The model earns because the two sides do not know each other. Anonymisation enforced by code, the client phone encrypted separately, rule-driven matching. Case study.