01Private by default
Mutually verified relationships and unilateral, unverified records are kept separate. A third party can normally verify only a Marrel ID and its one-person-one-ID status. A controlled snapshot is shown only after the owner enables access and the order settles. Partner identities, photos and other relationships remain hidden.
02One person, one ID
Registration verifies your email with a one-time code; later sign-in uses your email and password—no SMS and no wallet required. A personhood provider handles document and liveness checks. Marrel retains a stable, non-readable digest to prevent a deleted account from creating another identity. Fingerprints, face unlock data and original identity documents are not placed on the public chain.
03Photos and evidence
During mutual confirmation, a controlled service checks only that the image contains exactly two faces; it does not prove who those faces are. The photo is processed under access controls and stored encrypted. Standard paid lookups do not include it. Do not upload location-bearing media or photos you have no right to use.
04On-chain data and USDG
The public chain contains commitments, state roots and verifiable receipts for encrypted records—not names, phone numbers, Marrel IDs, original photos or vows in plain text. A paid service opens in USDG only when the page creates a valid order. Ordinary use needs no wallet. Public chains and payment providers retain their own records.
05Deletion and retention
A signed-in user may request account deletion. After security checks and any unsettled financial duties are handled, the account is closed, credentials are revoked and erasable data is removed. An anonymous one-person-one-ID tombstone and relationship, gift, payment, audit and chain records remain. Appeals may correct, restrict or dispute a display, but cannot erase a mutually confirmed historical fact.