Privacy Policy
1. What we collect
When you sign up and use NiteDate, we collect:
- Account info: email address, date of birth, first name, photo, and location (approximate city).
- Profile content: photos and videos you upload for casting, prompts and dating preferences you fill in during onboarding, and any responses to in-app questions.
- Show recordings: video and audio captured during scheduled speed-date sessions you join. These are stored in our private Supabase storage bucket for up to 14 days, then either deleted or repurposed into the edited public episode.
- Usage data: which screens you visit, which contestants you tap on, push-notification responses, purchases, and crash reports.
- Device info: model, OS version, locale, time zone, and a stable per-install identifier.
2. How we use it
We use the information above to:
- Match you with compatible contestants for upcoming shows.
- Produce edited episodes for distribution on YouTube, TikTok, and Instagram. The producer and our automated clip-worker handle this; only authorised NiteDate staff have access to the raw recordings.
- Process payments. On the web, card payments are handled by Stripe; in the mobile apps, purchases go through Apple In-App Purchase / Google Play Billing. We never store full card numbers — Stripe processes web card data directly, and tokenized mobile subscription IDs are managed by RevenueCat.
- Send transactional notifications (a show is about to start, someone picked you, an episode you appeared in went live). These are core to the Service and cannot be disabled individually, though you can revoke all push notifications from your device's settings.
- Investigate fraud, harassment, and policy violations. Cass (our AI co-host) flags potentially harmful content for human review; flagged shows may be reviewed by NiteDate staff before publication.
- Improve the Service through aggregated, anonymized analytics.
3. Who we share it with
We never sell your personal information. We share it only with the following processors, each bound by data-processing agreements:
- Supabase — auth, primary database, and storage of profile content + recordings.
- Vercel — web hosting and serverless function runtime for the website, admin tools, and the clip-worker.
- Daily.co — video infrastructure for live shows.
- Google Gemini — powers Cass (our AI co-host); transcripts are processed by Gemini at end-of-show to produce souvenir summaries and to flag concerns for human review.
- Expo / EAS — mobile build + push notification delivery (Apple Push Notification Service for iOS, Firebase Cloud Messaging for Android).
- Stripe — web payment processing and subscription billing.
- RevenueCat — mobile subscription state and entitlement management on top of Apple IAP / Google Play Billing.
- Resend — transactional email delivery.
- Sentry — crash and error reporting (no personal content is included in crash reports beyond your user ID).
- YouTube, TikTok, and Meta (Instagram / Facebook) — public distribution of edited episodes you appeared in. Only the edited public episode is uploaded; raw recordings are not shared with any third-party platform.
4. Where data is stored
Active data is stored in the United States (Supabase us-east-1, Vercel global edge). Backups are stored in the same region. Show recordings are kept for up to 14 days in private cloud storage and then deleted unless they have been incorporated into a published episode.
5. Your choices
- Access and edit: Settings → Edit Profile shows all the personal information we have on file and lets you update most of it.
- Recording opt-out (Lead tier): toggle before a show starts to keep the session unrecorded. Cannot be applied retroactively.
- Push notifications: revoke at the OS level (iOS Settings → NiteDate → Notifications, or Android Settings → Apps → NiteDate → Notifications).
- Account deletion: Settings → Account → Delete account. Your profile, photos, videos, and personal info are permanently removed from active systems within 30 days. Show recordings you previously appeared in may remain published as part of the produced episode.
- Marketing opt-out: we do not currently send marketing email separate from transactional notifications, but if we ever do, every email will include an unsubscribe link.
6. Children
NiteDate is not directed at users under 18 and we do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, contact privacy@nitedate.com and we will delete the account.
7. Security
We use industry-standard encryption (TLS in transit, AES-256 at rest) and follow least-privilege access principles. No system is perfectly secure; if we ever discover a breach affecting your information we will notify you within 72 hours.
8. International users
NiteDate is operated from the United States. If you access the Service from outside the United States, you understand and agree that your information will be transferred to and processed in the United States.
9. Changes
We may update this Privacy Policy from time to time. Material changes will be announced via in-app notification or email at least 14 days before they take effect.
10. Contact
Questions about this Privacy Policy or to exercise any of the rights above? Email privacy@nitedate.com.