Privacy Policy

We collect information needed to run a private matchmaking workflow:

• Account information: name, email address, role, region assignments, access permissions, login history, trusted devices, and account security events.
• Candidate identity information: name, email, phone number, city or community area, gender, and coordinator-entered identifiers.
• Candidate profile information: year of birth, height, education, occupation, marriage readiness, religious observance, relocation preferences, family and lifestyle preferences, future-spouse criteria, free-text profile responses, and optional photos.
• Workflow content: match suggestions, coordinator decisions, candidate responses, owner notes, messages, profile-share events, support tickets, and feedback.
• Technical and security data: IP address, device and browser information, authentication cookies, request metadata, rate limit records, audit logs, error logs, and push-notification subscription details when notifications are enabled.

• Provide invite-only profile intake and matchmaking coordination.
• Help coordinators review candidates, suggest matches, and record outcomes.
• Protect accounts, prevent abuse, investigate suspicious activity, and keep audit logs.
• Send operational emails, access links, verification codes, reminders, and service notices.
• Maintain, debug, measure, and improve reliability and security of the service.
• Comply with legal obligations and enforce our Terms.

We do not sell personal information, and we do not use candidate information for third-party advertising or cross-context behavioral advertising.

Candidate profiles can include sensitive or private information about beliefs, family expectations, lifestyle, photos, and relationship preferences. Candidate-facing forms ask the candidate to acknowledge a privacy notice before submitting profile information or uploading photos. Coordinators and owners who add or update information for another person are responsible for having permission to do so.

We share information only as needed to operate, secure, and support Happy Homes, or when required by law. Our current service providers include:

• Vercel: application hosting, serverless functions, deployment, and infrastructure logs.
• Supabase: database, authentication, file storage, and related infrastructure.
• Cloudflare Turnstile: bot protection and abuse prevention on public forms.
• Resend: transactional email delivery, such as invitations, verification messages, and account notices.
• Browser and device push services: notification delivery when a user enables Web Push notifications.
• GitHub: optional feedback issue sync when a reporter chooses to send feedback into that workflow.

We may also disclose information to comply with law, protect rights and safety, investigate abuse, or complete a business transition subject to appropriate confidentiality protections.

Happy Homes uses necessary cookies and local storage for sign-in, session security, CSRF and abuse prevention, theme preferences, offline/PWA behavior, and notification setup. We do not use advertising cookies on the service.

Happy Homes is operated from the United States and uses service providers that may process information in the United States, the European Union, and other locations where they or their subprocessors operate. By using the service or submitting information, you understand that information may be processed outside your country. Where required, we rely on appropriate safeguards for international transfers.

We keep information for as long as needed for the matchmaking workflow, account operation, security, dispute resolution, legal compliance, and audit integrity. When an account is deleted, identifying account details are anonymized, active sessions are revoked, notification subscriptions and trusted-device records are removed, and past conversation history may remain in anonymized form so counterpart records are not broken. Candidate records may be deleted or de-identified when no longer needed or when a valid request requires it.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or appeal of a privacy decision. You may also have the right not to receive discriminatory treatment for exercising privacy rights.

Account holders can use the in-app account deletion page. Candidates and other participants can contact the coordinator who invited them or email us at the address below. We may need to verify your request before acting on it.

Happy Homes is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe information about someone under 18 has been submitted, contact us so we can review and remove it where appropriate.

We use safeguards such as HTTPS, signed and HttpOnly session cookies, role-based access controls, rate limiting, audit logs, private file storage, and provider-managed password storage. No system can be guaranteed completely secure, so users should protect account credentials and report suspected unauthorized access promptly.

We may update this Privacy Policy when the service, providers, or legal requirements change. Material changes will be reflected by updating the effective date and, when appropriate, by providing an in-app notice.

Privacy contact: privacy@happyhomes.app