We do not buy personal data, we do not obtain it from data brokers, and we do not build your profile by watching your behaviour elsewhere.

Your account

Union uses your single UNOAH account, the same one that signs you in to any other UNOAH product. From it we take your name, date of birth, gender and Christian denomination to start your Union profile. Your email address, phone number and sign-in method stay with the account and are never shown on your profile.

Your profile

The profile you build in the Union wizard. In full:

Two of these are sensitive and we treat them as such throughout this policy. Your Christian denomination and everything you tell us about your faith are data revealing religious belief — special-category data under Article 9 of the UK and EU General Data Protection Regulation. Your preferred gender for a partner is treated by us, and by the app stores, as revealing sexual orientation. Free-text answers are unbounded by nature, so we treat anything you write there as sensitive too.

Your city, not your location

Union asks for a city, which you pick from a Google Places suggestion list. We store the place identifier, the city name and the country code. We do not collect GPS coordinates, we do not track your device's position, and we never show another member how far away you are.

Verification

If you choose to verify part of your profile, we collect what that check needs. Section 5 sets this out in full, including what the identity check sends to our verification provider and what comes back.

Your CV, if you upload one

You may upload a CV or résumé to fill the wizard in automatically. The file is read once to extract a handful of fields and is then deleted — see sections 5, 7 and 13.

How you use Union

We do not use your Union profile to advertise to you, we do not sell it, and we do not share it with advertisers or data brokers.

Automated decision-making

Union does not make automated decisions about you that produce legal effects or similarly significantly affect you. Search filters are applied mechanically — they match the criteria a member has set, and no model judges, scores or ranks you as a person. Nothing in Union assigns you a compatibility rating, a desirability score or a segment, and no automated process decides whether you may use the Service.

Verification is optional. You can build, publish and use a Union profile without completing any check. Where you do complete one, other members see only that it passed — a status, never the document, the images or anything extracted from them. The documents you upload are not returned by any part of the Service to anyone, including you.

Identity — Didit

The identity check is carried out by Didit, a specialist identity-verification provider, acting as our processor. Didit runs the whole capture itself: its own screen asks you for your identity document and for a short live face check, and its own systems decide the outcome. The document images, your portrait, your selfie, the liveness video and the face template computed from them are collected by Didit, not by us.

What we send to Didit when you start the check:

That is all. We do not send Didit your name, your date of birth, your email address, your phone number, your photographs or anything from your profile.

What Didit sends back, and what we keep:

We deliberately keep nothing else. Didit's response also carries the name, date of birth and document number it read off your document, and your portrait; our systems discard every one of those fields before anything is written down. Your identity document and your face are never stored in an UNOAH database.

Two consequences you should know about. Didit analyses the network connection the check comes from, so it processes your IP address. And where its automated checks raise a warning, a trained reviewer at Didit examines the session, including your document and your face images, before deciding — a human being sees them in that case. Didit processes this data only to perform the check for us: it does not use it to train models and it does not share it with its other customers.

Didit's own privacy policy is at https://didit.me/terms/privacy-policy/. Depending on where the check is performed, the contracting entity is Didit Identity Spain, S.L. (Calle Nápoles 227, P. 1, 08013 Barcelona, Spain) or Didit Identity, Inc. (1111B S Governors Ave STE 34855, Dover, Delaware 19904, United States).

Education, employment and church affiliation

These three checks work differently: you upload a document and a member of our staff reviews it. No third-party provider is involved and no automated decision is made. What you give us is:

The uploaded file is held in private storage that is not reachable from the internet, is readable only by the staff reviewing it, and is never returned by any endpoint to any caller. Reviewers are UNOAH staff acting under confidentiality obligations, and every review is recorded in the audit trail.

The pastor's name you provide is personal data about someone who is not a member of Union. We hold it only as evidence supporting your check. If a pastor named in a submission asks us to remove their details, we will do so — privacy@unoah.com.

We do not ask for and do not want your salary, your bank details, your Aadhaar number or a photograph of an Aadhaar card. Do not upload them. If a document you send contains information a check does not need, redact it first.

Union lets you create a profile for your son or daughter, your sibling or a friend, because that is how many families approach a marriage search. When you do, almost everything in that profile — their name, photograph, faith, family, education, work, health of relationships, and what they want in a spouse — is personal data about them, not about you.

What we require of you

Their rights come before yours

In law the person the profile describes is the one the data belongs to. They may contact us directly at privacy@unoah.com and ask to see the profile, to correct it, to have it taken down, or to have it transferred into an account of their own — and we will act on that request whether or not you agree. We will act on it even if we cannot reach you. If someone tells us a profile about them was created without their agreement, we will take it out of circulation while we look into it.

Note also that an identity verification confirms the identity of the person who completes it. If you complete it on an account holding a profile about someone else, it verifies you, not them.

Three parts of Union are powered by generative AI. All three are optional, all three are things you start, and Union works without any of them. This section sets out exactly what leaves the Service when you use them, who receives it, and what it is used for.

CV auto-fill

If you upload a CV to fill the wizard in, the file is stored briefly in private, temporary storage and read once. Where the document is a scan rather than text, its pages are converted to images and sent to Amazon Textract to be read. The text is then sent to Google's Gemini API, which returns a small set of suggested fields: name, date of birth, job title, employer, education level and detail, institution and a city hint. Those suggestions are shown to you to accept, edit or discard — nothing is written to your profile until you accept it. The file itself is never written to our database and is deleted from temporary storage shortly after it is read.

“About me” drafting

If you ask for help writing your introduction, the coded answers you have given in the wizard — your denomination, faith practices, values, family outlook and the rest — are sent to Google's Gemini API, which returns a first-person draft of up to a thousand characters. The draft is shown to you for review and you may accept it, rewrite it, or write your own instead. Nothing is published until you accept it, and you can edit or clear it at any time afterwards.

