Privacy policy
Status: in progress
Draft. The final wording will follow. Until then, this page describes what the app actually does.
What data we process
- name, date of birth, gender
- photos
- place of residence and, if you agree, your approximate location
- your answers to the profile questions
- messages to other members
- device identifier for notifications
- purchase receipts from Apple
- IP address and timestamps
What for
To calculate suggestions, run the chat, prevent abuse and bill subscriptions.
Selfie check
A selfie from which a face can be recognised is particularly sensitive data. The liveness check runs on your device; the selfie only leaves it if you explicitly agree that moderation may compare it with your profile photos. It is then deleted, at the latest after 30 days. You can withdraw the verification — the badge and the photo will then disappear.
Calls
We store that a call took place and how long it lasted — never the content. Nothing is recorded. Every call runs through our own server so that callers do not learn each other's IP address and thus their approximate area of residence.
Screenshots
The app detects when a screenshot is taken and shows a notice. Only the event is recorded, not the image content.
Who else sees the data
- Hetzner Online GmbH, Germany — servers and email
- Apple — notifications, subscriptions
- Expo — delivery of notifications
- OpenStreetMap / Nominatim — place search
We do not sell data and do not use advertising trackers.
How long
As long as your account exists. After deletion the data is gone immediately; backups expire after 30 days. We keep reports and blocks for 12 months as evidence.
Your rights
Access, correction, deletion, data portability, objection — and the right to complain to the supervisory authority (in Switzerland the FDPIC).
Responsible party
Will be added once the operator is confirmed.