How we handle your data.

1. Who We Are

Datezy ("we," "us," or "our") operates the Datezy platform, an AI-powered service that helps couples plan date nights and remember what they enjoyed together. This Privacy Policy explains how we collect, use, disclose, transfer, and protect personal information when you use our website and application.

Datezy is available to users in different countries. Privacy rights and consumer protections can vary by location, and we will honor the rights that apply to you. If you do not agree with this policy, please do not use the service.

2. Information We Collect

Account and login information. When you sign up, we collect your name, email address, authentication provider details, and a hashed password if you use email login. If you sign in through Google or Apple, we receive the account details that provider shares with us, such as your name and email address.

Profile and relationship information. You may choose to add details such as partner name or email, birthdays, anniversary dates, home city, pronouns, notification preferences, love languages, and similar profile fields.

Date planning and memory data. We store the answers, preferences, selections, saved dates, reactions, notes, scrapbook entries, uploaded photos, and feedback you provide so Datezy can suggest better future date ideas.

Optional sensitive preferences. Some optional fields may reveal sensitive or personal context, such as accessibility needs, mobility preferences, pregnancy or nursing considerations, LGBTQ+ safety preferences, dietary restrictions, alcohol preferences, family or childcare context, and similar planning constraints. You control whether to provide these details.

Location and venue context. When you plan a date, we process the location information you provide or authorize, including city, region, country, map queries, approximate coordinates, and related venue context needed to generate ideas and maps.

Usage, device, and technical data. We collect information about how you interact with Datezy, such as pages visited, features used, session activity, IP address, browser type, operating system, device identifiers, logs, and error reports. This helps us secure, debug, and improve the service.

Payment and billing data. Billing is processed by Stripe. We receive limited payment metadata such as subscription status, invoices, billing country, card brand, last four digits, and expiry date. We never receive your full card number or CVV.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Datezy service
• Generate personalized date ideas based on your preferences and history
• Process payments and manage your subscription or credit balance
• Send transactional emails including account confirmations, receipts, and password resets
• Send optional service updates and feature announcements (opt out any time in Settings)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

Depending on your location, our legal bases may include performing our contract with you, your consent, our legitimate interest in operating and improving Datezy, and compliance with legal obligations.

We do not sell your personal information. We also do not share it with advertising networks for cross-context behavioral advertising.

4. AI Processing

Datezy uses a third-party AI service to generate and personalize date ideas. When you generate a date, we send relevant planning inputs, location context, constraints, prior feedback, and preference or memory signals to our AI provider so the system can produce a useful response.

We design prompts to avoid sending directly identifying account details such as your account email or password. Some planning details you choose to provide, including optional sensitive preferences, may be included when they are relevant to making the idea safe, realistic, or tailored for you.

AI output is used for date-planning inspiration. Datezy does not use AI to make legal, financial, employment, housing, credit, medical, or similarly significant decisions about you.

5. Cookies and Tracking

Datezy uses cookies and browser storage to maintain your session, keep you signed in, protect your account, remember app preferences, and support billing or account workflows. We do not currently use advertising cookies or cross-site tracking pixels.

If we add analytics, advertising, or marketing cookies in the future, we will update this policy and provide consent or opt-out controls where required. You can disable cookies in your browser settings, but this may prevent you from signing in or using certain features.

6. Third-Party Service Providers

We share data with a limited set of trusted providers who help us operate Datezy:

• Stripe — payment processing and subscription management
• AI processing service — date idea generation and personalization
• Email delivery service — transactional email delivery
• Error monitoring service — error monitoring and crash reporting
• Database and hosting providers — database, file storage, backups, and application hosting
• Google Maps Platform — address autocomplete, geocoding, maps, and location-related features
• Google and Apple — optional account sign-in

These providers may process personal information in countries other than your own. We use them to perform services for us, and we do not permit them to sell your personal information for their own marketing.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide Datezy. If you delete your account or ask us to delete your data, we will delete or de-identify personal information within 30 days where reasonably possible.

We may keep limited records longer when needed for legal, tax, accounting, security, fraud-prevention, dispute-resolution, backup, or compliance purposes. Financial and billing records may be retained for up to 7 years where required. De-identified or aggregated information that cannot reasonably identify you may be retained indefinitely.

8. Data Security

We implement industry-standard measures to protect your data: encrypted connections (HTTPS/TLS), hashed passwords using bcrypt, restricted database access, and regular security reviews.

No method of transmission over the internet is 100% secure. While we do our best to protect your information, we cannot guarantee absolute security. If we become aware of a breach that affects your rights, we will notify you in accordance with applicable law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your account and associated data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to certain processing activities
• Restriction: request that we limit processing in certain circumstances
• Consent withdrawal: withdraw consent where processing is based on consent
• Opt out: opt out of certain uses, such as sale, sharing, targeted advertising, or profiling, if those rights apply in your location

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on your request, and some rights may be limited by legal, security, or operational requirements.

10. EEA, UK, and Swiss Users

If you are in the European Economic Area, United Kingdom, or Switzerland, you may have rights under data protection laws such as the GDPR or UK GDPR. These may include the rights to access, rectify, erase, restrict, object to processing, receive a portable copy of your data, withdraw consent, and lodge a complaint with your local supervisory authority.

When we transfer personal information internationally, we rely on lawful transfer mechanisms where required, such as standard contractual clauses or equivalent safeguards. Our legal bases may include contract performance, consent, legitimate interests, and legal obligations.

11. Canadian Residents (PIPEDA)

If you are located in Canada, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Under PIPEDA, you have the right to access personal information we hold about you, to challenge its accuracy, and to withdraw consent to its collection or use (subject to legal or contractual restrictions). We collect, use, and disclose personal information only with your knowledge and consent, and only for the purposes described in this policy.

To exercise your PIPEDA rights, contact us at [email protected]. We will respond within 30 days.

12. US State Privacy Rights

If you are a resident of California or another US state with a comprehensive privacy law, you may have additional rights, including:

• The right to know what personal information we collect, use, and disclose
• The right to request access, correction, deletion, or portability
• The right to opt out of sale, sharing, targeted advertising, or certain profiling where applicable
• The right to limit use or disclosure of sensitive personal information where applicable
• The right not to be discriminated against for exercising privacy rights

We do not sell personal information, and we do not currently share personal information for cross-context behavioral advertising. To submit a privacy request, email [email protected] or use the account deletion option in Settings.

13. Children's Privacy

Datezy is not intended for anyone under the age of 18. We require users to confirm they are at least 18 before creating an account, accepting a partner invite, or being linked as a partner. We do not knowingly collect personal information from children under 18.

If we learn that someone under 18 has created an account, accepted an invite, been linked as a partner, or otherwise submitted personal information to Datezy, we will disable or delete the account and remove related personal information as appropriate, unless we are required to retain limited information for legal, security, or fraud-prevention reasons.

14. International Data Transfers

Datezy works with infrastructure and service providers that may process information in Canada, the United States, and other countries. Those countries may have privacy laws that differ from the laws where you live. Where required, we use lawful transfer safeguards and provider agreements designed to protect your information.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or with a prominent notice in the app at least 14 days before the changes take effect. Your continued use of Datezy after the effective date constitutes acceptance of the updated policy.

16. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or how we handle your data, please reach out:

[email protected]

We aim to respond to all privacy-related enquiries within 5 business days.