Your answers.
Your business.
Dating should make you feel seen. Not exposed.
What people can see
Your approved photos, first name, age, city, country, dating intent, bio, profile prompt and interests. Your email, birth date and location coordinates stay off your public profile. Profiles are shown to signed-in members through discovery and connections.
What stays private
Intimacy answers are encrypted before storage. They help prioritize suggestions alongside ordinary dating preferences, shared interests, activity and variety. We do not show other members your answers, intimacy scores or category breakdowns. This is a matching heuristic, not a prediction of relationship success.
Your choice, every time
Every intimacy question is optional. Sharing answers requires your explicit consent. You can edit them, delete all answers and withdraw consent, or delete your account in settings. Deleting answers does not remove existing suggestions or matches.
Reducing guesswork about your answers
Questionnaire changes apply to later suggestion batches, within 48 hours. Saves are limited to three per day. We mix several factors and do not expose internal rankings. Recommendations may still provide indirect clues; we cannot promise that inference is impossible.
Location and photos
You can enter a city manually worldwide. Optional browser location is rounded to approximately a city-sized area before saving and used for approximate distance filtering. Only your city is displayed. Uploaded photos are re-encoded to remove embedded metadata and reviewed before appearing to other members.
Messages and moderation
Chat is text only and available after mutual likes. Messages are stored on the server; this is not end-to-end encrypted chat. Authorized moderators review reports and photos. Advertising trackers are not included. Third-party analytics never runs inside the member app. Essential session storage keeps you signed in and protects forms.
App installation and notifications
Installation stores only a generic offline screen and public icons. Profiles, messages and private answers are not saved in the offline cache. If you opt in to push notifications, we store an encrypted browser subscription and a device cookie to manage delivery. Your browser’s push provider processes delivery; alerts contain only a generic match or message notice. You can turn push off for one or all devices in Settings. Logging out removes this device’s server subscription. Notifications already delivered may remain in your device’s notification history.
In-app notifications are kept for up to 30 days. Undelivered push alerts expire after one hour. Blocking or unmatching removes the associated in-app alerts and queued deliveries. Push subscriptions are removed when you disable them, delete your account or the browser reports that they have expired.
Homepage design testing
We compare three homepage backgrounds using the existing browser session. We record aggregate counts of sessions served each design, main-button clicks, preview interactions and completed new-account registrations. The totals contain no member IDs, emails, IP addresses, referrers or intimate information. Each action counts once per assigned session; assignments expire with the session or after 24 hours. Aggregate totals are kept for up to 180 days. We honour browser Do Not Track and Global Privacy Control signals by excluding those sessions from measurement. Design review links and known automated visitors are also excluded. Nothing is shared with an advertising or analytics provider.
Cookies and Google Analytics
Google Analytics measures visits to our homepage and waitlist entry pages, waitlist openings and successful signup requests. Requests are not the same as confirmed subscriptions. Measurement starts automatically on eligible visits. The cookie notice explains this use; its Accept button dismisses the notice and saves that acknowledgement for six months. It is not an opt-in control or a record of consent.
We do not send email addresses, form answers, account identifiers, full referrer URLs or query strings. Google Analytics never runs on member, chat, questionnaire, email verification, editorial or legal pages. Advertising features, Google signals and automatic form measurement are disabled. Analytics uses browser identifiers and cookies; Google processes technical connection information when its service loads. These protections do not make all processing anonymous. Analytics cookies expire after six months and event/user data is retained for two months.
We honour Do Not Track and Global Privacy Control signals, and refusals previously saved using our earlier preferences screen. Browser controls can also block Analytics and remove its cookies. See Google’s privacy policy for its processing and international data transfers.
Access and deletion
Settings include a JSON download of your profile, latest answers, sent messages and photo metadata. Account deletion removes live account data, photos and conversations. Hosting logs and backups need separate retention and deletion procedures before public launch.
Launch waitlist
If you join the waitlist, we store your email address, language, signup time and confirmation time to send one launch announcement. Joining requires your explicit choice and email confirmation. This does not create a member profile or store intimacy answers. Use the link in your confirmation email to remove your entry, or contact our privacy address. Unconfirmed entries expire after 48 hours; waitlist entries are removed after six months. We do not add waitlist addresses to other marketing lists.