SOMEONE.
Your life is yours.
Privacy model · draft requiring legal review before public launch.
What a profile shares
Your first name, derived age, city or chosen neighborhood, approved photos, biography, prompts, and public interests may be seen by eligible introductions and mutual connections. Profiles are not public search pages. We do not ask for a home address or track precise GPS.
What stays private
Your email, date of birth, dating preferences, and matching-only compatibility answers are not disclosed to other members. Each compatibility answer has an explicit audience: matching only, mutual connections, or people who can view your profile. Match explanations do not reveal hidden answers.
Messages and safety
Messages are accessible to the participants, subject to blocking and account state. This MVP uses local pattern signals for money requests, crypto, and external links to flag potential scams. No conversation data is sent to an advertising service. Administrators see relevant reported conversation evidence through an audited review; there is no general conversation browser.
Feedback and product measurement
Post-date safety feedback and individual See Again answers stay private. A mutual Yes is shared only after both people confirm their meeting and independently answer Yes. Internal analytics store event names and stable internal entity references, never answers, messages, screening records, or precise location.
Pausing and deletion
Pause stops new discovery and Tonight; existing conversations remain unless blocked. Deletion immediately disables the account, discovery, availability, and sessions. The default 30-day purge job removes active profile fields, photos, compatibility answers, notifications, and messages sent by the deleted user. Restricted report evidence is separated and retained for up to 180 days after capture once the report is closed; unresolved cases require documented review. Immutable moderation and audit records remain restricted. Backup and billing retention must be finalized for the launch jurisdiction.
Your choices
Change your profile and notification settings, sign out all sessions, or begin deletion from You. A public support channel and formal access/correction/export request process must be provided before launch.