Privacy Policy — CupidMsg

CupidMsg, Inc. (“CupidMsg,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dating application and website (the “Service”). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, date of birth, gender, gender preference, and password (or Google OAuth credentials).
Profile Information: Photos, bio, interests, relationship goals, education, occupation, height, religion, lifestyle preferences (drinking, smoking, exercise), and profile prompts.
Communications: Messages you send to other users, reports you submit, and support inquiries.
Payment Information: When you subscribe to Premium, payment is processed by Stripe. We do not store your full credit card number. We receive your Stripe customer ID, subscription status, and billing period from Stripe.

1.2 Information Collected Automatically

Location Data: With your permission, we collect your approximate location (latitude/longitude) via browser geolocation to show you nearby users. We also reverse-geocode this to a city name. Location is stored as a geohash for proximity queries.
Usage Data: Pages visited, features used, likes sent, matches made, time spent on the app, and interaction patterns.
Device Information: Browser type, operating system, device type, IP address, and unique device identifiers.
Cookies & Similar Technologies: We use essential cookies for authentication and session management. See our Cookie Policy section below.

1.3 Information from Third Parties

Google OAuth: If you sign in with Google, we receive your name, email, and profile photo from Google.
Stripe: We receive subscription status, payment success/failure notifications, and customer IDs from Stripe.

2. How We Use Your Information

We use your information to:

Create and manage your account and profile.
Show your profile to other users and display other users' profiles to you.
Facilitate matches, messaging, and social interactions.
Process payments and manage subscriptions.
Send you verification emails, account notifications, and service updates.
Enforce our Terms of Service and community guidelines.
Investigate and respond to reports, fraud, and safety concerns.
Improve, personalize, and optimize the Service.
Comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

With Other Users: Your profile information (name, age, photos, bio, interests, location city) is visible to other authenticated users as part of the core Service functionality.
Service Providers: We share data with third-party providers who help us operate the Service, including:
- Firebase (Google) — authentication, database, file storage, hosting
- Stripe — payment processing
- Namecheap Private Email — transactional email delivery
- Nominatim (OpenStreetMap) — reverse geocoding (anonymous, no user data sent)
Legal Requirements: We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
With Your Consent: We may share your information for other purposes with your explicit consent.

4. Data Retention

Account Data: We retain your account and profile data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except as required for legal compliance or legitimate business purposes.
Messages: Chat messages are retained for the duration of the match. If a match is deactivated (unmatched/blocked), messages are retained for up to 90 days for safety review purposes, then deleted.
Reports: Reports and related data are retained for up to 2 years for safety and legal purposes.
Payment Records: Billing records are retained as required by tax and financial regulations (typically 7 years).
Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and service improvement.

5. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Update or correct inaccurate personal data via your profile settings.
Deletion: Request deletion of your account and personal data.
Portability: Request your data in a structured, machine-readable format.
Objection: Object to certain processing of your data.
Withdraw Consent: Withdraw consent for location tracking or marketing communications at any time.

To exercise these rights, contact us at support@cupidmsg.com. We will respond within 30 days.

6. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption in transit (TLS/SSL) for all data transmitted between your device and our servers.
Encryption at rest for stored data via Firebase/Google Cloud infrastructure.
Firebase Authentication with secure token-based sessions.
Firestore security rules that restrict data access to authorized users only.
Firebase Storage security rules that restrict file uploads to authenticated owners.
Server-side validation and rate limiting on all API endpoints.
Stripe PCI-DSS compliant payment processing (we never see or store your full card number).

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies & Tracking

We use the following types of cookies and similar technologies:

Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
Analytics: We may use Firebase Analytics (Google Analytics) to understand usage patterns. You can opt out via your browser settings or Google's opt-out tools.

We do not use advertising cookies or sell data to advertisers. We do not engage in cross-site tracking.

8. Children's Privacy

CupidMsg is not intended for anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child under 18 is using the Service, please contact us at support@cupidmsg.com.

9. International Data Transfers

Your data may be processed and stored in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose.
Request deletion of your personal information.
Opt out of the sale of personal information (we do not sell your data).
Non-discrimination for exercising your privacy rights.

To exercise these rights, contact support@cupidmsg.com.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you have additional rights under GDPR:

Right to access, rectify, erase, restrict processing, and data portability.
Right to object to processing based on legitimate interests.
Right to lodge a complaint with your local data protection authority.

Our legal bases for processing are: (a) your consent, (b) performance of our contract with you (Terms of Service), (c) our legitimate interests in operating and improving the Service, and (d) compliance with legal obligations.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

CupidMsg, Inc.
Email: support@cupidmsg.com