1. Overview
DeepDate ("we", "our", or "us") is operated by Kafeinman, based in Ankara, Turkey. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the DeepDate mobile application and website (collectively, the "Service").
By using DeepDate, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
We are committed to full transparency. If you have any questions about how your data is handled, contact us at support@deepdate.app.
2. Data We Collect
We collect the following categories of data to provide and improve the Service:
2.1 Account Information
- Phone number or email address (for authentication)
- Name, date of birth, gender
- Profile photos uploaded by you
- Bio and personal preferences (height, body type, interests)
2.2 Verification Data
- Face embeddings — A mathematical vector representation of your face, generated during the AI liveness check. Raw photos from the liveness check are not stored; only the numerical embedding is retained to power AI matching.
- Liveness challenge results (look straight, turn left/right, smile)
2.3 Usage Data
- Swipe interactions (likes and dislikes) — used exclusively to train your personal AI preference model
- Messages you send within the app
- Favorites and match activity
- Filters and search preferences
2.4 Location Data
- Approximate location (city/region level) for nearby discovery features — we do not continuously track your precise GPS coordinates
2.5 Device & Technical Data
- Device type, OS version, app version
- Firebase Cloud Messaging (FCM) token for push notifications
- Crash reports and performance diagnostics
3. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Authenticate your account | Phone/email, OTP | Contract performance |
| Display your profile to potential matches | Profile info, photos | Contract performance |
| AI-powered match ranking | Face embeddings, swipe history | Legitimate interest |
| Verify profile authenticity | Liveness challenge data | Legitimate interest / safety |
| Send push notifications | FCM token | Consent |
| Nearby discovery | Approximate location | Consent |
| Improve the Service | Aggregated usage analytics | Legitimate interest |
| Process Premium subscriptions | Purchase receipt (via App Store / Google Play) | Contract performance |
4. AI Verification & Biometric Data
DeepDate uses on-device machine learning (Google ML Kit Face Detection) and a FaceNet model to perform liveness checks and generate face embeddings. This section explains how biometric data is handled:
- Liveness check camera frames are processed entirely on your device and are never uploaded to our servers.
- Face embeddings (512-dimensional numerical vectors) are computed on-device and stored in your encrypted Firestore user document. They are used solely to power AI ranking and are never shared with third parties.
- You may request deletion of your face embedding at any time via account settings or by contacting us.
- Embeddings are automatically deleted when you delete your account.
Face embeddings constitute biometric data under applicable privacy laws (including GDPR and KVKK). We handle them with the highest level of care and do not use them for any purpose other than those stated above.
5. Data Sharing
We do not sell your personal data. We may share data with the following parties only as necessary to operate the Service:
- Google Firebase — Authentication, Firestore database, Cloud Storage, Cloud Messaging, and Analytics. Data is stored in accordance with Google's Firebase Privacy Policy.
- Apple App Store / Google Play — In-app purchase validation. We receive only anonymized purchase receipts; we do not receive your payment card details.
- Law enforcement — Only when required by applicable law, court order, or to protect the safety of our users.
All third-party service providers are contractually obligated to protect your data and use it only for the specified purpose.
6. Data Retention
- Active account — Data is retained for as long as your account is active.
- Deleted account — Profile data, messages, photos, and face embeddings are permanently deleted within 30 days of account deletion.
- Backup copies — Encrypted backups may persist for up to 90 days before being overwritten.
- Legal obligations — Certain data may be retained longer where required by applicable law.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Request a copy of the data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Restrict how we process your data.
Receive your data in a machine-readable format.
Object to processing based on legitimate interest.
To exercise any of these rights, email us at support@deepdate.app. We will respond within 30 days.
8. Security
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit using TLS 1.2+
- Firestore data is encrypted at rest by Google
- Firebase Security Rules restrict data access to the authenticated owner only
- Face embeddings are stored only in your own user document, inaccessible to other users
- We conduct periodic security reviews of our Firebase rules and backend functions
Despite these measures, no system is 100% secure. If you suspect your account has been compromised, contact us immediately.
9. Children's Privacy
DeepDate is strictly intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor has registered, we will immediately delete their account and all associated data. If you believe a minor is using the Service, please contact us at support@deepdate.app.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you via the app or email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: