Privacy policy
Last updated: 18 October 2026
This policy explains how [legal entity — not yet configured] (“DateForReal”, “we”), controller of your data, handles personal data of members aged 18+. Address: [registered address — not yet configured]. Privacy contact: [privacy email — not yet configured].
What we collect and why (legal bases)
| Data | Purpose | Basis (GDPR art. 6/9) |
|---|---|---|
| Email, password hash (scrypt), date of birth, consent timestamp | Account, age verification (18+), security | Contract; legal obligation / legitimate interest (protecting minors) |
| Profile: name, gender, who you want to meet, city, bio, interests, height, height preference, optional social media handles, optional single profile picture | Show you to compatible members | Contract; explicit consent for data revealing sexual orientation (art. 9(2)(a)) |
| Questionnaire answers (values, lifestyle, intent, deal-breakers, availability) | Compute the compatibility score and filter matches | Contract; explicit consent for sensitive items (e.g. religion importance) |
| Introductions and your answers, matches, messages, call/date plans, “did you meet” check-ins | Run chat, date planning, the first-real-date rule and billing | Contract |
| Mandatory intro video (10–90 s, max 32 MB). Visible only to revealed matches after moderator approval | Show you to matches | Explicit consent |
| Identity verification: photo of an ID document and a selfie (special handling, see below), plus the result and date | Make sure members are real; keep the community safe | Explicit consent (art. 6(1)(a)); ID images are not used for any other purpose |
| Notification preferences, email address, optional WhatsApp number and consent timestamp; notification log | Tell you about new matches and why | Contract (in-app, email); explicit consent (WhatsApp) |
| Video calls: signaling messages (kept in server memory for the call) and a connection flag. Media is peer-to-peer, never recorded or stored by us | Let matches meet before chat | Contract |
| Reports, blocks | Safety and moderation | Legitimate interest |
| Subscription status, Stripe customer/subscription ids, refund records | $9/month membership and refunds. Card details are handled only by Stripe | Contract; legal obligation (accounting) |
| Anonymous daily counters | Understand overall usage. No IPs, no identifiers | Legitimate interest |
Sharing
Before a mutual accept, a proposed member sees only an anonymous summary (age, city, intent, interests, bio unless you hide it, compatibility reasons) — never your name, photos or video. After you both accept, matches see your name, photos and intro video. WebRTC calls use a public STUN server (Google) to find a network path; your IP address may be visible to your call partner and the STUN provider. Matches see your messages and date plans. We do not sell data or show ads. Processors: our hosting provider (DigitalOcean), Stripe (payments, when enabled), and a transactional email provider (when enabled). Transfers outside the EEA rely on Standard Contractual Clauses where applicable.
Profile picture
You may add one optional thumbnail. Metadata (EXIF incl. GPS) is stripped on upload; it may be reviewed by moderators. We have no photo galleries.
Identity verification (ID documents)
To be matched you upload a photo of an ID document and a selfie. Review is manual: a member of our team compares them; there is no automated or biometric check. The images are stored in a private folder that is never served to other members, accessible only to admin reviewers over an authenticated connection. As soon as the review decision is made, both images are permanently deleted; we keep only the result (verified / rejected) and the date. Images not reviewed within 30 days are deleted automatically, and you can delete them yourself before approval or by deleting your account. Legal basis: your explicit consent, which you can withdraw (your verified status then lapses). We do not share ID images with anyone.
Notifications (email and WhatsApp)
When a match is created we notify you in the app and, if you keep it on, by email; by WhatsApp only if you opt in with your number and consent in Settings. Messages include the compatibility percentage and the top reasons why. You can switch channels off any time. Delivery uses a transactional email provider (Brevo or SMTP) and a WhatsApp provider (Twilio or Meta WhatsApp Cloud API) once those are enabled; these providers receive your address/number and the message text. Notification logs are kept while your account exists.
Retention
While your account exists. Deleting your account erases your profile, picture, video, any ID images, matches, messages and date plans immediately; backups are overwritten within 30 days. Payment and refund records are retained as long as accounting law requires. Inactive accounts may be deleted after 24 months.
Your rights
Access and portability (Settings → Download my data), rectification (edit profile), erasure (Settings → Delete account), restriction, objection, and withdrawal of consent at any time. You may complain to your data protection authority (e.g. the CNIL in France; in Monaco, the APDP).
Cookies
One strictly necessary session cookie only — see the cookie policy.
Age
DateForReal is for 18+. See the 18+ rule.
Security
HTTPS everywhere, scrypt password hashing, CSRF protection, rate limiting, restricted admin access.