Privacy Policy

• Account: name, email (via Google sign-in or magic link), date of birth, phone number, and the invite that brought you here (who invited whom).
• Profile: the details you choose to share — your city, one photo, prompt answers, and information about your faith and community involvement: church community, serving, training, nations on your heart, and similar.
• Activity: references written by and about you, interests and Postcards, setups, matches, and messages.
• Billing: handled by Stripe. We never see or store your card details — only your subscription status and purchases.

We collect the minimum the product needs, and nothing in the background.

Because this app serves a faith community, your profile inherently reveals your religious affiliation. That is special category data under GDPR Article 9 and similar laws worldwide. We process it only with your explicit consent, which we ask for in plain words at signup — the checkbox is real, not buried.

You can withdraw that consent at any time by deleting your account, which removes this data. We never use religious data for advertising and never share it with third parties beyond the processing described in this policy.

• to run the product: profiles, discovery, matching, messaging;
• to generate match suggestions, including AI-assisted suggestions computed server-side from profile data — never from your private circle conversations, which are excluded from AI inputs;
• to keep the community safe: reports, blocks, and moderation;
• to process payments and prevent abuse.

Legal bases: performance of our contract with you (running the app), your explicit consent (religious data), and legitimate interest (safety and abuse prevention).

• We never sell your data. To anyone, for anything.
• Your phone number is never shown to other members, anywhere in the app.
• Your photo stays blurred to others until you match (or until you choose to reveal it by sending a Postcard). Originals are stored privately and served only through short-lived signed links.
• Your date of birth is never displayed — only your age.
• One-sided interest is never revealed: who you passed on, declined, or blocked stays invisible to them.
• No advertising, no tracking pixels, no data brokers.

Your profile is visible only to signed-in members allowed to see it under the app’s rules (for singles: once a friend has vouched for you; never across a block; hidden while you’re dating). Matchmaker accounts have no dating profile and are never discoverable. Reports are confidential; blocks are never disclosed.

We use a small set of infrastructure providers to run the app: Supabase (database, authentication, storage), Vercel (hosting), Stripe (payments), and Anthropic (server-side AI suggestions). They process data on our instructions under their own data protection agreements.

We keep your data while your account is active. You can delete your account at any time, which permanently removes your profile, photo, prompt answers, references about you, phone number, and religious-affiliation data. Limited records may be retained where the law requires (for example payment records) or to enforce a ban.

Wherever you live, we honour the GDPR standard: the right to access, correct, export, and erase your data, to withdraw consent, and to object to processing. Contact us at the support address shown in the app and we will respond within 30 days. You may also complain to your local data protection authority.

Our members are international; data is stored on infrastructure in the United States with appropriate safeguards (standard contractual clauses) for transfers from other regions. If this policy changes materially, we’ll tell you in the app before the change takes effect.