Privacy Policy
Last updated: 9 November 2026
This is a translation for your convenience. If there are any differences, the German version applies.
DateMate is an app for planning meet-ups and dates with friends and your partner. We only process the data needed for these features. There is no advertising, no tracking, no analytics tools and no sharing of data for advertising purposes.
1. Controller
For any questions about data protection or to exercise your rights, please write to this email address.
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, password (stored only as an encrypted hash), recovery code (hash only), whether you sign in with Apple or Google | Account, signing in on several devices | Contract (Art. 6(1)(b) GDPR) |
| First name, profile picture, phone number, birthday, free times, app language | Profile visible to your linked mates; birthday reminders; planning together | Contract (Art. 6(1)(b) GDPR) |
| Mates, dates, chat messages, photos, reflections (mood, stars, favourite moment), bucket list, places, cost and bring lists | The actual features of the app | Contract (Art. 6(1)(b) GDPR) |
| Location (only if you allow it) | Places near you, weather, “meet in the middle”. Only a location rounded to about 1 km is stored; your mates only see this approximate area. | Consent (Art. 6(1)(a) GDPR), can be withdrawn at any time in your profile |
| Push identifier of your device (only if you allow notifications) | Notifications about new requests, acceptances, messages and photos, a reminder the evening before a date, a heads-up before a flame goes out | Consent (Art. 6(1)(a) GDPR), can be withdrawn at any time |
| Reports: reason, your description, name and email address of the reporting and the reported person, the last up to 20 messages from the reported person to the reporting person | Reviewing reports, protection against harassment and abuse | Legitimate interest (Art. 6(1)(f) GDPR) and legal obligations (Art. 6(1)(c) GDPR, Digital Services Act) |
| Email address and a one-time 6-digit code (stored only as a checksum, valid for 30 minutes) | Confirming that the email address belongs to you when creating an account; sent via Cloudflare | Contract (Art. 6(1)(b) GDPR) |
| Time and version of your acceptance of the terms of use and privacy policy | Proof of acceptance | Contract and legitimate interest (Art. 6(1)(b) and (f) GDPR) |
| Anonymous error reports from the app: error text, file and line, app version, device type (e.g. “iOS Safari”), open screen – without name, email, user ID, IP address or content | Finding and fixing bugs | Legitimate interest (Art. 6(1)(f) GDPR) |
| Questions to the assistant “Novi” | Answering your question | Contract (Art. 6(1)(b) GDPR) |
| Shortened checksum of your IP address (not the IP itself), technical server logs | Protection against abuse (e.g. at most 40 questions per hour to Novi), security and troubleshooting | Legitimate interest (Art. 6(1)(f) GDPR) |
3. Who sees your data
Your dates, messages and photos are only visible to you and to the people you have linked with in the app who take part in the respective date. There are no public profiles and no way to search for strangers.
4. Service providers (processors)
Your app only talks to our own server. Third-party services are only contacted from this server – they see neither your IP address nor your contact details. The only exception: if you choose “Sign in with Apple” or “Sign in with Google”, Apple’s or Google’s sign-in page opens directly; their privacy policies also apply.
| Provider | Task | Which data |
|---|---|---|
| Cloudflare, Inc. (USA) | Hosting, database, photo storage, sending the confirmation email, fallback AI (Workers AI) | All data listed above is stored there |
| Anthropic, PBC (USA) | AI assistant “Novi” (Claude model) | Only your question, your city, the date and the weather – no names, mates or dates. By default, Anthropic does not use this data to train its models. |
| OpenStreetMap Foundation (UK), FOSSGIS e. V. (Germany), Private.coffee (Austria) | Place names and place suggestions (Nominatim, Overpass) | Coordinates rounded to about 100 m |
| Open-Meteo (Switzerland) | Weather | Coordinates rounded to about 1 km and a date |
| Apple, Google, Mozilla, Microsoft | Delivery of push notifications (only if allowed) | Encrypted notification and device identifier |
| Apple Distribution International Ltd. (Ireland), Google Ireland Ltd. (Ireland) | “Sign in with Apple” or “Sign in with Google” – only if you choose this sign-in | You sign in directly with Apple or Google. We only receive your verified email address (with Apple, an anonymous relay address if you wish) and your first name – no password, no contacts. |
Transfers to providers in the USA are based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework) or on EU standard contractual clauses (Art. 46 GDPR). Switzerland and the United Kingdom are covered by an adequacy decision.
5. How long we keep data
- Account data and content: until you delete your account.
- When you delete your account, your account, profile, links, photos, reflections and responses are removed. Messages in shared chats remain for the other participants but appear as “Deleted account”. Dates without any other participant are deleted completely.
- Abuse protection (IP checksum): at most two hours.
- Reports: up to 12 months after the review is completed, longer only if needed for legal claims or requests from authorities.
- Anonymous error reports: 30 days (at most the latest 300).
- Database backups are overwritten after 30 days at the latest.
6. Storage on your device
The app also stores your data in your browser’s or device’s storage so that it is fast and works offline. No tracking cookies are used. This storage is strictly necessary for operating the app (§ 165(3) Austrian Telecommunications Act 2021).
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time. You can exercise many of these directly in the app: under Menu → Privacy & account you can download your data as a file (with profile, mates, dates, messages, reflections and links to your photos) and delete your account.
Deleting your account without the app: Send an email with the subject “Delete account” from your account’s email address to emmabrandl071206@gmail.com. We will delete your account and the data listed above within 30 days and confirm this to you.
You can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
8. Minimum age
DateMate is intended for people aged 16 and over.
9. No automated decisions
There are no automated decisions or profiling within the meaning of Art. 22 GDPR. The assistant Novi only makes suggestions when you ask it.