Privacy Policy

Our Approach to Privacy

OpenDating is designed to minimize data collection and separate service responsibilities. Privacy depends on both architecture and operating policy; no system can honestly promise that surveillance or compromise is impossible.

What We Collect

The beta does not require an email address or phone number. It does process a pseudonymous public account key plus the profile, relationship, safety, and service metadata needed to provide the product.

Information you provide

• Profile data — Display name, age range, gender, bio, interests, relationship intent, and photos. This is what you choose to share on your dating profile.
• Coarse location — A 5-character geohash prefix (~5 km precision). Your exact GPS coordinates are converted to this coarse representation entirely on your device and then discarded. We never receive your precise location.
• Messages — End-to-end encrypted. We cannot read them. Message content is encrypted with NIP-44 before transmission and can only be decrypted by the intended recipient.
• Relationship and safety data — Likes, matches, blocks, unmatches, reports, moderation state, and deletion records are processed by their role-specific services.
• Operational metadata — Cloudflare and the relay may process IP address, request timing, device connection information, and random request identifiers for delivery, abuse prevention, and reliability.

Information we do NOT collect

• Email address or phone number as an account login
• Precise GPS coordinates in the service payload
• Contact lists or address books
• Browsing history
• Device advertising identifiers
• Payment information in the current beta
• Any data from other apps on your device

How We Use Information

The limited information shared with the relay is used exclusively to provide the dating service:

• Your coarse location enables discovery of people in your general area
• Your profile is shown to other users in discovery (according to your visibility settings)
• Encrypted likes are routed to the matcher service to create matches
• Encrypted messages are routed between matched users

The current beta does not use advertising SDKs or product analytics. Infrastructure security and operational logs may still be processed. Any future allowlisted aggregate analytics or moderation vendors will require an updated notice and production approval.

Data Storage and Security

• Your private key is stored with device secure storage and loaded into the app's JavaScript signer in v0.1. It can leave the device only when you explicitly use the legacy advanced recovery-key export.
• Messages are end-to-end encrypted using NIP-44. The relay stores only encrypted ciphertext.
• Likes are private — encrypted as NIP-59 gift wraps to the matcher service.
• Blocks and reports are private — encrypted to their respective services.
• The relay operates on Cloudflare's infrastructure. Encrypted data may be cached at Cloudflare edge locations for performance.

Data Sharing

We do not sell or rent profile or relationship data and do not have advertising partners. Cloudflare processes service data as the current infrastructure provider; Apple, Google, and Expo may process build or distribution data. See the current subprocessors list.

Your Control

• Pause discovery — Hide your profile from new discovery at any time while keeping existing matches.
• Delete account — Requests deletion through the dedicated service and clears local app state after confirmation. See the deletion instructions.
• Export identity — The advanced beta flow can copy the recovery key. Clipboard exposure is a known pre-GA limitation; passkey-encrypted recovery is required for production.
• Location permission — You can deny or revoke at any time. Discovery requires coarse location.

Children's Privacy

OpenDating is only for adults 18 and older. The current beta does not yet have the required liveness and age-assurance system, which is one reason public distribution is blocked.

Changes to This Policy

We will update this notice when practices, providers, retention, or available countries change. Material production changes require a new policy version and acceptance record.

Contact

For privacy questions or data requests, use the confidential email channel: jonny2298@live.com.