🔒
Privacy Policy
We take your privacy seriously. This policy explains what data we collect, how we use it, and how you can control it.
Last updated: January 1, 2024 · Effective immediately
Summary: KupataLove collects information you provide to us and usage data to improve the service. We never sell your personal data to third parties. You can delete your account and all associated data at any time.
1. Data We Collect
Information You Provide
- Account data: Name, email address, date of birth, gender, and password (stored as a secure hash).
- Profile data: Profile photos, bio, city, job title, education, and profile prompts.
- Preferences: Who you're interested in, language preference, notification settings.
- Messages: Text messages and voice notes sent between matched users.
- Payment data: Billing information processed securely via Stripe. We never store full card numbers.
Automatically Collected Data
- Usage data: Profiles viewed, swipe actions, features used, time spent in the app.
- Device data: Browser type, operating system, screen resolution, IP address.
- Log data: Error reports, access timestamps, API request logs (retained for 30 days).
Data from Third Parties
If you connect with social login (if offered), we receive your name, email, and profile photo from that provider, subject to their privacy policy.
2. How We Use Your Data
- To create and manage your account and authenticate you securely.
- To power our AI matching engine — analyzing compatibility between profiles.
- To automatically translate messages between users in different languages.
- To send you notifications about new matches, messages, and app updates.
- To process payments and manage your subscription.
- To enforce our Terms of Service and keep the community safe.
- To improve and personalize your experience through aggregate analytics.
- To comply with legal obligations and respond to lawful requests.
We do not use your data to serve third-party advertisements inside the app.
3. Data Sharing & Third Parties
We do not sell your personal information. We share data only as described below:
With Other Users
Your profile (name, age, photos, bio, city, prompts) is visible to other users during discovery and to matched users. Your email and payment information are never visible to other users.
With Service Providers
- Stripe — Payment processing. Subject to Stripe's Privacy Policy.
- Google Translate / DeepL — Message translation (only the text content is sent, never your identity).
- Cloud hosting providers — Secure server infrastructure.
Legal Requirements
We may disclose your data if required by law, court order, or to protect the rights, property, or safety of KupataLove, our users, or the public.
4. Data Retention
We retain your data for as long as your account is active. When you delete your account:
- Your profile and photos are immediately removed from public view.
- Your messages are deleted within 30 days.
- Anonymized usage statistics may be retained indefinitely for analytics.
- Payment records are retained for 7 years to comply with financial regulations.
5. Cookies & Tracking
We use the following cookies and local storage:
- Authentication tokens — Stored in localStorage to keep you logged in. Expires in 7 days.
- Language preference — Stored in localStorage to remember your language.
- Analytics (optional) — Aggregate page view data. No cross-site tracking.
You can clear all app data by logging out and clearing your browser's local storage. We do not use advertising cookies or third-party tracking scripts.
6. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of all personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data via your profile settings.
- Erasure: Delete your account and associated personal data at any time.
- Portability: Request an export of your data in a portable format.
- Restriction: Ask us to stop processing your data under certain conditions.
- Opt-out: Unsubscribe from marketing emails at any time.
To exercise any of these rights, email us at privacy@kupatalove.com. We will respond within 30 days.
7. Data Security
- Passwords are hashed using bcrypt with a high work factor and are never stored in plain text.
- All API communication uses HTTPS with TLS 1.2+.
- Authentication tokens expire and are rotated regularly.
- Database access is restricted to authorized services only.
- We conduct regular security reviews and vulnerability assessments.
Report a vulnerability: If you discover a security issue, please email security@kupatalove.com before disclosing it publicly. We appreciate responsible disclosure.
8. Children's Privacy
KupataLove is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we discover that an account belongs to a minor, we will immediately delete it. If you believe a minor is using the platform, please report it to safety@kupatalove.com.