Trust & Safety

How payments and data are secured

Khandaan never sees or stores your card details, and every payment is confirmed by Stripe before anything is unlocked.

Card payments

Registration and credit purchases run through Stripe Checkout, a payment page hosted directly by Stripe. Your card number, PayID, or Apple/Google Pay details are entered on Stripe's own page — Khandaan's servers never receive or store them.

Nothing is granted on the strength of the browser alone. A credit purchase or a family registration only unlocks after Stripe sends Khandaan a signed confirmation that the charge actually succeeded, verified using Stripe's webhook signature — not simply because a checkout page was opened.

What is, and isn't, built yet

Family registration ($79 one-time), credit top-ups, and matchmaker subscription plans are real, live payments processed through Stripe today.

A matchmaker success-fee — money changing hands specifically because a matchmaker's introduction led to a match — is not yet built. We would rather say that plainly than describe a payment flow that doesn't exist. Matchmakers can set up their payout details in advance through Stripe Connect, so they're ready the day this ships, but no fee is currently charged or held on anyone's behalf for an introduction's outcome.

Account and profile data

Photos are private by default. Nothing in storage is publicly readable — viewing a photo requires a short-lived, individually signed link generated only after both families agree to connect (or a family's own explicit choice to share one photo publicly on their card).
Every read and write to your data passes through a server-side authorization check before it happens — client apps are never trusted to enforce access rules on their own.
Contact details (name, phone, email) are released only when both sides of an introduction accept — never before, and never to anyone else browsing the directory.
Credit balances are updated inside a database transaction alongside an audit-trail entry, so a double-click or a network retry can never charge you twice for the same action.
Found a security issue, or something look wrong with a charge? Contact us directly — security reports are treated as a priority.