Privacy policy

Effective 29 October 2026

Draft for legal review. The business details below are placeholders until the owner supplies them. Do not launch publicly with this banner showing.

Amoetta ("we") is a dating service for adults. [COMPANY NAME], [POSTAL ADDRESS], is the controller of your personal data. Contact us about privacy at [PRIVACY EMAIL].

What we collect

You give us: email or Google sign-in, first name, birthday (only your age is shown), gender, who you want to see, photos, profile answers, messages, likes and notes, reports, and any holiday plans you choose to share (days, plans, and whether you are looking for friends, dating or either).
Photo check (biometric data): if you take the photo check, a live selfie is compared with your profile photos by a face-matching model that runs on our own servers (face geometry is biometric data, processed only with your consent). To catch fakes, your selfie alone, not your profile photos, is sent to Anthropic's Claude, an AI service, which is asked only whether it is a live camera photo of one real person doing the requested pose; it is never asked who you are. The selfie is not stored: it is deleted when the check ends, or within 48 hours at most if the AI check has to wait. We keep the decision and the match scores (never images) for up to 90 days. Deleting your account erases all of it. It is a photo check, not an identity check.
Mobile number (optional): if you choose to add one, in sign-up or in Settings, we store it privately, in international format, marked as unverified. It is used only to help you recover your account and for security alerts. It is never shown to other members, never on your profile, in matching, in messages, in analytics or in our logs, and we do not send anything to it today (no texts, calls or marketing, and we do not verify it). Our lawful basis is your consent; you can withdraw it at any time by removing the number in Settings → Account, and it is deleted when you delete your account.
Location: approximate location only if you allow it, to show distance. We never show exact location.
Payments: card payments are handled by our payment processor, and we never see card numbers. For crypto we store the wallet address, amount and transaction hash you submit. Blockchain transactions are public by nature.
Device and use: push-notification tokens if you allow them, security logs, and anonymous counts of how the service is used. No advertising trackers or cookies.

Sensitive data: gender and who you want to see

Your gender and who you want to see can reveal your sexual orientation. In the UK and EU this is special-category data. We use it only to decide who you see and who sees you, with your explicit consent, which you give when you sign up and can withdraw at any time in Settings or by deleting your account. We never sell it, share it with advertisers or use it for ads.

Why we use data (legal bases)

Contract: to run your account, matching and messages.
Consent: for sensitive data, location, notifications, the optional mobile number and other optional features.
Legitimate interests: keeping the service safe, preventing fraud and scams, and improving the product.
Legal obligation: tax, accounting and responding to lawful requests.

Who we share it with

Service providers who process data for us: Google Firebase (hosting, database, authentication, storage, messaging), Vercel (website), our card processor, and blockchain RPC providers to verify crypto payments. Other members see only what you put on your profile. We do not sell personal data, and we do not "share" it for cross-context advertising.

Transfers

Data is stored with providers in the United States. For people in the UK and EU we rely on the UK and EU transfer mechanisms (including standard contractual clauses and, where available, the Data Privacy Framework).

How long we keep it

While your account is open. When you delete it, your profile, photos and messages are removed promptly; limited records (payments, safety reports, fraud prevention) are kept for as long as the law or a legitimate need requires, usually up to seven years for payments.

Your rights

Depending on where you live (including under the GDPR, UK GDPR, Canada's PIPEDA, and US state laws such as the CCPA/CPRA) you can access, correct, delete and export your data, withdraw consent, object to or restrict processing, and complain to your regulator (in the UK the ICO, in France the CNIL, in Canada the OPC). Use the app's Settings or write to [PRIVACY EMAIL]. We reply within one month.

Children

Amoetta is for people 18 and over. If we learn that someone under 18 has an account we remove it.

Changes

We'll tell you in the app before material changes take effect.