Privacy Policy

Account data (email, phone, password hash, authentication provider), profile data (display name, age, photos, gender and orientation selections, connection intentions, boundary preferences), usage data (swipes, matches, messages, reports), device and network signals used for fraud and safety, support communications, and transaction records.

We do not store Social Security numbers, full background-check reports, criminal-record detail, bank or payroll credentials, bank statements, paystubs, tax documents, voice recordings, or raw biometric templates in our application databases. Sensitive collection happens in provider-hosted flows. From those providers we retain only a customer ID, report or verification ID, status, package name, completion and expiration dates, a general adjudication result, dispute status, and necessary audit metadata.

We share the minimum necessary data with identity-verification, background-screening, income-verification, payment, email, hosting, and analytics providers under contract. Each category is listed with its purpose in our subprocessor disclosures before paid memberships activate.

Other members see your profile content, badges with their dates, and approximate distance unless you hide it. They never see your legal name, date of birth, contact details, exact location, screening report, income documents, employer, or payment data.

We do not currently collect voiceprints, face geometry, or other biometric identifiers. If any future feature requires them, we will publish a Biometric Information Privacy Policy, obtain separate written consent with a defined retention and destruction schedule, and will not proceed without it.

We use encryption in transit and at rest, deny-by-default database policies with row-level security, server-side secret management, signed webhook verification, upload malware scanning, image metadata removal, rate limiting, session revocation, administrator multifactor authentication, immutable audit logging, dependency scanning, and periodic penetration testing. No system is perfectly secure.

We keep account data while your account is active, then delete or de-identify it on the schedule published in our retention notice, except where a legal hold, safety investigation, fraud prevention, tax, or dispute obligation requires longer retention. Reported content may be preserved for investigation.

You can edit or delete profile content, control visibility and distance settings, use incognito mode, manage notification preferences, download your data, and request account deletion in-app. Depending on where you live, you may have additional access, correction, deletion, portability, and opt-out rights. We do not sell personal information.

We use strictly necessary cookies for authentication and security, plus limited analytics cookies described in our Cookie Policy. You can manage non-essential cookies through the in-app controls.

We maintain an incident-response plan and will notify affected users and regulators as required by Illinois and other applicable breach-notification law. Privacy questions and requests go through the Contact page.

This document is a working draft published for transparency during development and is not final until reviewed by counsel and given an effective date.