Your wedding is private. So is your data.

Khaaslamhe is a service run by ZynHive, based in Lahore, Pakistan. We make wedding cards, love story and photo pages, and custom wedding websites. In this policy "we" and "us" mean ZynHive, and "you" means a couple or family member who uses Khaaslamhe, or a guest who opens a page.

From couples and families who create an account or order a page:

• Your name, email address and, if you message us, your WhatsApp number.
• A password, which is stored only as a secure hash. If you sign in with Google, we receive your name and email from Google and never your Google password.
• The wedding details you give us: names, dates, functions, venues, dress codes, your love story and any words or verses you want on the page.
• The photos and short video clips you or your photographer send us.
• Your guest list, if you use invites and RSVPs: household names, which side they are from, which functions they are invited to and the headcount they expect.
• Payment records: the amount, date and reference of a bank transfer. We never ask for or store card details.

From guests:

• Guests never create an account. When a guest RSVPs, we record their household's reply and headcount for each function.
• If a guest uploads photos to a couple's page, we store those photos for that couple.

Automatically, from everyone:

• Basic technical data our hosting needs to run the site safely, such as IP address, browser type and the pages requested.
• A sign-in cookie for couples who are signed in, and a small setting in your browser that remembers display choices such as colours. We do not use advertising cookies.
• Only if you allow it: anonymous usage measurement through PostHog, so we can see which pages and designs people look at and where they give up. It records pages visited and buttons tapped, never your name, your photos or what you write to us. It is not used for advertising, and never runs on a couple's own wedding page. See Cookies below.

We ask before we use any cookie the site does not need. The first time you visit, a small box asks whether we may count visits. Until you choose Allow, nothing optional runs.

Essential, always on:

• The sign-in cookies (names starting sb-), set by Supabase only when you sign in, so you stay signed in. They end when you sign out.
• kl-consent-v1, which remembers your cookie choice for a year, so we do not ask on every page.
• Small settings kept in your browser (not sent to us), such as the names you typed into a sample design and whether you closed a popup.

Only if you choose Allow:

• PostHog (names starting ph_), which counts page views and taps on our own pages so we can see which designs people like and where they give up. It never records what you type, never runs on a couple's own wedding page and is not used for advertising.

Vercel's Web Analytics and Speed Insights use no cookies at all. Guests opening a couple's page never get an analytics or advertising cookie from us, and are never asked.

To change your mind, tap Cookie settings at the bottom of any page. Choosing Only essential stops PostHog at once and clears what it kept in your browser.

• To make, host and deliver your card, page or website.
• To send RSVP links and count replies for the couple.
• To sign you in and keep your account secure, including sending six-digit sign-in codes by email.
• To reply to your messages and confirm your payment.
• To fix problems and keep the service fast and safe.

We do not sell your data, rent it, or use your photos in our marketing without your written permission.

Every page starts private. Only people you send the link to can open it, and it is marked so search engines like Google do not list it. We have no public directory of weddings.

If you choose a custom website on your own domain, you may choose to make it public. A public website can be opened by anyone and may appear in search results. You can switch it back to private at any time by messaging us.

Anyone you send a link to can forward it. For extra privacy, add a PIN to your page when you share it: guests then need the PIN to open it.

We use a small number of trusted providers to run the service. They process data only to provide their service to us:

• Supabase, for accounts, the database and storing your photos and song. Photos are kept private and shown to guests through short-lived links, only while your page is online.
• Vercel, for hosting the website, and its Web Analytics and Speed Insights, which count page views and measure how fast pages load without cookies or personal details.
• Resend, for sending sign-in codes by email.
• Google, only if you choose to sign in with Google.
• WhatsApp (Meta), when you choose to message us or send invites from your own number.

Some of these providers store data outside Pakistan. We choose providers with strong security practices. We may also share information if the law requires it.

We keep your page and photos online for the hosting period of your package. When it ends, we let you know on WhatsApp or email before anything is removed. Free pages stay online while they are in use.

After a page is taken down, we delete its photos and guest list within 60 days, except for payment records we must keep for accounting and tax.

• See the data we hold about you.
• Correct anything that is wrong.
• Remove a photo, a guest or your whole page at any time.
• Delete your account and its data.
• Ask a question or make a complaint.

Message us on WhatsApp at +92 343 4783677 and we will reply within two working days. We may ask you to confirm it is your account before we make a change. A guest who wants their reply or photo removed can ask the couple or message us directly.

Pages are served over encrypted connections. Access to each wedding's data is limited in our database so that one couple can never read another couple's page, and guests can only reach a page through its link. No system is perfect, but if something goes wrong that affects your data, we will tell you promptly.

Accounts are for adults aged 18 and over. Wedding photos may include children; please share only photos you have the family's permission to share, and ask us to remove any photo at any time.

If we change this policy, we update the date at the top. If a change affects how we use data you have already given us, we will tell you before it takes effect.