How Ashegham protects you
Most platforms tell you they take your privacy seriously. That is easy to say and hard to check, so here is the specific list of what this one does — each of these is a thing the software does, not an intention.
Your photos carry no location
Phones write the coordinates of the shot, the device model and the exact timestamp into every photo. Before anything is stored, the image is re-encoded from scratch, which leaves that metadata behind — it is not hidden or flagged, it stops existing.
A person reviews every photo, and you choose its audience separately: eligible members, people you liked, matches, or verified members. Anyone else receives a generic locked placeholder, not a blurred copy of the real image. Paying never widens that audience, and neither search engines nor someone holding a file link can bypass it.
Your country is a choice, never a guess
Most sites infer where you are from your connection. That can be inaccurate whenever someone is travelling or their connection is routed through another region.
So we never look. Your country and city are things you pick from a list, and they are the only location we hold. If you would rather say you are somewhere else, nothing in the system will contradict you.
Our emails never say why
Emails about other people always carry the same neutral subject and inbox preview. They never name anyone and never say what happened, so a glance at your inbox reveals nothing about who you are talking to.
Like and message notes are on by default and capped at one a day per type. The discovery digest is off until you explicitly enable it, checks only for a currently visible profile relevant to your saved preferences, and runs at most weekly. It includes no name, photo, city, or count, and every email type can be turned off in Settings.
You decide who can see you
One switch hides your profile from everyone until you turn it back on — it takes effect immediately, and it exists precisely for the moments when you need to disappear without deleting anything.
A second switch hides you from everyone in your own country. The people most likely to recognise you are usually the ones nearest to you, and a platform whose members are spread across many countries should let you be visible to one side and not the other.
Only a Platinum member can write to you uninvited — and one switch stops even that
Almost everywhere on Ashegham, a conversation needs both people to have chosen each other. The single exception is Platinum: a member on that tier can send one opening message to someone who has not matched them. It is priced high and capped at a handful a month precisely so that it stays rare.
Even then, they get one message. Until you reply, they cannot send another — that is enforced by the software, not by their manners. Requests arrive in a separate part of your inbox, clearly marked as not a match, and blocking is one tap away. And if you would rather not receive them at all, one switch in Settings closes the channel completely. No amount of money moves that switch.
Verification evidence is destroyed, either way
If you verify with a selfie or an identity document, a reviewer sees it once. The moment they decide — approved or rejected, it makes no difference — the file is deleted from disk and the record of it is cleared. What remains is a badge on your profile and a timestamp saying the evidence is gone.
We keep no copy for our records. There is nothing to leak later, and nothing to hand over.
Blocking is complete
When you block someone they vanish from your Discover, your matches and your conversations at once, and any interest either of you had expressed is deleted. They are not told. From their side you simply are not there.
Reporting is separate and also silent: it puts the account in front of a human who can suspend it. A suspended member disappears from every list on the site, not just from yours.
Leaving removes your live account
Deleting your account removes your live profile, photos, matches and messages from the service. There is no cooling-off period, no soft delete and no way to reactivate that account.
Limited filing-time evidence already attached to a safety report is the exception. Only moderators can access it while the report is open and for up to 90 days after a decision; then its text and photo copies are purged.
How your account itself is held
Passwords are hashed with Argon2id, the algorithm currently recommended for the job, and are never stored or logged in a form anyone can read — including us. Sessions are random tokens, stored hashed, and changing your password signs out every other device.
We run no advertising and sell no data. There are no third-party trackers on these pages, which is also why there is nothing here asking you to accept cookies.
What we cannot promise
No platform can protect you from a person you choose to trust. We can keep your data out of the wrong hands and keep your presence here quiet; we cannot vet intentions. Take conversations slowly, never send money, and tell someone you trust before you meet anyone in person.