Privacy Policy

The data controller for your use of the Service is the entity operating your deployment (for example, the tenant identified on the site). Where processors assist us—hosting, analytics with consent, email delivery—they process data under contracts and instructions.

Account and profile: names or pseudonyms, email, locale, photos you upload, journey responses, preferences, and compatibility-related signals derived from them.

Usage and device: security logs, diagnostics, approximate timezone when you enable it, and technical identifiers needed to keep sessions secure.

Messaging and connections: messages and metadata needed to deliver chat and connection workflows.

Support: content you send when contacting us.

We process data to provide the Service (contract performance), secure accounts and prevent abuse (legitimate interests and legal obligations), improve reliability (legitimate interests; analytics cookies only with consent where required), and comply with law.

Where consent is the basis—such as optional analytics—you may withdraw without affecting lawful processing on other bases.

We use strictly necessary cookies for locale (`NEXT_LOCALE`), session continuity, and security. Optional analytics or marketing cookies load only where enabled by your choices and regional defaults.

See the Cookie Policy for categories and controls.

Infrastructure and subprocessors may be located outside your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses and supplementary measures.

We do not sell personal data as "sale" is defined under applicable U.S. state laws; we do not monetize attention through third-party ad networks.

We retain data while your account is active and for a limited period afterward for security, legal compliance, and dispute resolution—typically months unless longer retention is required by law.

You may request deletion subject to exceptions (e.g., fraud prevention).

Depending on your location, you may have rights to access, rectify, delete, restrict, port, or object to processing, and to lodge a complaint with a supervisory authority.

Exercise requests via the in-product privacy contact or operator channel; we verify identity before disclosure.

The Service is not directed to children under the age required in your region. Do not register if you do not meet eligibility requirements.

We update this policy when practices change. Material updates are communicated in-product or by email where appropriate. Continued use after the effective date acknowledges the updated policy.

Privacy questions and requests: use the operator privacy inbox published for your deployment. EU/UK users may contact the supervisory authority in their member state.