Privacy Policy

added text: Our website carries a form called “Build Your Covenant Profile”. You can fill it in and send it without an account and without signing in. The rest of this policy is written for members who hold an UNOAH account and a Union profile, and it does not describe what happens when you use that form. This section does.

added text: What the form collects

added text: When you submit it, we receive:

• added text: Your full name.
• added text: A phone number or an email address. One of the two is required — it is the only way we can come back to you — and you may give both.
• added text: Whatever you write about yourself in the free-text box, up to two thousand characters. Free text is unbounded by nature, so we treat anything you put there as sensitive, including anything you say about your faith.
• added text: A CV or profile document, if you attach one — a PDF, DOC or DOCX file of up to 10 MB.
• added text: Up to six photographs in total, in JPEG, PNG or WebP format, of up to 5 MB each.
• added text: Technical data any online service receives: your IP address, and diagnostic logs when something fails.

added text: There is nothing else. We store only the fields listed above, and anything else sent with the form is discarded. We do not ask you at this stage for your date of birth, your address, an identity document or any payment detail, and you should not put them in the free-text box.

added text: What we check before accepting it

added text: We check that a submission comes from a person rather than an automated script, using Cloudflare Turnstile, which receives technical signals from your device and your IP address. We also limit how many submissions and how many file uploads one internet address may make in an hour; that count is held for the hour and then expires, and your IP address is not written into the record of your enquiry.

added text: There is no account, and no profile

added text: Submitting the form does not create an UNOAH account and does not create a Union profile. What we store is an enquiry: your name, the contact detail you gave, your free text, the files you attached, and a status our staff move from new to contacted, and then to converted or dismissed. We do not use your phone number or your email address to look for an existing UNOAH account, and we do not join your enquiry to one.

added text: An enquiry is not published anywhere. No member can see it, it appears in no search result, it is not indexed by search engines, and no part of the Service returns the files you attached to any caller. It becomes a Union profile only if you sign up yourself and build one — we cannot turn an enquiry into a profile on your behalf, and we do not. Until you do, you have no Union profile, no shortlist and no verification record.

added text: A person reads it

added text: A member of UNOAH staff reads what you wrote and opens the document you attached. That is the purpose of the form: a person, not a machine, decides whether Union is a fit for you and gets in touch with you. Nothing you send through it is sent to an AI provider — not to Google, not to Amazon Textract, not to any other — and nothing in it is scored, ranked or automatically decided. The files are held in private storage that is not reachable from the internet and is readable only by the staff reviewing them, and those staff act under confidentiality obligations.

added text: What we use it for

added text: We use an enquiry to contact you about Union, using the phone number or email address you gave us, and to decide whether to invite you to sign up. We do not use it to advertise to you, we do not sell it, and we do not share it with anyone outside UNOAH other than our hosting provider, which stores it for us. It is held in our India (ap-south-1) region, like the member data described in section 11.

added text: The legal basis is your consent, given when you submit the form, and nothing else. You may withdraw it at any time by writing to privacy@unoah.com.

added text: How long we keep it, and how to have it deleted

added text: We keep an enquiry, and the CV and photographs attached to it, for thirty days from the day you send it. At the end of that period both are deleted. If you sign up before then and we help you build a Union profile, the enquiry and its files are deleted at that point instead, and your profile is covered by the rest of this policy — there is no copy of the enquiry left behind. Nothing about an enquiry is kept beyond thirty days except a record that it was deleted, which holds none of the details you sent.

added text: You can ask us to delete an enquiry at any time before that, by writing to privacy@unoah.com from the email address you used or naming the phone number you gave. There is no self-service control for it, because there is no account to sign in to. We delete the enquiry and the files attached to it, and tell you when it is done. You can also ask us for a copy of what you sent, or ask us to correct it. If an enquiry has been submitted in your name by somebody else, tell us and we will remove it.

added text: This section describes what we hold about you as a member — once you have an UNOAH account and are building or running a Union profile. If you have not signed up and have only sent us the form on our website, section 2 is the one that applies to you. Everything below comes from you — what you type, select, upload, or say into the app. We do not buy personal data, we do not obtain it from data brokers, and we do not build your profile by watching your behaviour elsewhere.

