Privacy First

How your data is protected

Every sensitive attribute is stored in two forms. The accurate form is the verified original value, kept sealed. The indicative form is an approximation safe to show early — enough to judge compatibility, never enough to identify the person.

Dual data model

Attribute	Indicative (shown early)	Accurate (sealed, Phase 4)
Name	Code name / MSN (e.g. “M-188”)	Full real name
Photo	None (sealed silhouette)	Real photo
Address	General region	Full address
Age	A range (e.g. “early 30s”)	Exact age and date of birth
Education	Level (e.g. bachelor's)	Degree and institution
Income	A range	Exact figure
Profession	Sector	Company and job title
Contact / social media	Hidden	Shared through the platform once both parties agree

Three data tiers

Tier	Contents	Nature
Alpha	Minimal contact details, gender, region, age range, faith.	Held by the general matching manager; enough to begin.
Bravo	Full demographics, education, income, outlook, attitude to polygamy, hobbies, both sides' criteria, and the dowry.	The basis for matching. Shown in indicative form.
Charlie	Real name, contact details, social media, photo.	The most sensitive. Opened last, and only through the disclosure ladder.

The disclosure ladder

The man's accurate data always opens first, to the woman.
The woman reviews and decides. If she declines, the process stops and her data is never opened.
Only with her consent does the woman's accurate data — including photo and dowry — open to the man.
The man consents after seeing the dowry, and only then does the exchange of real data happen.

Not even a Superadmin A woman's accurate data cannot be opened outside this consent flow by anyone, including the system owner. Every attempt outside policy is blocked and recorded.

Legal basis

Your data is protected under Indonesian Law No. 27 of 2022 on Personal Data Protection. We apply encryption in transit and at rest, separate identity storage from matching data, role-based access control, data minimisation, and retention limits.