Privacy Policy

1. Who We Are

Hassabe Inc. ("Hassabe," "we," "us," or "our") operates the website hassabe.com and related services. Hassabe is an AI-powered matchmaking platform designed for the Ethiopian and Eritrean diaspora.

If you have questions about this policy, contact us at admin@hassabe.com.

2. Information We Collect

We collect the following categories of personal information:

Account Information

• Full name, email address, and password (hashed)
• Two-factor authentication secrets (encrypted)

Profile Information

• Date of birth, city, country, profession, education level
• Ethnicity, languages spoken, and heritage information
• Religion, practice level, and faith-related preferences
• Relationship goals, partner preferences, and deal breakers
• Personal bio text

Questionnaire Responses

• Answers to Round 1 (30 questions) and Round 2 (21 questions) compatibility questionnaires
• AI-generated narrative summaries derived from your responses
• Embedding vectors used for compatibility matching (numerical representations — not human-readable)
• Dimension scores across values, culture, faith, family, communication, goals, and lifestyle

Communication Data

• Messages exchanged with matched users
• Voice note recordings (if sent)
• Message timestamps and read receipts

Payment Information

• Transaction records (amount, date, type)
• Stripe customer ID and payment intent IDs
• We do not store your credit card number, CVC, or full card details — these are handled entirely by Stripe

Technical Data

• Device tokens for push notifications
• Login timestamps and IP-derived location (city-level only)
• Browser type and device type (for analytics only)

3. How We Use Your Information

• Matchmaking: Your profile, questionnaire responses, and AI-generated embeddings are used to identify compatible matches through our proprietary matching engine
• Communication: To deliver messages, notifications, and match updates to you
• Account management: To authenticate your identity, process payments, and provide customer support
• Safety and moderation: To detect and prevent abusive, vulgar, or threatening content in conversations
• Product improvement: To improve our matching algorithms and user experience (using aggregated, anonymized data only)

4. AI and Automated Processing

Hassabe uses artificial intelligence in the following ways:

• OpenAI embeddings: Your questionnaire responses are converted into numerical vectors using OpenAI's text-embedding model. These vectors are used to calculate compatibility scores with other users.
• GPT-4o summaries: When a match is found, GPT-4o generates a compatibility summary, shared values list, and icebreaker questions. These are reviewed descriptions — not your raw answers.
• Content moderation: Messages are automatically screened for vulgar, threatening, or inappropriate content. Flagged messages may be reviewed by our admin team.

You can request a human review of any automated decision that affects your matches or account status by contacting us at admin@hassabe.com.

5. Who Can See Your Data

• Your matches: Can see your first name, age, city, profession, religion, and compatibility score. Full profile details (bio, last name) are revealed only after both rounds are complete and the conversation is unlocked.
• Hassabe admin: Our team can access user profiles, match data, and conversations for moderation and support purposes.
• Service providers: We use Stripe (payments), Resend (email), Firebase (push notifications), Supabase (database hosting), and OpenAI (AI processing). Each processes data only as needed to provide their service.

We do not share your data with advertisers, data brokers, or any unrelated third parties.

6. Data Security

• Passwords are hashed using bcrypt with a cost factor of 12
• All data in transit is encrypted via TLS/HTTPS
• Database access is restricted to authenticated, authorized connections only
• Payment data is handled by Stripe (PCI DSS Level 1 certified)
• Two-factor authentication is available for additional account security
• Admin actions are logged in an audit trail

While we implement industry-standard security measures, no system is 100% secure. If you believe your account has been compromised, contact us immediately at admin@hassabe.com.

7. Data Retention

• Active accounts: Your data is retained as long as your account is active
• Conversations: Messages are retained for the duration of the 30-day conversation window, and archived thereafter
• Deleted accounts: Upon account deletion, your profile, questionnaire responses, and messages are permanently deleted within 30 days. Payment records may be retained longer for legal and accounting purposes.
• Suspended accounts: Data is retained during suspension in case of reinstatement

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data via your profile settings
• Deletion: Request deletion of your account and all associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to specific processing activities
• Withdraw consent: Withdraw consent for optional data processing at any time

To exercise any of these rights, email us at admin@hassabe.com. We will respond within 30 days.

9. Cookies and Tracking

Hassabe uses minimal cookies and local storage:

• Authentication tokens: Stored in localStorage to keep you signed in (essential)
• User preferences: Your user ID and session state (essential)

We do not use advertising cookies, third-party trackers, or analytics platforms that build profiles across websites.

10. Children's Privacy

Hassabe is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected data from a minor, we will delete it promptly.

11. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using Hassabe, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

12. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through an in-app notification. Continued use of Hassabe after changes constitutes acceptance of the updated policy.

13. Contact

For questions, concerns, or data requests:

Hassabe Inc.
Email: admin@hassabe.com
Website: hassabe.com