Data Requirements
Stored Data
On device (Local Trust Vault only): Matrimonial profiles, women consultation records, private messages, identity documents before sharing, personal preferences. Never synced to backend unless user explicitly authorizes.
Backend/ledger (integrity only): Charity documents (hashed), transaction logs, order metadata, certification proofs. The Global Integrity Ledger records hashes and proofs—never messages, consultation details, or matrimonial profiles.
Data Flow
Device-centric model:
- Sensitive data stays in the Local Trust Vault; backend never receives it unless user explicitly authorizes sharing
- Important actions create local events; only encrypted payloads or hashes are transmitted
- Backend verifies signatures and routes valid events to the ledger
- Content storage: encryption before upload; storage never sees plaintext; ledger stores only content hashes
