Privacy Policy

Information we collect

Account & profile. Email, date of birth, optional phone number, first name, age, gender, the gender(s) you're interested in, occupation, bio, interests, relationship goal, preferred date types, budget, and photos.

Verification. Selfie verification images, phone verification codes, and email confirmation status.

Location. City and state you provide and, with your permission, precise device location (latitude/longitude) used to compute distance to other members. You can change or revoke location access in your device settings at any time.

Activity. Likes, passes, matches, messages, reports you submit, blocks, date plans, and Fryday recommendations you view or save.

Device & technical. Device model, OS version, app version, push notification tokens, IP address, and basic analytics about how you use the app.

Communications. Messages you send to other members and to our support team.

How we use information

• Operate Fryday: create your account, match you with other members, recommend places, and deliver messages.
• Verify identity and prevent fraud, abuse, and harm (including 18+ enforcement).
• Send push notifications you've enabled (new matches, messages, plan updates, verification results, safety notices).
• Improve the Service and analyze aggregate, de-identified usage.
• Respond to support, legal, and safety requests.

How we share information

With other members. Your profile fields (first name, age, photos, bio, interests, distance, verified badges) are shown to members eligible to match with you.

Service providers (processors). We use the following processors on our behalf and only for the purposes described:

• Supabase (Lovable Cloud). Application database, file storage for photos, authentication, and serverless functions. Hosted in the U.S.
• Google Maps Platform & Places. Map rendering and place details for Fryday recommendations. Approximate location may be sent to retrieve nearby venues.
• Apple — Sign in with Apple & APNs. Authentication and push notification delivery.
• Google — Sign in with Google. Authentication.
• Email delivery provider. Transactional email (verification, password reset, account notices).
• Lovable AI Gateway. Server-side calls for moderation assistance and recommendations; does not receive user PII beyond what is necessary for the task.

Legal & safety. We may disclose information when required by law, to protect users, or to investigate violations of our Terms.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Push notifications

If you grant permission, we register an APNs device token to your account and use it to deliver alerts you've enabled (new match, new message, Fryday invitation, plan confirmed, verification result, safety notice, account warnings). You can change preferences in Settings → Notifications or turn off push entirely in iOS Settings.

Data retention

• Active accounts: retained while your account is open.
• Account deletion: profile, photos, matches, messages, likes, reports you filed, and verification data are deleted within 30 days of your deletion request.
• Safety logs: reports filed against you and moderation actions may be retained up to 24 months for community-safety purposes.
• Legal hold: we may keep limited records longer when required by law.

Your rights

All users. You can view and edit your profile in the app, change notification preferences, revoke location access in iOS Settings, and delete your account at any time from Settings → Delete account.

California (CCPA/CPRA). You may request to know, access, correct, delete, and limit use of sensitive personal information; you may opt out of "sharing" for cross-context behavioral advertising (we don't do this). You may exercise these rights by emailing privacy@joinfryday.com. We don't discriminate against users who exercise their rights.

EU/UK (GDPR). You have rights to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with your local supervisory authority. Our lawful bases are: contract (operating the Service), legitimate interest (safety, fraud prevention, product improvement), consent (precise location, push notifications), and legal obligation. The data controller is Fryday.

Account deletion

To delete your account, open the app and tap Settings → Delete account. You'll be asked to confirm twice. Once confirmed, your profile, photos, matches, messages, likes, date plans, and verification data are removed within 30 days. You can also email privacy@joinfryday.com from the address on your account.

Security

All traffic uses TLS in transit. User data is stored in Supabase (Lovable Cloud) with row-level security policies that restrict access to the data each user is authorized to see. Photos are stored in private buckets and served via short-lived signed URLs.

International transfers

Fryday is operated from the United States and our infrastructure is U.S.-based. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S.

Children's privacy

Fryday is not directed to children. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please report it at safety@joinfryday.com and we will remove the account immediately.

Changes to this policy

We'll update the "Last updated" date at the top whenever we make changes. Material changes will be highlighted in the app.

Contact

Privacy questions or requests: privacy@joinfryday.com

Safety reports: safety@joinfryday.com

General support: hello@joinfryday.com