1. Information We Collect

We collect the following categories of information when you use IF:

• Account information: email address, phone number, authentication credentials.
• Profile data: name, date of birth, gender, orientation, relationship status, prompts, photos, location (city, country, and coordinates when granted), and optional Instagram handle.
• Messages: IF messages, chat messages, and invite IFs you send or receive.
• Voice messages: audio recordings you choose to record and send in chat, stored as chat media.
• Usage data: app interactions, feature usage, device type, and session analytics.
• Subscription data: billing plan, payment platform (Stripe, Apple, Google), subscription status, and transaction IDs.
• Device data: push notification tokens, device type, operating system version.
• Location data: geographic coordinates and city/country when you grant location permission, used for profile discovery and distance-based matching. Coordinates are stored securely and not shared with other users.

2. How We Use Information

We use your information for the following purposes:

• Operate and deliver the IF service, including profile matching, messaging, and notifications.
• Process subscriptions and payments through Stripe, Apple App Store, and Google Play.
• Moderate uploaded photos for community guideline compliance using AWS Rekognition.
• Screen profile text, chat messages, and interaction text for harmful content using OpenAI's moderation service.
• Confirm you are a real, live person during identity verification using AWS Rekognition Face Liveness (biometric processing — see Section 9).
• Send push notifications for new messages, likes, and IFs.
• Improve product reliability, detect bugs, and analyze usage patterns.
• Prevent fraud, abuse, and enforce rate limits.
• Comply with legal obligations and respond to lawful requests.

3. Third-Party Service Providers

We share limited data with the following processors to operate IF:

• Supabase: database hosting, authentication, file storage.
• Stripe: web payment processing and subscription management.
• AWS Rekognition: automated photo moderation (image bytes only) and Face Liveness identity verification (biometric data).
• OpenAI: automated safety classification of profile text, chat messages, and other free text (content only, not used to train models).
• Amazon SES: transactional email delivery.
• Telnyx: SMS delivery for OTP verification.
• Expo: mobile push notification delivery.
• PostHog: product analytics (anonymized usage data).
• Sentry: crash and error reporting (diagnostic data about app failures).
• KLIPY: GIF search in chat — receives your search terms, IP address, and a pseudonymous identifier.
• Upstash: server-side rate-limit counters.
• Cloudflare: media storage and delivery.

4. Data Retention

We retain your account data for as long as your account is active. When you delete your account, your messages, photos, IFs, and likes are permanently deleted within 30 days. Records we are required to keep for legal, financial, or safety reasons are retained longer: payment and subscription records are kept as required by financial regulations (up to approximately seven years, via our payment processors), and safety and moderation records are retained for as long as necessary to keep the community safe. Some anonymized analytics data may be retained for product improvement purposes.

5. Your Rights

You have the right to:

• Access: request a copy of your personal data.
• Correction: update inaccurate profile information at any time.
• Deletion: delete your account and all associated data from within the app.
• Data portability: request an export of your data in a machine-readable format by emailing support@ifdating.app.
• No cross-app tracking: IF does not track you across other companies’ apps or websites. Our analytics are first-party and pseudonymous.

6. Profile Discoverability

Your search and swipe discoverability settings control how other users can find you. You can disable either or both from your profile settings at any time.

7. Children’s Privacy

IF is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18. If we learn that a user is under 18, we will promptly delete their account and data.

8. Security

We use industry-standard security measures including encrypted connections (TLS), row-level security policies on our database, and secure authentication via Supabase Auth. However, no system is perfectly secure, and we cannot guarantee absolute security.

9. Biometric Information (Liveness Verification)

Identity verification is optional. If you choose to verify, we ask you to record a short live video selfie. AWS Rekognition Face Liveness analyzes this video to confirm you are a real, live person and compares a single frame against your profile photos to confirm it is you. The video and the facial geometry derived from it are biometric identifiers. We process them only to complete verification, do not sell them, and do not use them to train models. The video and the check data are processed by AWS and discarded once the check finishes, with one exception: we retain a single verified reference image from the check for as long as your account exists. That image is used solely to re-confirm your identity if you change your primary photo, and it is deleted when you delete your account. We ask for your explicit consent before capture; you may decline and remain on IF without a verified badge. Where required by law (e.g., the Illinois Biometric Information Privacy Act and the EU GDPR Article 9), this processing relies on your consent.

10. Text Messaging (SMS)

We send SMS text messages to deliver one-time verification codes for phone sign-in and phone-number verification. SMS is delivered by our messaging provider, Telnyx. By providing your phone number to receive a verification code, you consent to receive that message. Message frequency varies with your activity. Message and data rates may apply. Reply HELP for help, or STOP to opt out where applicable. Your mobile information will not be sold or shared with third parties or affiliates for promotional or marketing purposes. We share your phone number and SMS opt-in and consent data only with the vendors that help us deliver these messages (such as Telnyx), solely to provide the messaging service and never for their own marketing; this exclusion covers any method of transfer, including sharing between affiliates.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email. Continued use of IF after changes constitutes acceptance of the updated policy.

12. Contact

If you have privacy questions or wish to exercise your data rights, please contact us at privacy@ifdating.app.

Language

This document may be provided in translation for convenience. The English version is the legally binding version, and it controls if any translation conflicts with it.