Privacy Policy

1. Information We Collect

Account information:

Email address (required to create an account) and password (hashed and stored securely by Supabase Auth — we never see or store your password in plain text). You may also add an optional display name, which is shown to a partner you link with so they can see who invited them.

Profile and preferences:

Relationship stage (early dating, long-term, married); your current date number; optional relationship start date and wedding date (used for the "months together" counter and the wedding countdown); the venue categories you’re interested in; location data you enter (cities, zip codes, or addresses for you and, if relevant, the person you’re planning with — the App never accesses your device’s GPS location; nothing is requested or read automatically); and partner link codes if you choose to link with a partner.

App usage data:

Dates you plan (the venue, its address, the date and time, an optional checklist, and whether the date is marked "shared"); private checklist notes on a shared date, which are stored separately and never shown to your partner (e.g. a surprise gift); date status and feedback you provide; venues you heart and itineraries you save; itineraries you submit; venues you mark as visited or skipped; notification preferences and a default checklist template; and crash reports and error logs (via Sentry — see Section 4). Date reminders are scheduled locally on your own device — the App does not send push notifications through Apple, Google, or any other server, and no reminder data leaves your device to make this work.

Venue ratings, comments, and reports:

Star ratings you give a venue, tips or comments you post about a venue, and any issue reports you submit through "Report an issue." These are linked to your account internally — even though comments are shown to other users without your name attached. See Section 5 for details on how this works.

Vendor directory applications:

If you apply to be listed as a photographer or florist in the Proposal Spots vendor directory, we collect the business name, service area, and description you enter; the contact methods you provide (website, Instagram, phone, and/or email); and the portfolio photos you upload. The App only accesses your photo library when you explicitly choose images for this purpose — it is never read automatically. Applications are reviewed by our team; if approved, the business name, contact details, and photos are shown publicly to other users as a listing. A vendor application is treated as a business listing and is not tied to your personal account — to remove a listing or its photos, contact support@datederech.com.

2. How We Use Your Data

We use your data to provide venue recommendations matched to your stage, chosen venue categories, and location; generate date itineraries and meeting-point suggestions; send date reminders and weather-based outfit tips if enabled; power the "months together" counter and wedding countdown; keep a shared calendar with a linked partner; display blended community ratings and public comments/tips on venues; review issue reports you submit about a venue’s information; operate community features (venue and proposal-spot suggestions, itinerary submissions, vendor directory applications, polls) with human moderation; diagnose and fix crashes or errors in the App; and generate AI-assisted date ideas if you use the AI Planner (see Section 6).

We do NOT:

• Sell your data to any third party
• Share your data with advertisers for targeted advertising
• Use your data for any purpose beyond operating and improving DateDerech

Sponsored content:

The App may show a small number of sponsored placements — a banner on the home screen, or an occasional full-screen popup shown at most once a day — from local businesses. These are manually managed by our team, not served by an ad network, and are never targeted or personalized using your data in any way; everyone sees the same sponsored content regardless of their profile or activity.

3. Data Storage and Security

Your data is stored using Supabase, a cloud database provider. Data is encrypted in transit (HTTPS/TLS) and at rest. We use Row Level Security so that, by default, users can only access their own data. Database access is restricted and audited.

4. Third-Party Services

DateDerech relies on the following third-party services, each governed by their own privacy practices:

• Supabase (database, authentication, file storage)
• Google Places (venue information such as names, hours, and photos — sourced by our team, not tied to your account)
• Photon and Nominatim (both operated on OpenStreetMap data) and Zippopotam (ZIP lookups) — when you type a street address or ZIP code in the plan-a-date flow or your profile, that text is sent to these services to turn it into map coordinates and to suggest matching addresses as you type. They receive only the text you enter; the result is used to place you on the map for venue matching and to store an approximate "area" label, not to track your movements.
• Open-Meteo (weather forecasts used to generate outfit tips — we send only a venue’s approximate city coordinates, never your precise location or any identifying information)
• Sentry (error and crash monitoring — receives technical error reports including device type, app version, and the screen where an error occurred, but never your password or payment information)
• Vercel Analytics (aggregated, anonymized page-view analytics for our website at datederech.com — does not use cross-site tracking cookies and cannot identify you individually)
• ImprovMX (email forwarding — messages sent to our support inbox are forwarded to our team’s email address; ImprovMX relays the message to complete delivery and does not use it for any other purpose)

