Privacy Policy
A product that asks for your ID owes you an exact answer about what happens to it. So, exactly:
What is collected
Your ID photo, your selfie, bio details (age, city, occupation), questionnaire answers, your simulation history, your consent records (when you accepted the terms and the verification check), and the birth year read off your ID. That is all — no hidden collection, no third-party trackers, no ad pixels.
Why
The ID and selfie exist solely to verify you are one real person (face detection and document reading run in your browser). Questionnaire answers build your matching profile. Simulation history builds the compatibility report.
Where it lives — the important part
From this version your account is stored on our server — so signing in from any device restores everything. The record, keyed by a HASH of your email, holds: profile (display name, the profile photo you chose to show, city, occupation, your about-me, lease length, vibes), questionnaire results (traits, answers and the summary), progress (matches, chat messages, simulation state and reports), consent records (when and which version), verification status and birth year, and your plan. What is NOT stored and never will be: the ID photo, the selfie and the ID number — verification runs entirely in your browser, and only the outcome (full/partial + birth year) reaches the server. Additionally leaving your device: your email (to send codes) and simulation chat messages (to the AI service).
Deletion
Real deletion exists: the "Delete account" button on the profile page permanently erases your server record — including the registration entry — and the local data on the device. After deletion the same email can register again, from scratch.
AI Advisor memory (Pro)
If you use the Pro AI Advisor chat, up to 20 short learned insights and your last 60 chat messages are stored in your server-side account record, so the conversation continues from any device. The full list is visible inside the chat — you can delete any single insight, wipe them all, or clear the whole conversation at any time. Deletion means deletion. This memory is never shown to other users, and the quick in-simulation mediator and the discover recommendation store nothing.
The leads pool and the brokers portal
The broker-help pool is explicit opt-in only: only if you approve, and only four details transfer — name, preferred regions, budget range and email. Leaving the pool permanently deletes the record, and your profile shows which brokers received your details. Brokers additionally see aggregate, anonymous statistics only (shown only in buckets of 5 or more — never a data point about a specific person). Broker license: the photo is checked in the browser and never stored; the server keeps only the last 4 digits and the verification status.
This wording is a general explanation, not legal advice. Before a real commercial launch — a lawyer.
Updated: July 18, 2026