Your account

Union uses your single UNOAH account, the same one that signs you in to any other UNOAH product. From it we take your name, date of birth, gender and Christian denomination to start your Union profile. Your email address, phone number and sign-in method stay with the account and are never shown on your profile.

Your profile

The profile you build in the Union wizard. In full:

• Who the profile is for — yourself, or your son or daughter, sibling or friend.
• Basics: full name, date of birth, gender, Christian denomination, religion, nationality, city, height, marital status, whether you have children, education level and field, employment status, job title, profession and lifestyle.
• Faith and values: your denomination, the role faith plays in your life, your church or parish name, your practices (church attendance, personal prayer, Bible reading, ministry, fellowship, worship, retreats, faith learning, volunteering), your core values and the one you will not compromise on, and how you describe prayer, scripture, service and ministry, family vision, integrity, compassion, growth, tradition and community.
• Family and future: family closeness, how involved your family will be in the marriage, your intent in seeking an alliance, hopes about children, where you want to live, career balance and financial outlook.
• About you: your natural rhythm, interests, personality, social style, career note, what brings you alive, and free text where you tell us what matters most to you right now.
• What you are looking for: preferred age range, gender, denominations, cities, marital status, education, family outlook, children, lifestyle, communication and profession, plus your non-negotiables, your flexible preferences and anything you write in your own words.
• Up to five photographs of the person the profile describes.
• An “About me” introduction, either written by you or drafted for you (see the AI section).

Two of these are sensitive and we treat them as such throughout this policy. Your Christian denomination and everything you tell us about your faith are data revealing religious belief — special-category data under Article 9 of the UK and EU General Data Protection Regulation. Your preferred gender for a partner is treated by us, and by the app stores, as revealing sexual orientation. Free-text answers are unbounded by nature, so we treat anything you write there as sensitive too.

Your city, not your location

Union asks for a city, which you pick from a Google Places suggestion list. We store the place identifier, the city name and the country code. We do not collect GPS coordinates, we do not track your device's position, and we never show another member how far away you are.

Verification

If you choose to verify part of your profile, we collect what that check needs. Section removed text: 4added text: 5 sets this out in full, including what the identity check sends to our verification provider and what comes back.

Your CV, if you upload one

You may upload a CV or résumé to fill the wizard in automatically. The file is read once to extract a handful of fields and is then deleted — see sections removed text: 4, 6 and 12.added text: 5, 7 and 13.

How you use Union

• Which profiles you shortlist, and when. This reveals who is interested in whom, so we treat it as personal data about both of you.
• Which profiles you open, and when. We record this from the day you join, even though the feature that would show a member who has viewed them is not switched on. We are telling you because the record exists and could not be created after the fact.
• An internal audit trail of changes made to your profile — who did what, to which record, and when — which we keep so that a disputed or fraudulent change can be traced.
• Technical data every online service receives: your IP address, device and browser type, app version, language and time zone, and diagnostic logs when something fails.

We process your Union data on lawful grounds recognised by applicable law. Your consent is the principal one, and it is the only one we rely on for anything sensitive.

• Your Christian denomination and everything else you tell us about your faith reveal religious belief. Your preferred partner gender is treated as revealing sexual orientation. We process both on your explicit consent, given when you enter them into a profile you then choose to publish, and on no other ground. We do not rely on legitimate interests for them.
• Sending anything to an AI provider rests on separate explicit consent, asked for before the first AI feature sends anything, as described in section removed text: 6.added text: 7.
• Verification is processed on your consent, given when you start a check. Every check is optional and none is required to use Union.
• Keeping Union safe from fraud, impersonation and abuse, and keeping the records the law requires, rest on our legal obligations and on uses permitted by law rather than on your consent — so that a person who has just defrauded another member cannot erase the evidence by withdrawing consent.

You may withdraw any consent at any time, as easily as you gave it, from within the app or by writing to privacy@unoah.com — including, under India's DPDP Act, through a registered Consent Manager. Withdrawal does not affect processing already carried out. Withdrawing consent for your faith answers means Union can no longer show your profile to anyone, because matching on faith is what the Service does; we will tell you that before you confirm.

