shidduchcard

Keeping your information safe

Your Shidduch Card holds personal information: your name, your photos, and family details. Protecting it is our top priority. Here is how we keep it safe and in your hands, in plain language.

The best way to understand all of this is to see it. Take a look at our example profile, where you can view a complete sample card and switch between the protected view (what your match sees) and a plain view, so you can watch the protections work for yourself.

Everything is encrypted

Encryption scrambles your information so that, even if someone got hold of it, they could not read it. We encrypt everything you enter (your profile details, your references, and your photos) both while it is stored and while it travels between your device and us. We use strong, industry-standard encryption to do it.

We collect as little as possible

We only ask for what we need, and we keep less than you might expect:

  • We store your birth year, not your full date of birth.
  • We do not keep raw internet (IP) addresses or track your location.
  • We use no advertising or tracking cookies, and we never sell your information.
  • Even our own team cannot read your personal details. The tools we use internally show only anonymous IDs, never your name, photos, or profile.

You decide who sees your profile

You share your profile through private links that you create and control. Each link has a long, random web address that cannot be guessed, and it shows only the information and photos you have allowed, and nothing more. For every link, you can:

  • add a PIN, so only someone with the code can open it (we store the PIN scrambled, never in plain text);
  • set it to expire automatically on a date you choose;
  • turn it off (revoke it) at any moment; and
  • rest easy knowing links can never be found through Google or other search engines.

Your video gets extra protection

If you share your profile as a video, it has additional safeguards:

  • It can't be downloaded or screen-recorded. We use the same kind of copy protection that major streaming services rely on, so the video can't be saved or captured by a screen recorder.
  • Every viewing is checked in real time. Each time someone presses play, we confirm the link is still valid. If you have revoked it, or it has expired, the video simply will not play, even partway through.
  • A hidden watermark. Each video carries a subtle watermark tied to the exact link it was shared through, so if a copy ever got out, it can be traced.

(Sample videos on our example page don't contain anyone's real information, so they aren't locked down.)

Locked down behind the scenes

There is a lot of work you never see that keeps everything safe:

  • When you upload a photo, we automatically remove the hidden data phones attach to images, such as the location where the photo was taken.
  • The systems that hold your information are sealed off from the public internet and guarded against common online attacks.
  • Your data is backed up securely and off-site, and every week we test that we can restore it, so it won't be lost.

You're in control of your information

Your information belongs to you. You can edit or delete your profile, or your entire account, at any time from Settings. Deleting removes your personal information from our systems and takes down your photos, videos, and links. You can also ask to see a copy of your information or have it corrected. We are built to respect privacy laws such as the GDPR and CCPA.

One honest note about sharing

We will always be straight with you. Your videos are protected from downloading and recording, and revoking or expiring a link cuts off access right away. Photos and the words on your profile are different: once you share them, anyone who can see them could take a screenshot, save them, or even photograph the screen with another phone, and no app anywhere can fully prevent that. (That is also why your videos are watermarked.)

So the simplest advice: share what you are comfortable being seen, with people you trust.

Our ongoing commitment

We take this seriously and keep improving. We are actively working toward independent security reviews and certifications (such as SOC 2), and we will share those milestones as we reach them. We will never claim a certification we do not actually hold.

If you ever notice a security problem, please tell us at shidduchcard@gmail.com. We will look into it right away.