1. Who is responsible
The controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:
[FULL NAME]
[STREET AND HOUSE NUMBER]
[POSTAL CODE, CITY]
[COUNTRY]
Email: support@sundae.pro
Sundae is operated by an individual. We are not legally required to appoint a data protection officer, and we have not appointed one. For any privacy question, use the contact address above.
2. Scope of this policy
This policy explains how we handle personal data when you use the Sundae mobile application (the “app”) and when you visit this website. It does not cover third-party services that we link to but do not operate (for example the Apple App Store or Google Play), which have their own privacy policies.
3. What data we process
We only collect what we need to run a weekly-match dating service. Depending on how you use Sundae, this includes:
| Account | Email address and a securely hashed password (handled by our authentication provider), account creation date, language preference, and whether you have accepted the terms. |
|---|---|
| Profile | First name, age, gender, who you want to meet, a profile photo, and — if you add them — additional photos, a short bio, prompt answers, height, interests, relationship intentions, relationship style, and whether you have or want children. |
| Personality test | Your answers to the one-time personality questionnaire and the personality profile calculated from them. This is used for matching and for your personal insights. |
| Location | If you grant permission, your approximate coordinates and the city derived from them, plus your chosen search radius. Used to match you with people nearby. You can use the app without precise location by entering a city. |
| Matches & messages | Records of who you were matched with and when, the compatibility score, match status, and the messages you exchange with a match. |
| Feedback & traits | The answers you give after a match ends (how it went, selected traits, whether you'd meet again, what happened afterwards), and the aggregated “traits people notice” shown on your profile and to your matches. |
| Safety & moderation | Blocks you create, and reports you submit or that are submitted about you, including the reason and related match. We keep this to operate the service safely and to handle abuse. |
| Subscription | Whether Sundae+ is active for your account and when it started. Payment itself is processed by Apple or Google — we do not receive your card details. |
| Device & notifications | If you enable push notifications, a push token for your device and your notification preference. Basic technical data (app version, platform) may be included in error logs. |
| Support | The content of emails you send us and our replies. |
| Website | Server logs kept by our hosting provider (see section 14) and the email address you enter into the waitlist form, which is sent to us by your own email app. |
We do not use advertising SDKs, cross-app tracking, or third-party analytics that build a profile of you.
4. Why we process it and our legal basis
| Providing the service — creating your account, building your profile, generating and delivering one match per week, enabling chat, running the weekly cycle | Performance of a contract with you — Art. 6(1)(b) GDPR |
|---|---|
| Personality test, feedback and insights used to improve future matches for you | Performance of a contract — Art. 6(1)(b) GDPR; for the sensitive aspects, your explicit consent — Art. 9(2)(a) GDPR |
| Precise location and push notifications | Your consent, given through the operating system permission prompt — Art. 6(1)(a) GDPR. You can withdraw it in your device settings at any time. |
| Optional profile fields (bio, extra photos, prompts, height, children, relationship style, interests) | Your consent by choosing to provide them — Art. 6(1)(a) and, where sensitive, Art. 9(2)(a) GDPR |
| Safety, moderation, preventing and investigating abuse, keeping the service secure | Our legitimate interests and those of other users in a safe service — Art. 6(1)(f) GDPR; and compliance with legal obligations — Art. 6(1)(c) GDPR |
| Handling support requests | Performance of a contract and our legitimate interest in helping users — Art. 6(1)(b) and (f) GDPR |
| Complying with legal requests and defending legal claims | Legal obligation — Art. 6(1)(c) GDPR; legitimate interests — Art. 6(1)(f) GDPR |
| Operating this website and the waitlist | Our legitimate interest in presenting and offering the service — Art. 6(1)(f) GDPR; for the waitlist email, your consent by submitting it — Art. 6(1)(a) GDPR |
5. Sensitive data and consent
By its nature, a dating profile can reveal information that the GDPR treats as a special category (Art. 9) — in particular data concerning your sex life or sexual orientation, which may be inferred from the gender you want to meet, and any health, religious or similar details you choose to write in your bio or prompts.
We process this data solely to provide the matching service you signed up for, on the basis of your explicit consent under Art. 9(2)(a) GDPR. You give this consent when you create your profile and enter Sundae. You can withdraw it at any time by editing or removing the relevant fields, or by deleting your account — this does not affect processing that happened before withdrawal.
6. Who we share data with
Other users
When you are matched, your match can see your profile: your first name, age, photo (blurred until the reveal), city or approximate distance, prompts, interests and the traits others have noticed. With Sundae+, a match can also see the optional details you added. Your email, exact coordinates, personality answers and feedback are never shown to other users.
Service providers (processors)
We use a small number of providers that process data on our behalf under data processing agreements:
- Supabase — database, authentication, file storage (your photos) and realtime messaging. This is where your Sundae data is stored. See supabase.com/privacy.
