Privacy Policy

1. Introduction

OPEN/secret ("we", "our", "us") respects your privacy. This policy explains what data we collect, how we use it, who we share it with, and your rights.

2. Information You Give Us

Account information: email address, password and date of birth
Profile information: display name, photos, bio, gender identity, sexual orientation, relationship style, desires and the other profile fields you choose to fill in
Verification selfies: photos you take to verify your identity
Messages you send, reports you submit and feedback you give
Couple accounts: your partner's invitation, and the shared couple profile you create together
Payments: subscriptions are processed by Google Play and RevenueCat. We never see or store your card details

3. Information Collected Automatically

Location: if you allow it, your GPS coordinates, used to calculate distances to other members. Other members only ever see your approximate area, never your exact location
Device information: device type, operating system version and a push notification token
Usage: how you use the app, such as likes, matches, features used and session times

4. How We Use Your Information

To provide the service: show you potential matches, enable messaging, manage your profile
Safety and moderation: check photos automatically, review verification selfies and reports, enforce our guidelines
Notifications: tell you about new matches, messages and important account updates
Improvements: understand how features are used and fix problems
Legal compliance: meet our legal obligations and respond to lawful requests

5. Couple Accounts

If you link your account with a partner:

Your partner can see your matches and messages, including matches you made before linking
Your shared couple profile starts with photos from both of your profiles, and either of you can change it
When you invite a partner, we email them an invitation that includes your display name
If either of you unlinks, the shared couple profile is removed

6. Photo Moderation and Verification

Photos you upload are checked automatically for explicit or inappropriate content using Clarifai before they appear on your profile. Verification selfies are kept in private storage and reviewed by our team only to confirm that you are the person in your photos. We do not use your photos for anything other than running OPEN/secret and keeping it safe.

7. Who We Share Data With

We do not sell your personal data. We use these service providers to run the app:

Supabase: database, sign-in and file storage (account and profile data, photos, messages)
RevenueCat: subscription management (user ID, subscription status, purchase history)
Google Play: app distribution and payments (payment details are handled by Google)
Firebase (Google): push notifications and crash reports (device token, crash logs, device information)
Clarifai: photo moderation (uploaded photos are analysed, not kept by Clarifai)
Resend: email delivery (couple invitations: the invited email address and the inviter's display name; staff alerts)

We also share information with other members (your public profile), when needed to protect someone's safety or prevent fraud, and when the law requires it. Each provider handles data under its own privacy policy.

8. How We Protect Your Data

All data between the app and our servers is encrypted in transit using TLS
Data is stored with our hosting provider, which encrypts it at rest
Database access rules mean members can only read their own data, and messages can only be read by the people in that match (for couple accounts, both partners)
Administrative access is restricted

Messages are not end-to-end encrypted. No system is completely secure, so we cannot guarantee absolute security.

9. Your Rights

You can:

Access the personal data we hold about you
Correct your data in your profile settings
Delete your account and its data
Object to certain processing
Ask for a copy of your data (data portability)
Withdraw consent for optional features such as location

To use any of these rights, email privacy@opensecretapp.co, visit opensecretapp.co, or use Settings, then Help & Support in the app. We respond within 30 days.

10. How Long We Keep Data

We keep your data while your account is active
When you delete your account, your profile, photos and messages are permanently deleted within 30 days
Anonymised usage statistics may be kept
Records we are legally required to keep, such as transaction records, are kept for the required period
Reports filed by or about you may be kept for safety reasons

11. Cookies and Tracking

The mobile app does not use cookies. We do not use advertising trackers or share data with ad networks. If you use OPEN/secret in a web browser, we use only the browser storage needed to keep you signed in.

12. Adults Only

OPEN/secret is strictly for people aged 18 and over. We check age at sign-up and do not knowingly collect data from anyone under 18. If we learn a member is under 18, we close the account and delete its data.

13. European Users (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your data to provide the service you signed up for, with your consent for optional features such as location, and for our legitimate interest in keeping members safe. Some profile information, such as sexual orientation and desires, is sensitive; you choose whether to provide it, and we use it only to run the service. You may complain to your local data protection authority.

14. California Residents (CCPA)

You can ask what personal information we collect and how we use it
You can ask us to delete your personal information
We do not sell personal information
We will not treat you differently for using these rights

15. Changes to This Policy

We may update this policy. We will tell you about material changes in the app and update the "Last updated" date.

16. Contact Us

Email: privacy@opensecretapp.co
Website: opensecretapp.co
In the app: Settings, then Help & Support