Our entire business model is keeping your secret
Privacy Policy
Working draft · July 2026
What we never collect
Your real name. Your unmasked photos or voice. Your precise location. Your contacts. Your browsing outside the platform. The masking that protects you runs on your own device, so the originals never reach us and cannot leak from us.
What we do collect
An alias, the masked media you publish, your stated preferences, a coarse region, and the minimum operational records needed to run the service and keep it safe: verification status, payment tier, and abuse reports. Message content is sealed with member keys; we store ciphertext, not conversations.
What we log
As little as the platform can run on. Security events are kept briefly and then destroyed on a fixed schedule. We do not build advertising profiles, we do not sell data, and we do not share it with brokers. Ever.
Payments
Card billing appears under a neutral descriptor and is processed by specialist providers; we never see your full card number. A crypto option exists for members who prefer that no statement line exists at all.
Erasure
One tap deletes your profile, media, messages, and preferences immediately. Operational records required by law (for example payment records) are kept only as long as the law demands and are never linked back to a living profile.
Law enforcement
We comply with valid legal process and nothing else. Because of how the platform is built, what exists to hand over is minimal: no real names, no unmasked media, no precise locations, no readable conversations.
Your rights
Access, correction, portability, and deletion, honored in-app without a support ticket. Where GDPR, CCPA, or similar laws grant more, you have more.