Privacy Policy

1. The short version

• We collect what we need to run a safe, 18+, verified dating service — and not more.
• We never receive or store your ID image, selfie, or any biometric identifier. Identity checks happen entirely on our verification vendor’s systems; we get only a pass/fail and an 18+ confirmation.
• We do not sell your personal information.
• You can access, export, correct, or delete your data from Settings.

2. Information we collect

You provide

• Account: email/login (via our auth provider), and your date of birth (used to confirm you are 18+).
• Profile: display name, photos, bio, prompts, interests, “basics” (height, work, education, lifestyle), and city.
• Sensitive attributes (optional, consent-gated): e.g., sexual orientation, religion, family plans — collected only if you explicitly opt in, and used only to improve matching.
• Preferences: age range, distance, and dealbreakers used for matching.
• Communications: messages you send, and reports you file.

Collected automatically

• Usage & device: activity in the app, approximate device/browser data, and security/anti-abuse signals.
• Location: if you turn it on, an approximate location used only to compute distance to potential matches. Your precise coordinates are never shown to other members.

From third parties

• Verification result (pass/fail + 18+) from our identity vendor — see our Identity & Verification Notice.
• Payment/subscription status from Stripe (we never see your full card number).

3. How we use information

• To operate the service: create your profile, run Pop Rooms, score and surface matches, deliver messages.
• To keep POPPED safe: verify age, detect bots and abuse, review reports, and enforce our Community Guidelines.
• To process POPPED+ payments and provide support.
• To send service and (with your permission) notification messages.
• To comply with legal obligations.

4. Legal bases (EEA/UK)

Where GDPR applies, we rely on: contract (to provide the service you signed up for), consent (for sensitive attributes, location, and push notifications), legitimate interests (safety, anti-abuse, product improvement), and legal obligation. You may withdraw consent at any time in Settings.

5. How we share information

We share personal information only with service providers that help us operate POPPED, under contract, including:

• Authentication (login/identity sessions)
• Identity verification vendor (age/ID checks — biometrics stay with them)
• Live video/audio infrastructure (to run Pop Rooms)
• Payments (Stripe, for POPPED+)
• Hosting, database, and file storage

We may also disclose information to comply with law, enforce our Terms, or protect the safety of users and the public. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Retention

We keep personal information for as long as your account is active and as needed to provide the service, then delete or de-identify it, except where longer retention is required by law or a legal hold. Limited safety signals (such as ban-evasion hashes) may be retained after account deletion to keep banned individuals off the platform; these contain no readable personal data.

7. Your rights & choices

• Access & export: download a copy of your data from Settings → Download my data.
• Correct: edit your profile anytime.
• Delete: delete your account from Settings.
• Visibility: hide your profile with the “Show me on POPPED” toggle.
• Consent: turn sensitive attributes, location, and notifications on or off anytime.

Depending on where you live (e.g., EEA/UK under GDPR, California under the CCPA/CPRA), you may have additional rights, including to object to or restrict processing, to non-discrimination for exercising rights, and to lodge a complaint with a supervisory authority. Contact privacy@poppeddating.com.

8. Security

We use technical and organizational measures to protect your data, including encryption in transit, encryption of message contents at rest, access controls, rate limiting, and audit logging. No system is perfectly secure, but security is a first-class part of POPPED’s design.

9. Children

POPPED is strictly for adults 18 and older. We do not knowingly collect data from anyone under 18, and we verify age before granting access to rooms.

10. International transfers

We may process information in countries other than where you live. Where required, we use appropriate safeguards for such transfers.

11. Changes & contact

We will update this policy as the service evolves and post the new “Last updated” date. For privacy questions or to exercise your rights: privacy@poppeddating.com.