S0ULMATE Privacy Policy

Last updated 29 September 2026. Contact: [email protected]

S0ULMATE is a blind-dating service: the System pairs you with one person at a time and arranges a place and time to meet. This policy explains what we collect, why, and how to delete it.

What we collect

• Account: email address, a password hash (never the password), or your Google account identifier if you sign in with Google. A verified email is required to prove you are a real person.
• Profile: first name, birthdate (to confirm you are 18 or older and to show your age), gender and who you are interested in, hobbies and values, kinds of dates you enjoy, weekly availability, an optional short bio, and photos you choose to add.
• Face scan: during sign-up the app performs a short live camera scan to confirm a real person is present. From it we keep a stylised mesh drawing used as your avatar, a set of numeric facial-geometry measurements and a visual embedding used only for matching. The raw camera frames are used for the check and are not kept. Because this is derived from your face, we treat it as sensitive data and never share it.
• Taste calibration: which faces from our synthetic library you found appealing. These are not real people.
• Location: your approximate location to pick date venues within reach, and, if you choose to share it when you arrive, your position at the venue so your date knows you are there.
• Dates and feedback: the pairings, dates, check-ins and the feedback you give afterwards. Feedback about you is shown to you only in aggregate.
• Purchases: if you buy something, Google Play processes the payment. We receive a purchase token and record what was bought. We never see card details.
• Device: a push-notification token so we can tell you when a match is ready, and standard server logs (IP address, request times) kept briefly for security.

Why we use it

To verify you are a real adult, to choose a partner and a venue for you, to let the two of you find each other, to improve who the System picks for you next, to process purchases, and to keep the service secure. We do not sell personal data and we do not use it for third-party advertising.

Who can see what

Your date sees only what the blind format allows: a first name, your mesh avatar, and whatever either of you chooses to reveal. Your photos are shown only after a reveal. Face measurements, embeddings, feedback and location history are never shown to other users.

Processors we rely on

• Google (Firebase Cloud Messaging for notifications, Google Sign-In, Google Play Billing)
• Resend (transactional email for verification codes)
• Zoho Mail (our support and contact inbox)
• Cloudflare (domain and DNS)
• Our hosting provider for the API and database

How long we keep it

For as long as your account exists. Verification codes expire within 10 minutes. Sessions expire after 7 days. Server logs are kept for a short period for security and then discarded.

Deleting your account

In the app: Profile, then Delete account at the bottom. This permanently removes your account, profile, photos, face data, matches, dates, feedback and purchase records from our systems. If you no longer have the app, see how to request deletion. Purchase records that Google Play keeps are governed by Google's policies.

Your rights

You can ask for a copy of your data, correct it, or delete it at any time by email. If you are in the EU or UK you also have the right to complain to your data protection authority.

Children

S0ULMATE is for adults only. We do not knowingly allow anyone under 18 to create an account.

Changes

If this policy changes in a meaningful way we will tell you in the app before the change takes effect.