5. Community Ratings, Comments, and Venue Reports

Star ratings you submit are stored against your account — so you can update your own rating and so we can prevent one person from rating the same venue multiple times — but are only ever shown publicly as a blended average. Your individual rating is never shown to other users.

Comments and tips are shown publicly on a venue’s page without your name, email, or any other identifying information attached — other users have no way to see who wrote a comment. Internally, comments remain linked to your account so that you can manage or remove your own comments and so we can investigate reports of inappropriate content. All comments are also automatically screened for profanity before they can be posted.

Issue reports you submit about a venue (via "Report an issue") are reviewed by our team to keep venue information accurate. Unlike ratings and comments, report content is retained even after you delete your account so we can keep a record of what was reported and fixed — but it is disassociated from your account (your identifying information is removed) at that point.

6. AI-Assisted Planner

If you use the AI Date Planner feature, the preferences you select (vibe, budget, time of day, city, relationship stage) are sent to a third-party AI service to generate date ideas. We do not send your name, email, or account identifiers as part of this request. AI-generated suggestions are not stored unless you choose to save them as a planned date.

7. Cookies and Tracking (Website)

Our website (datederech.com) uses Vercel Analytics, a privacy-friendly analytics tool that does not use cookies to track you across sites and cannot identify you individually. It may also use minimal first-party cookies for basic site functionality, such as remembering a cookie-consent choice. We do not use third-party advertising trackers on our website.

8. Data Retention and Deletion

We retain your data for as long as your account is active. You may delete your account at any time from Settings in the App. Deleting your account immediately and permanently removes your profile, preferences, planned dates and their checklists, private checklist notes, partner links, hearted venues, saved and submitted itineraries, feedback, venue ratings, and comments from our database, revokes all active login sessions, and cannot be undone.

Venue issue reports you’ve submitted are retained for our internal records after account deletion, but are disassociated from your account at that point. Crash and error logs in Sentry are retained for up to 90 days and are not linked to your account identity beyond a randomly generated device/session identifier.

9. Children's Privacy

DateDerech is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a user under 18, we will delete it promptly.

10. Your Rights

Depending on your location, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your account and associated data (available directly in the App), object to or restrict certain processing of your data, and receive a copy of your data in a portable format.

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to request deletion. We do not sell personal information.

EU/UK residents, if applicable, have rights under the General Data Protection Regulation (GDPR), including the rights listed above and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at support@datederech.com. We will respond within a reasonable timeframe.

11. Partner Linking — What a Linked Partner Can See

Linking is optional and requires both people to act: one person generates an invite (code, link, or QR), the other enters it, and the first person must then accept before the link becomes active. Either person can unlink at any time from the partner screen in the App, which immediately stops all sharing and invalidates the invite code.

Once linked, your partner can see only the planned dates you have marked "shared" — the venue, its address, the date and time, and the shared checklist items — and either of you can edit or cancel a shared date. Your partner cannot see your non-shared dates, your private checklist notes, your saved venues or itineraries, your milestones, your settings, your email, or your location profile. Unlinking stops future sharing but does not retroactively delete information your partner has already seen.

12. International Data Transfers

Our service providers, including Supabase and Sentry, may process data in the United States or other countries. By using DateDerech, you consent to this transfer and processing in accordance with this policy.

13. Changes to This Policy

We may update this policy as the App evolves. Material changes will be communicated via email or in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact

For privacy questions, data access, or deletion requests, contact us at support@datederech.com. See also our Terms of Service at datederech.com/terms.