Legal

Privacy Policy

Last updated: 2026

1. Who this policy covers

This policy explains how Khandaan collects, uses, stores, and discloses personal information when you browse the directory, register a family or matchmaker account, or use any part of the Platform. It is written to align with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What we collect

Browsing the directory requires no account and no personal information — public listings show only a city, an initial-plus-first-name label, and profile details the family has chosen to publish.

Creating an account collects your name, phone number, email, city, and password (or your Google account identity, if you sign in that way). A family profile additionally collects details about the candidate the profile is for — age, height, education, occupation, family background, and similar — and any photos you choose to upload.

Identity verification is handled entirely by Stripe Identity. Your document photo and selfie go directly to Stripe — Khandaan receives only the pass/fail result, never the document image or the personal details extracted from it. See our Verification Process page for detail.

Payments are handled entirely by Stripe. Card numbers and other payment details are entered on Stripe's own page and never reach Khandaan's servers. See Secure Payments.

3. How we use it

We use your information to operate your account, show your listing in the directory (once published and verified), process introductions between families, send transactional emails (an introduction received, accepted, or declined; ID verification results; payment confirmations), and enforce the Terms & Conditions — including reviewing reports of harassment or misconduct. We do not use your information for advertising, and we do not sell personal information to third parties.

4. Who we share it with

Khandaan uses a small number of service providers to operate the Platform, each handling only what their function requires:

  • Google Firebase / Google Cloud — hosts our database and file storage, in the Australia (australia-southeast1) region.
  • Stripe — processes payments and identity verification. Governed by Stripe's own privacy policy for the data it handles directly.
  • Resend — delivers transactional emails on our behalf (introduction notifications, verification results, receipts).

We do not share your profile, contact details, or ID status with any other family or matchmaker until you have mutually accepted an introduction with them. Public directory listings never include your name, phone number, email, income, or employer.

5. Cookies and tracking

Khandaan sets one cookie: a secure, httpOnly session cookie used to keep you signed in. It cannot be read by JavaScript and is not used for advertising or cross-site tracking. Khandaan does not currently run third-party analytics or advertising trackers.

6. Your rights

Under the Australian Privacy Principles, you can request access to the personal information we hold about you, ask us to correct it, or ask us to delete your account and associated data. Deleting your account removes your profile, photos, and identity-verification status from active use; some records (such as payment and ledger history) may be retained for a period as required for accounting, fraud-prevention, or legal obligations. To make a request, use the Contact page.

7. Children

Khandaan requires account holders to be at least 18 years old, consistent with our Terms & Conditions. We do not knowingly collect personal information from anyone under 18.

8. Data security

All traffic to Khandaan is encrypted in transit. Access to your data is gated by server-side authorization checks on every request — the Platform is built so that no client application, including Khandaan's own, can read or write data it hasn't been explicitly granted access to. See Secure Payments for more on how this is enforced.

9. Changes to this policy

We may update this policy as the Platform changes. Material changes will be reflected here with an updated date, and continued use of the Platform after a change constitutes acceptance of the revised policy.

10. Contact

For any privacy question, access request, or correction request, use the Contact page and select “Safety or security concern” as the topic.