If you believe we have handled your data wrongly, please tell us or our Grievance Officer first — the contact details are in section 1. You may also complain to the Data Protection Board of India, or to the supervisory authority where you live, and you may seek a judicial remedy.

We do not sell your personal data and we do not share it with advertisers or data brokers. Other than what other members see on your published profile, we share it only with providers who process it on our behalf under written terms:

• Amazon Web Services (India, ap-south-1) for hosting our application, databases and the private storage holding photographs and verification documents. Amazon Textract, in the same region, reads a scanned CV when you use CV auto-fill.
• Didit — Didit Identity Spain, S.L. or Didit Identity, Inc. — for the identity check described in section removed text: 4,added text: 5, and only for that.
• Google LLC, through the Gemini API, for the three AI features described in section removed text: 6,added text: 7, and only for those.
• Google, for the Places suggestions used to pick a city. When you type a city name, that text is sent to Google Maps Platform to return suggestions.
• Apple Inc., where your Apple device converts your speech to text for the spoken partner description, which may take place on Apple's servers.
• Google, Apple, Meta and Microsoft where you choose one of those sign-in methods for your UNOAH account.
• Firebase (Google) for push notifications and crash diagnostics, and Sentry for error monitoring, linked to your signed-in user identifier so that we can investigate a fault on your account.
• Google Analytics for Firebase for in-app usage analytics, subject to your analytics consent.
• Cloudflare Turnstile, which processes technical signals from your device to tell a person from an automated script when you sign removed text: in or verify.added text: in, when you verify, or when you send us the form described in section 2.

We may also disclose personal data where the law requires it — to a court, a regulator or law enforcement acting under proper authority — and where it is necessary to investigate fraud or to protect the safety of a member or of the public.

Your Union profile, your photographs and your verification documents are stored and processed in our India (ap-south-1) region. Some of the providers named in section removed text: 9added text: 10 process data outside India: Didit performs the identity check from the European Union or the United States depending on the contracting entity, Google processes the AI requests and the city suggestions on its own infrastructure, and Apple's speech-to-text may run on Apple's servers. Each of them is bound by written terms requiring protection equivalent to that set out in this policy. Any cross-border transfer is carried out in compliance with applicable restrictions, conditions or government directions under the DPDP Act, the UAE PDPL, the KSA PDPL and other applicable laws.

In addition to the general rule in the previous section, these periods apply to Union. Where a period is described as “as long as your profile exists”, deleting your profile or your UNOAH account starts the deletion described below.

• Your profile, preferences and photographs — for as long as your profile exists. When you delete it, they are deleted or irreversibly anonymised within thirty days.
• Verification documents you uploaded for the education, employment and church checks — for as long as your profile exists, then deleted with it. We keep the outcome of the check, not the document, where we need to show that a claim on a profile was checked.
• Identity-check data held by Didit — governed by the retention period we configure with them, after which Didit deletes the document images, the portrait, the selfie, the liveness video and the face template. We do not enable Didit's optional biometric-template retention feature, so no face template is kept beyond the session.
• The pass or fail we keep from an identity check — for as long as your profile exists.
• A CV you uploaded — deleted from temporary storage shortly after it is read, and never stored in our database.
• Shortlists and records of profiles you opened — for as long as your profile exists.
• The internal audit trail — kept, because it is what allows a fraudulent or disputed change to be traced. On erasure the entries stay but the identifying fields in them are replaced with an irreversible value, so the record of what happened survives without naming you.
• A minimal record of a banned account — kept for as long as necessary to stop the same person returning after a ban for fraud or abuse. It holds no profile content.
• Records we are required by law to keep — for the period the law requires.
• added text: A “Build Your Covenant Profile” enquiry — the record holding your name, your contact detail and your free text. Thirty days from the day you send it, then deleted — or sooner, when you ask us to delete it, or when you sign up and we help you build a profile.
• added text: The CV and the photographs attached to an enquiry — held in a private storage area kept separate from member uploads, which no member and no part of the Service can read. Deleted with the enquiry, and in no case later than thirty days from the day you send it.