- Expo (Expo Application Services) — delivery of push notifications via a device push token, if you enable them. See expo.dev/privacy.
- Our email provider — sending account emails such as email confirmation and password resets. [EMAIL PROVIDER, e.g. the provider behind support@sundae.pro / Supabase default]
- Our website host — [HOSTING PROVIDER, e.g. Netlify / Vercel / GitHub Pages / Hetzner], which serves this website and keeps standard server logs.
App stores and payments
If you subscribe to Sundae+, the purchase is handled by Apple or Google under their own terms and privacy policies. They tell us that a subscription is active; they do not share your payment details with us.
Legal reasons
We may disclose data if we are legally required to, or where it is necessary to enforce our terms, protect the safety of users, or establish, exercise or defend legal claims.
We do not sell your personal data and we do not share it for advertising.
7. International data transfers
Some of our providers may process data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by an adequacy decision of the European Commission or by Standard Contractual Clauses together with additional safeguards. You can request a copy of the relevant safeguards using the contact details in section 16.
[Confirm and, if you can, name the storage region you selected in Supabase — e.g. “Sundae data is stored in the EU (Frankfurt) region.”]
8. How long we keep data
- Account and profile data — for as long as your account exists. When you delete your account, this data is deleted or anonymised without undue delay.
- Photos — deleted from storage when you remove them or delete your account.
- Matches, messages and feedback — kept while your account is active so the service and your insights work, and deleted or anonymised when you delete your account. Your match's copy of messages you sent them may remain visible to that person.
- Moderation records (reports, blocks, bans) — kept for up to [e.g. 12–24 months] after the event, or longer if needed to handle repeat abuse or a legal claim, even after account deletion, in a minimised form.
- Support emails — kept for up to [e.g. 24 months] after the request is closed.
- Website server logs — kept for a short period by our host (typically up to a few weeks) for security and troubleshooting.
- Where we are subject to statutory retention periods (for example under tax or commercial law), we keep the relevant records for as long as the law requires and restrict processing in the meantime.
9. How matching works
Once per weekly cycle, Sundae selects one candidate for you. The selection uses your personality profile, your stated preferences (who you want to meet, age range, distance), your location, and signals from your past matches and feedback. A compatibility score is calculated and shown to you.
This is an automated selection, but it does not produce a legal or similarly significant effect on you within the meaning of Art. 22 GDPR — it simply proposes a person to talk to, and you are free to end any match. If you would like a human to review how a match was generated, contact us.
10. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- restrict processing in certain cases (Art. 18);
- receive certain data in a portable, machine-readable format (Art. 20);
- object to processing based on our legitimate interests, on grounds relating to your particular situation (Art. 21);
- withdraw any consent you have given, at any time, without affecting processing that already took place (Art. 7(3)).
To exercise any of these rights, email support@sundae.pro. We may ask you to confirm the email address on your account so we can be sure it's you. We respond within one month.
11. Deleting your account
You can delete your account yourself at any time: Settings → Account → Delete account. This ends any active match, removes your profile and photos, and deletes or anonymises your data as described in section 8. Some minimised safety records may be retained as set out above. You can also ask us to delete your account by email.
12. Security
Data is transmitted over encrypted connections (TLS). Access to stored data is protected by database access rules that limit what each account can read and write, and by restricted administrative access. Passwords are stored only as salted hashes by our authentication provider. No online service can be guaranteed to be completely secure, but we work to protect your data and to notify you and the authorities if a breach ever legally requires it.
13. Age limit
Sundae is only for people aged 18 or older. We do not knowingly process data of anyone under 18. If we learn that an account belongs to a minor, we will delete it.
14. This website
This website is a static information site. It does not set advertising or analytics cookies and does not embed third-party trackers. A theme colour preference and similar minor settings, if any, are stored only in your browser.
When you load the site, our hosting provider automatically receives technical information that your browser sends, such as your IP address, the requested page, referrer, timestamp and user-agent. This is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in operating and securing the site, and is kept only briefly.
The waitlist form does not send data to a server. When you submit it, your own email app opens a pre-filled message to support@sundae.pro; the email is only sent if you send it. We use the address you provide to notify you about the launch, and delete it afterwards or on request.
15. Changes to this policy
We may update this policy as the app evolves or the law changes. The “last updated” date at the top always reflects the current version. For significant changes we will give notice in the app or by email before they take effect.
16. Contact and complaints
For any privacy question or request, contact support@sundae.pro.
If you believe our processing of your data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement. The authority responsible for the controller is:
[Your competent authority — e.g. Der Landesbeauftragte für den Datenschutz [BUNDESLAND], address, website. Fill in based on where you live.]