Privacy Policy

This policy says, in plain language, what we collect, why, who can see it, and what is always yours. We built this app privacy-first; this page describes what the code actually does.

1. What we collect

You give us:

• Account: your email and sign-in method (email + password, or Google Sign-In).
• Birth details: full name, birth date, and optional birth time and birth place. They power your sun sign, numerology, and compatibility results. Your birth date is locked after entry (it protects the 18+ rule); your exact birth details are never shown to other members, only your age and sign.
• Questionnaire answers: your element test, and the optional depth layers (attachment, Constellation, Grounding). Some Grounding questions touch faith, food, body, and sobriety; those sit behind their own consent gate, and you choose what may be used for matching.
• Profile: display name, city, bio, and up to five photos.
• Messages you send to your matches, and the likes and reports you make.

Created while you use the app:

• Matches and conversations with the members you both said yes to.
• Safety records: reports you send or receive, moderation actions, and the signals our safety systems generate (see Section 3).
• Technical basics: sign-in tokens and server logs needed to run and protect the Service. We use no advertising trackers and no analytics SDKs.

We never ask for and do not want: your social security number, financial details, or government ID. Nobody from this app will ever ask you for money.

2. What other members see

• Potential matches see your card: display name, age, city, element, sun sign, life path, bio, photos, and the light sparks and shared-ground badges you chose to share. Cards are served by our server in small curated batches; the member list itself cannot be browsed, listed, or scraped.
• Your depth answers stay yours alone. Attachment results, Constellation reflections, and raw Grounding answers are never shown to anyone, not even a confirmed match. Matching uses only computed results (a percentage, a shared badge), and for the sensitive Grounding facts only if you gave consent, which you can withdraw at any time without limit.
• Your messages are visible only to the match you sent them to.
• Your exact location is never collected or shown; your city is what you typed, nothing more. Photos are stripped of hidden location data (EXIF/GPS) the moment they are uploaded.

3. Message scanning and safety, disclosed plainly

We want you to know this clearly: messages on this Service are scanned by our automated safety systems, which help detect romance fraud, scams, and abuse. This is why a scammer cannot quietly work here.

• Scanning is automated and runs on our servers when a message is sent. It looks for the patterns of fraud and abuse, and it helps; it does not guarantee.
• Flagged situations can show a safety note to the recipient, and serious cases go to human review. Permanent account decisions always involve a person.
• Safety evidence is stored server-side where no member can read it, and it is used only for safety, never for advertising or sale.
• Staff do not browse your chats. Human review sees flagged content only, through the review queue.

By using the Service you consent to this scanning. It is part of how we keep the promise the app makes.

4. What we use your data for

• Matching: computing your compatibility with other members (elements, astrology, numerology, and the depth layers you completed).
• Running the Service: your profile, photos, chats, and account.
• Safety: the systems in Section 3, enforcing the Terms, and, where the law requires or allows, warning members who were in contact with an account banned for fraud.
• Communication: account and safety emails. When we add optional news or tips emails, they will have their own unsubscribe.
• Legal duties: responding to lawful requests and meeting reporting obligations (for example, child-safety reports to NCMEC).

We do not sell your data. We do not share it for advertising. We show no ads. Ever.

5. Who processes data for us

Trusted providers host and process data so the app can run, under contracts that limit them to working for us:

• Google Firebase (authentication and database, USA)
• Cloudflare R2 (photo storage, private bucket, USA)
• Vercel (application hosting, USA)
• When payments launch: a payment processor (they handle your card; we never see the number). When video calls launch: a video provider (calls are live and never recorded).

This list will be kept current in this policy.

6. How long we keep things, and deletion

• Your data stays while your account is active.
• Delete your account anytime from your Profile. We erase your photos, profile, answers, matches, likes, and your account itself, and we remove or anonymize the reports you filed. In conversations, your words are redacted; the other person keeps their own side, marked that you left. For safety and legal reasons we keep a minimal, limited set of records: reports made about you and moderation actions, so that deleting an account can never erase a safety trail.
• Export your data anytime from your Profile; you receive a copy of what we hold about you.
• Some minimal records may be kept where the law requires (for example, child-safety reports have a legally required retention period).

7. Your choices and rights

• See and fix: your profile, bio, city, and photos are editable anytime. Birth date is the one locked field, explained above.
• Consent you can change: the Grounding sharing consent can be granted or withdrawn at any time, without spending your retake and without limits.
• Export and delete: built into your Profile, no email required, though you can always ask us too.
• Blocking: block any member; you disappear from each other's discovery and matches, and neither of you can start anything new with the other.
• Local sign-in data on your device is cleared when you log out.
• If you are in a state or country that gives you additional privacy rights, we honor requests to the extent that law applies; write to us and a person will answer.

8. Security

Deny-by-default database rules, server-only writes for anything sensitive, encrypted connections everywhere, photos in a private bucket with expiring links, strict content-security headers, and independent security review before launch. No system is perfect; if a breach ever creates real risk for you, we will notify you and the authorities the law names, promptly.

9. Age

This Service is for adults, 18 and over. We do not knowingly collect data from anyone under 18; such accounts are removed when found.

10. Changes

Meaningful changes to this policy will be announced in the app or by email before they take effect, with the new date. Prior versions available on request.

11. Contact

Privacy questions and requests: the.compatibilitycode@gmail.com, or the message form in the Safety Center. A real person reads every message.

See also our Terms of Service.