Privacy Policy
A product that asks for your ID owes you an exact answer about what happens to it. So, exactly:
What is collected
Your ID photo, your selfie, bio details (age, city, occupation), questionnaire answers, your simulation history, your consent records (when you accepted the terms and the verification check), and the birth year read off your ID. That is all — no hidden collection, no third-party trackers, no ad pixels.
Why
The ID and selfie exist solely to verify you are one real person (face detection and document reading run in your browser). Questionnaire answers build your matching profile. Simulation history builds the compatibility report.
Where it lives — the important part
From this version your account is stored on our server — so signing in from any device restores everything. The record, keyed by a HASH of your email, holds: profile (display name, the profile photo you chose to show, city, occupation, your about-me, lease length, vibes), questionnaire results (traits, answers and the summary), progress (matches, chat messages, simulation state and reports), consent records (when and which version), verification status and birth year, and your plan. What is NOT stored and never will be: the ID photo, the selfie and the ID number — verification runs entirely in your browser, and only the outcome (full/partial + birth year) reaches the server. Additionally leaving your device: your email (to send codes) and simulation chat messages (to the AI service).
Deletion
Real deletion exists: the "Delete account" button on the profile page permanently erases your server record — including the registration entry — and the local data on the device. After deletion the same email can register again, from scratch.
AI Advisor memory (Pro)
If you use the Pro AI Advisor chat, up to 20 short learned insights and your last 60 chat messages are stored in your server-side account record, so the conversation continues from any device. The full list is visible inside the chat — you can delete any single insight, wipe them all, or clear the whole conversation at any time. Deletion means deletion. This memory is never shown to other users, and the quick in-simulation mediator and the discover recommendation store nothing.
The leads pool and the brokers portal
The broker-help pool is explicit opt-in only: only if you approve, and only four details transfer — name, preferred regions, budget range and email. Leaving the pool permanently deletes the record, and your profile shows which brokers received your details. Brokers additionally see aggregate, anonymous statistics only (shown only in buckets of 5 or more — never a data point about a specific person). Broker license: the photo is checked in the browser and never stored; the server keeps only the last 4 digits and the verification status.
Real users: discovery, messaging and presence
Once your profile is complete and verified, it appears to other verified users in Discover — exactly the details you already chose to show (name, age, city, occupation, bio, tags, and a photo if you uploaded one). Your email address is never exposed. You can hide your profile from search at any time in Settings. A mutual like opens a chat: messages are stored privately between the two of you. The presence indicator (“Online now” / “Active recently”) is reciprocal — if you hide your presence, you also can't see others'. Block and report are available from any conversation.
Simulation credits and email
Your credit balance and movements (purchase, daily deduction, refund) are stored in your account record and fully visible to you in your profile. Update emails are sent only if you gave explicit, separate consent (per the Communications Law, amendment 40) — and only then is your email address stored for that purpose, deleted the moment you unsubscribe. Every email carries a clear sender identity and a one-click unsubscribe that works immediately; we keep the consent and unsubscribe timestamps as proof, and never send more than 2 emails per week.
This wording is a general explanation, not legal advice. Before a real commercial launch — a lawyer.
Updated: July 30, 2026