Who controls your information
The final policy must name the OdoMatch operating company, registration details, address, privacy contact and any representative or data-protection officer required in the UK, EEA or other launch country. Contact channels must accept access, correction, deletion, objection, restriction, portability, consent-withdrawal and complaint requests.
Information collected
Account identifiers, date of birth and age-assurance result; profile, preferences, photos, OdoClips and voice prompts; approximate location and distance; likes, matches and blocks; messages, reactions, voice notes and private media; call, game, gift, date-plan, subscription and OdoMinute records; device, security, consent and support information; reports, verification and moderation records. OdoMatch should not collect data merely because it may be useful later.
Purposes and lawful bases
Data is used to provide accounts and matching, deliver communications, fulfil purchases, keep the service secure, investigate reports, comply with law, improve reliability and—with a valid choice—send optional communications. Depending on location, bases may include contract, consent, legitimate interests, legal obligation and protection of vital interests. Sensitive data, precise location, biometric processing and direct marketing require additional necessity, transparency and consent analysis.
Matching, AI and automated decisions
Preferences, approximate distance, profile activity and compatibility signals may rank recommendations. Taleh processes prompts to provide requested assistance. OdoMatch should explain meaningful ranking factors and avoid solely automated decisions with legal or similarly significant effects unless lawful safeguards, human review and contest rights exist. AI output and risk scores are not proof of identity, guilt, compatibility or safety.
Communications and disappearing messages
Private communications are available only to authorised participants and restricted safety personnel where a lawful report, moderation hold or legal obligation applies. New messages may receive an individual expiry time based on the selected 24-hour, 7-day or 90-day duration; changing the setting is not retroactive. Expiry cannot erase copies made by recipients or evidence narrowly preserved for safety or law.
Location, cameras and microphones
OdoMatch uses city and rounded distance rather than publishing exact coordinates. Device location should be requested only with permission and reduced to what matching needs. Camera and microphone access supports calls, voice prompts and uploads. Live calls are not automatically recorded by OdoMatch. Local preview filters or stickers stay on the device unless a future processor is clearly disclosed.
Verification and age assurance
Verification status, provider reference, liveness or document result and fraud signals may be processed to protect adults. OdoMatch should store the minimum result needed, restrict raw documents and biometric-related data, separate email verification from identity verification, and use privacy-preserving, proportionate and non-discriminatory age assurance. Failed checks require a safe retry and review route.
Providers, transfers and disclosures
Necessary providers may include Supabase for authentication, database and storage; Agora for live communications; Google for maps or configured AI; Vercel for hosting; and verified payment, email or identity providers. Each receives only role-necessary data under appropriate terms. International transfers require the lawful mechanism and risk assessment applicable to the user, such as adequacy or approved contractual safeguards. Data is disclosed to authorities only when legally required or necessary to protect life and safety.
Retention and deletion
Each category needs a documented period based on service necessity, disputes, fraud, tax, safety and legal duties. Account deletion should promptly remove discovery visibility and begin controlled deletion. Expired messages and orphaned media enter automated deletion queues; report evidence may be held separately with access controls and review deadlines. Backups must age out on a defined schedule.
Your choices and rights
Members can edit profiles and preferences, pause discovery, manage visibility and notifications, block or report, change disappearing-message settings, withdraw optional consent and request deletion. Depending on location, rights may include access, correction, deletion, portability, restriction, objection, withdrawal, appeal, opt-out of sale/sharing or targeted advertising, limitation of sensitive-data use, and freedom from discriminatory treatment. Identity verification for a rights request must be proportionate.
Children
OdoMatch is strictly 18+. It must assess whether children are likely to access the service, use effective and privacy-preserving age assurance, close underage accounts safely, and make legally required child-safety reports. Adult dating content must not be targeted to children.
Security, breaches and complaints
OdoMatch uses access controls, private storage, row-level security, audit trails, rate limits and controlled secrets. No system is perfectly secure. Suspected compromise should be reported promptly. OdoMatch must assess and notify regulators and affected people within applicable legal deadlines. Members may complain to OdoMatch and to the competent privacy or consumer regulator in their country.
Cookies and marketing
Essential storage supports secure sessions and fraud prevention. Non-essential analytics, personalisation or advertising technologies require the applicable notice and choice before activation. Marketing must include a simple unsubscribe and respect consent, objection and do-not-contact requirements.
Regional launch requirement
UK GDPR and Data Protection Act, EU GDPR and Digital Services Act, relevant US state privacy laws, and each enabled African country’s constitution and data-protection, consumer, cybercrime and electronic-communications laws require separate applicability review. This draft preserves mandatory rights but is not a country-by-country legal opinion or approval.