Describing the partner you are looking for

You may describe what you are looking for in your own words, by speaking or by typing, instead of setting each filter by hand. If you speak, your device turns your speech into text; on Apple devices this may be done by Apple Inc. on Apple's servers. That text is sent to Google's Gemini API, which returns structured search criteria — an age range, denominations, cities, marital status and so on. Those criteria are shown to you and are used only to filter the profiles you see. They are not stored as a profile of you, and they say nothing about you to anyone else.

What is never sent

Who receives it and on what terms

The AI provider is Google LLC, through the Gemini API, and Amazon Web Services, Inc. for the Textract step when a CV must be read from a scan. Both act as our processors and use what they receive for one purpose only — to return the result shown back to you. The API terms we operate under do not permit either provider to train models on your content. If that ever changed, we would ask for your consent again before continuing.

The legal basis for sending anything to an AI provider is your explicit consent, and nothing else. We ask for it separately, before the first time an AI feature sends anything, because what a Union profile contains routinely reveals religious belief — special-category data under Article 9 of the UK and EU GDPR. You may withdraw that consent at any time, as easily as you gave it, in the app or by writing to privacy@unoah.com. Withdrawing it turns the three features off and leaves everything else in Union working; it does not undo processing already carried out.

Union is a closed service. Nothing in it is public, none of it is indexed by search engines, and nobody who has not signed in can see any part of a member's profile.

Before you publish

While you are still building your profile it is visible to nobody but you. It becomes visible to other members only when you have accepted it and added at least one photograph. Until both are true it appears in no one's search results.

Once you publish

Signed-in members whose stated preferences your profile fits can find it and open it. They see your profile content — your name, photographs, age, city, denomination and faith, family and lifestyle answers, your “About me”, and which checks you have passed.

They never see, at any stage:

Taking it back

You can edit any field, remove any photograph or withdraw the whole profile from circulation at any time from within the app. A withdrawn profile stops appearing in search results immediately.

What we cannot control

Another member can photograph or screenshot what they see, and can copy it elsewhere. No matrimonial or dating service can prevent that, and neither can we. Please put in your profile only what you would accept a stranger keeping a copy of, and report misuse to us at privacy@unoah.com so that we can act on it under our Terms.

We process your Union data on lawful grounds recognised by applicable law. Your consent is the principal one, and it is the only one we rely on for anything sensitive.

You may withdraw any consent at any time, as easily as you gave it, from within the app or by writing to privacy@unoah.com — including, under India's DPDP Act, through a registered Consent Manager. Withdrawal does not affect processing already carried out. Withdrawing consent for your faith answers means Union can no longer show your profile to anyone, because matching on faith is what the Service does; we will tell you that before you confirm.

If you believe we have handled your data wrongly, please tell us or our Grievance Officer first — the contact details are in section 1. You may also complain to the Data Protection Board of India, or to the supervisory authority where you live, and you may seek a judicial remedy.

We do not sell your personal data and we do not share it with advertisers or data brokers. Other than what other members see on your published profile, we share it only with providers who process it on our behalf under written terms:

We may also disclose personal data where the law requires it — to a court, a regulator or law enforcement acting under proper authority — and where it is necessary to investigate fraud or to protect the safety of a member or of the public.

Your Union profile, your photographs and your verification documents are stored and processed in our India (ap-south-1) region. Some of the providers named in section 10 process data outside India: Didit performs the identity check from the European Union or the United States depending on the contracting entity, Google processes the AI requests and the city suggestions on its own infrastructure, and Apple's speech-to-text may run on Apple's servers. Each of them is bound by written terms requiring protection equivalent to that set out in this policy. Any cross-border transfer is carried out in compliance with applicable restrictions, conditions or government directions under the DPDP Act, the UAE PDPL, the KSA PDPL and other applicable laws.

We retain your personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or irreversibly anonymise your personal data within a reasonable period, except where we are required to retain certain records to comply with legal, tax, accounting, or security obligations.

In addition to the general rule in the previous section, these periods apply to Union. Where a period is described as “as long as your profile exists”, deleting your profile or your UNOAH account starts the deletion described below.

Union is for adults only. You must be eighteen or over to hold an UNOAH account and to use Union, and a Union profile must describe a person who is eighteen or over. This replaces, for Union, the general position on children set out in the common terms: there is no parental consent route into Union and no circumstance in which a minor may have a profile.

Where you create a profile for another person, it is your responsibility to be sure they are an adult. We do not knowingly hold a Union profile describing a minor. If you believe one exists, tell us at privacy@unoah.com and we will remove it.

Union does not, by itself, establish that a marriage may lawfully take place. The legal minimum age for marriage differs between countries and, in India, between men and women. Meeting our minimum age is not a statement that you are of marriageable age where you live.

Subject to your local law, you have the right to access, correct, and request erasure of your personal data; to withdraw consent; to object to or restrict certain processing; and, under the DPDP Act, to nominate an individual to exercise your rights in the event of death or incapacity. To exercise any right, contact privacy@unoah.com or use the in-app controls. You can request account deletion at any time at https://unoah.com/delete-account or from within the app. We respond within the timelines required by applicable law and, where no shorter mandatory period applies, within ninety (90) days.

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), hashing of direct identifiers before analytics, access controls, and monitoring. No method of transmission or storage is completely secure; where required by law we will notify the competent authority and/or affected users of a personal data breach.

We may update this Privacy Policy from time to time. For material changes, we will provide notice by email or a prominent in-app notice at least fourteen (14) days before they take effect.