Privacy

What we collect, and why

Selfie check (biometric data)

Before you join, the app asks for a short selfie check: you turn your head a few times while the camera takes about a dozen small pictures. The app also sends data about the phone's movements during the check and, on iPhones with Face ID, a small depth map of your face. Our own software, running on our servers, checks that the pictures show a live person in front of our app, compares your face with your profile photos and with people we've banned, and estimates your age. A person on our team then reviews the result and decides. No outside company processes your face.

We keep one picture as your selfie. The other pictures, the movement and the depth map are deleted as soon as they're checked, within seconds.

To know the check comes from our real app on a real phone, the app asks Apple (App Attest) or Google (Play Integrity) for proof; they never see your face. If an account is banned, we ask Apple or Google to remember that phone with a yes/no mark they keep for us. It holds no personal data, and a new account on that phone is then looked at more carefully, never blocked solely because of that mark.

This is biometric data, so we only do it with your explicit consent, which you give in the app before taking the selfie. You can say no, but then you can only browse, not join. The selfie is never shown to other people and never used for anything else, including advertising or training models.

We keep the selfie and the comparison results until your account is erased, 7 days after you delete it, and for at most 3 years after you last use the apps, whichever comes first.

Flirtify

Using a dating app can say something about your love life or sexual orientation. Flirtify activities and who joins them are never shown in Hangout or Bondable, never in public search, and never through our public API.

Who sees what

People in an activity see the first names, photos and trust signals of those who joined. A host's photo is also shown in the apps to people with a checked selfie, on Flirtify, only to people whose dating preferences align with the host's. The exact place is shown only to people who joined, the day before. Your activity in one app is never shown in another. Blocks and bans apply in every InRealLife app.

Who processes data for us

• Hetzner Online GmbH (Germany) — our servers and file storage, in Helsinki, Finland.
• Resend (US) — sends sign-in codes and account email.
• Google (US) — our mailbox, when you write to us, and Google Analytics, which counts visits to this website while statistics are on.
• Cloudflare (US) — sits in front of this website, protects it, and counts visits without cookies.
• Ollama Cloud (US) — titles can be written by a language model hosted by Ollama Cloud, which gets the text, the kind and the app, never who wrote it, the place or the time.
• Apple and Google — deliver notifications, and sign you in if you choose Sign in with Apple or Google.
• And service providers that help us run and moderate the apps.

On phones that have one, an on-device language model writes a draft that never leaves the phone.

Each provider receives only the data needed for its role. When data goes to the US (Resend, Google, Cloudflare, Apple), it's covered by the EU–US Data Privacy Framework.

How long we keep it

• Your profile, photos and selfie: until your account is erased, 7 days after you delete it (selfie: see above).
• Reports and moderation decisions about you: 2 years after you delete your account, so banned people can't simply start again.
• If you were banned: a one-way fingerprint of your email and of the addresses you used before, and your Apple or Google account ID, so you can't simply sign up again.
• Your rough area: until your account is erased, replaced each time it changes.
• Phone model and system version: for as long as the associated sign-in or selfie-check records are retained.
• Activities you view: 14 days, to send one reminder when a new date is scheduled. Never shown to anyone. We count how many people open each plan, without identifying who viewed it, to see which plans people want.
• Server logs, which include IP addresses: 30 days.

Your rights

In the app, Account → Your data lets you download a copy of everything we keep about you across all three apps, or delete your profile or account. Your selfie image isn't in the file: ask for it by email.

You can also ask to see, correct, download or delete your data, object to how we use it, or withdraw consent at any time. Write to privacy at inreallife.technology and we'll answer within a month. If you're unhappy with our answer, you can complain to the CNIL (cnil.fr), France's data protection authority, or to the one where you live.

If you live in a US state with a privacy law (such as California), you have the same rights. We don't sell or share personal information, and we don't use it for targeted advertising.

Delete your account

In the app: Account → Your data → Delete my whole account. At once, it signs you out of every InRealLife app, takes you out of the plans you joined and cancels the ones you host. Your data is erased 7 days later, so reports about you can still be looked at. If you're banned in those 7 days, we keep what's listed above for bans.

Without the app: email privacy at inreallife.technology from the address you signed up with, with the subject "Delete my account". We delete it within 30 days and confirm by email.