POLICY · VERSION 2026-08-10

Privacy Policy

Effective August 10, 2026

Information collected

We collect account email, password hash, age year, pronouns, ZIP code, matching preferences, assessment answers, profile text, notification settings, membership state, and an optional profile photo. We also keep security and audit events using keyed hashes rather than plain IP addresses.

How matching uses information

Matching compares reciprocal age preferences, broad ZIP-level proximity, lifestyle boundaries, and assessment responses. Other members receive an anonymous profile summary before a mutual introduction. Exact answers, email addresses, ZIP codes, private ratings, and moderation information are not shown to matches.

Photos

Profile photos are resized, converted, and stored in the account's database record. Staff review them before they can be exchanged. A photo becomes visible to a particular introduced member only after both people independently consent, and that permission can be withdrawn.

Private messages and reports

Conversation messages are encrypted in the database. Staff do not browse ordinary conversations. When a member files a safety report, the explanation and only the messages deliberately attached to that report become available to authorized moderators.

Uses of information

We use member data to authenticate accounts, produce matches, operate introductions and messaging, send requested notifications, prevent abuse, investigate reports, maintain the service, and understand aggregate service performance.

Sharing

We do not sell member data. Infrastructure and payment providers may process the minimum data required to provide hosting, email, security, or billing services under appropriate agreements. Information may also be disclosed when legally required or necessary to address an immediate safety threat.

Retention and deletion

Account settings provide a portable JSON export and account deletion. Deletion removes the profile, answers, photo, credentials, and matching eligibility. Encrypted conversations, reports, moderation records, and security events may be retained for a limited period to protect members and resolve disputes. A formal retention schedule will be published before launch.

Your choices

You can pause or hide matching, control optional email categories, withdraw photo exchange, close conversations, block or report members, export account data, and delete the account. Safety notices cannot be disabled when they are necessary to protect the account or community.

These documents will be updated with final business contact details, jurisdiction, and domain before public launch. The member protections and data boundaries described here are intended to remain the same.