Privacy policy

1. What makes Confidate different

• Your likes stay secret. Someone learns you liked them only if they like you back. You only see how many people liked you, never who.
• Your chats are private. Only the two of you write in a match.
• Friends read only with agreement. Depending on the match, the other person’s friends may read your conversation (section 3). Between two men or two women, you see how many friends read, never who. A man matched with a woman is not told whether her friends read: he agreed to it when he signed up.
• The person who invites decides what friends read. Before each invitation, and at any time after, they can hide any message from their friends.
• Friends’ advice is private. It is shared only between the person who invited and their friends; the other person never reads it.
• Who you are looking for is never shown. Your gender preferences are only used to show you profiles that fit both ways.
• Your exact position is never stored. If you choose to measure distances from your phone’s position, it is rounded to about 5 km before it is stored.

2. What we collect

We do not use your data for advertising, and we do not sell it.

3. Who can see what

• People in Discover: your whole profile, an approximate distance if they use a maximum distance, and whether you are online if you allow it. They never see your e-mail address, your date of birth or your exact position.
• Your matches: your profile, your messages, whether you are online and whether you read their messages (only if you both allow it), and that your account is paused. Between two men or two women, how many of your friends read the conversation, never who; a man matched with a woman is not told.
• Friends invited by your match. In a match between a woman and a man, the woman may invite friends; in a match between two men, both may; in a match between two women, each may after the other agrees in the chat. Friends who accept see your profile and your conversation, except the messages hidden from them by the person who invited them. They never see your e-mail address or your other chats. What a friend has read cannot be taken back.
• Your friends, if you invite some: the same about your match, and your own profile while they help. Your friends and you share a private advice thread that your match never sees.
• An invitation link works once, for 48 hours: the first person who opens it with an account becomes a reader. Send it only to the friend you mean.
• Nobody ever sees your e-mail address, date of birth, who you are looking for, your exact position, who liked you, or which messages are hidden from friends.
• Our moderators: what was reported, with its context, to keep the community safe. An advice thread is only visible to them as part of a report about it.
• Our administrators: they can read every record of the service, private messages and advice included, through a protected admin tool with two-factor authentication. Every table, record or search they open is recorded in an audit log.

Your match and their friends can take screenshots. We ask phones not to allow them on sensitive screens, but cannot guarantee it.

4. Legal bases

• Contract: your account, profile, matches, chats, and the help from friends you ask for.
• Explicit consent: your gender preferences (sexual orientation); measuring distances from your position; notifications. You can withdraw these at any time (section 7).
• The friend-sharing agreement: men agree at registration that their matches may invite friends to read their conversations. It is needed to use the dating features, and can be withdrawn at any time in Settings (section 7).
• Legitimate interest: safety and moderation, preventing abuse, showing who is online and reading receipts (which you can turn off), counting likes received.
• Legal obligation: handling reports of illegal content and answering lawful requests from the authorities.

5. Who processes your data for us

The list of cities offered when you choose a city comes from GeoNames (CC BY 4.0); nothing about you is sent to it.

6. How long we keep it

• Your account, profile and preferences: until you delete your account. After six months without opening the app, your account is paused (your profile leaves Discover) and a stored position is forgotten; nothing is deleted.
• Likes and passes: 90 days, except the likes of a match that still exists.
• Private chats: until their author deletes their account, including the messages of an ended match.
• Help from friends: 30 days after a match ends, its advice, hidden-message choices, invitations, sharing requests and friends’ accesses are deleted, except the record of the last time a given friend helped you, which lets you invite them again.
• Invitation links: valid 48 hours, used once.
• The friend-sharing agreement and its withdrawals: until the account is deleted, as the record of what was agreed.
• Reports and moderation records: one year after the case is closed, then anonymized. What was reported is kept with the case, even if its author deletes their account. If an account is deleted while banned or suspended, a fingerprint of its e-mail address (not the address itself) is kept for two years after a ban, or until the end of a suspension.
• Notification records and error reports: 30 days.
• Identification data: the dates and IP addresses of your sign-ins are kept one year. If you delete your account, a minimal record (e-mail address, account dates, the identifiers of your conversations, and any sanctions) is kept one year, only to answer lawful requests from the authorities.
• Data concerned by an investigation: when the authorities lawfully request it, the data concerned is kept as long as the investigation requires, even if the account is deleted, and is only disclosed to them.

7. Your rights

You can, at any time:

• see and correct your profile in the app, including whether your zodiac sign is shown;
• choose what friends read: hide any message from your friends, or share it again, by long-pressing it; remove a friend’s access;
• stop sharing your conversations with friends: in a match between two women, in the chat; for men, by withdrawing the friend-sharing agreement in Settings. After a warning, your account is then paused, your conversations are closed for both people and friends stop reading. You can accept the agreement again after seven days;
• pause your account, turn off showing when you are online, read receipts, notifications, and the use of your position;
• download a copy of your data in Settings, or ask us any question: hello@confidate.app;
• delete your account in the app (see how to delete your account): your profile, photos, likes, invitations and friends’ accesses are deleted, and the text of your messages is erased (your match sees “Message deleted” in its place); what the law requires us to keep is kept as described in section 6;
• object to a processing or restrict it;
• withdraw your consent to the use of your gender preferences by deleting your account;
• complain to your data protection authority (in France, the CNIL: www.cnil.fr).

We answer within one month.

8. Adults only

Confidate is for people aged 18 and over; friends confirm they are 18 or over before reading. If we learn that an account belongs to a minor, we close it.

9. Security

Data is encrypted in transit; photos are only served to people allowed to see them; invitation links are stored only as scrambled codes; positions are rounded before they are stored; staff need two-factor authentication; access rules are tested automatically. If a breach puts your rights at risk, we tell the authority within 72 hours and inform you without delay.

10. Changes

We will tell you in the app before any important change to this policy.