Privacy Policy

Principled Dating — last updated 20 October 2026

Draft for legal review. Text in [square brackets] must be completed before release.

1. Who is responsible

[Full name or company, legal form]
[Street and number, postal code, city, country]
E-mail: [contact e-mail]

[Data protection officer, if one is appointed.]

2. The short version

We collect only what the app needs to work. There is no advertising, no analytics and no tracking, and we do not sell data.
Your exact location never leaves your phone. We only receive the map cell (about 0.7 km²) you were in.
Messages are end-to-end encrypted. We cannot read them.
You can delete your account, and with it your data, at any time in the app.

3. What we process and why

Data	Purpose	Legal basis
Name, description, photos and videos you add to your profile	Show your profile to other users	Performance of the contract (Art. 6(1)(b) GDPR)
Sex and the sex you want to see	Show you suitable people. This may allow conclusions about sexual orientation.	Your explicit consent (Art. 9(2)(a) GDPR)
Map cells you have been in (H3 cells of about 0.7 km², derived on your device)	Find people who frequent the same places	Your consent (Art. 6(1)(a) GDPR), given through the location permission
Hearts you send (who, when)	Match and connect people	Performance of the contract
Messages, only as encrypted text until the recipient has retrieved it	Deliver messages between matches	Performance of the contract
Random account ID, random per-install device ID, public keys	Sign you in without a password and keep your account secure	Performance of the contract; legitimate interest in security (Art. 6(1)(f) GDPR)
Technical logs: IP address, time and requested function	Operate the service, prevent abuse and fix errors	Legitimate interest (Art. 6(1)(f) GDPR)

We do not collect your contacts, your photo library, advertising identifiers or browsing data. Photos in your profile are taken live in the app and are never read from your photo library.

4. Permissions on your device

Camera: to take your profile photos.
Location (also in the background): to update your map cell when you move to new places, even when the app is closed. You can withdraw this in iOS Settings at any time. The app then stops adding new places.
Notifications: the app schedules notifications locally on your phone. We do not send push notifications from a server.

5. Who sees your data

Other users see your name, description, sex, photos and videos if you have been in the same map cell. They do not see your map cells or your location.
Amazon Web Services hosts our servers in Frankfurt, Germany (region eu-central-1) and processes data on our behalf under a data processing agreement. [Transfer safeguards for the US parent company — to be confirmed by counsel.]
We do not share your data with advertisers or data brokers, and we use no third-party analytics or advertising software.

6. How long we keep data

Profile, photos and map cells: until you delete your account, or automatically about one year after you were last active.
Hearts: 7 days.
Messages: until the recipient retrieves them; then they are deleted from our servers. Only one message per recipient can be waiting at a time.
Technical logs: [retention period to be set, for example 30 days].
On your phone: profiles of other people you have seen are kept for about two weeks, or longer if you star them. Deleting your account or the app removes them.

7. Security

Connections to our servers are encrypted (TLS). Messages are end-to-end encrypted with keys that stay on your device. Your account key is stored in the iOS Keychain. Because there is no password, we cannot recover an account whose key and backup are both lost.

8. Your rights

Under the GDPR you have the right to access, correct, delete and restrict the processing of your data, to data portability, and to object to processing based on legitimate interests. You can withdraw any consent at any time with effect for the future.

Delete: Settings → Delete My Account removes your profile, photos, map cells and connections from our servers.
Export: Settings → Backup & Restore creates an encrypted file with your identity, profile and photos.
Everything else: write to [contact e-mail]. We answer within one month.

You also have the right to complain to a data protection authority, for example the one in your country of residence. [Competent supervisory authority — to be completed.]

9. Age

The app is for people aged 18 or older. We do not knowingly process data of minors.

10. Changes

If we change how we process data, we will update this page and, for significant changes, inform you in the app.