Solo · 2026
Fazawwijuhu
A supervised platform for lawful marriage introductions.
A platform that introduces people seeking marriage under explicit, published conditions with administrative supervision throughout — deliberately structured to keep the process within religious bounds rather than reproducing a dating app.
The default shape of this product is a dating app, and the default shape is exactly what the users this is for want to avoid. The design problem was structural rather than visual: what does the flow look like when open browsing and private messaging are the things you are trying to prevent?
The answer was a form-driven, admin-supervised pipeline. Applicants answer a structured questionnaire that differs by gender, agree to explicit published conditions, and every introduction passes through administrative review rather than happening directly between two users.
Built on Convex with Better Auth, where the server holds the rules and the client is only a view of them.
Problems worth solving
The rules are the product, so they cannot live in the UI
If eligibility and visibility rules are enforced by which screens the client renders, anyone who inspects the network can step around them. For this product that is not a bug class, it is a breach of the entire premise.
Convex functions are the source of truth and the enforcement point. The client cannot request what it is not entitled to see, regardless of what it renders.
The questions must change without a deploy
The form questions and the published conditions are religious and editorial content, not engineering decisions. Having them hard-coded means the person who owns that content has to go through me to change a sentence.
Questions and Arabic copy live in dedicated, owner-editable config modules, separate from application code and marked as such in the repo layout.
Publishing someone's details is irreversible
An accidental disclosure here is not a UI bug — it affects a real person's reputation and family, and it cannot be undone by deleting a record afterwards.
Nothing is visible by default. Publication requires explicit, recorded consent from the applicant plus administrative approval, so disclosure needs two deliberate acts rather than one missing check.
What came of it
- Server-enforced visibility rules — the client cannot request what it may not see.
- Questions and religious copy editable by the product owner without a deploy.
- Publication gated behind recorded consent plus admin approval.