Privacy policy
What we collect
- Account: your email address, or the account ID from Sign in with Apple or Google.
- Profile: name, date of birth, gender and who you're looking for, city, job, prompt, bio, interests, likes and dislikes, nationality if you add it, photos, the modes you use and your privacy settings.
- Location: if you allow it, we store your position rounded to about 5 km and use it only to work out distances and show nearby people, offers and events.
- Activity: likes and passes, matches, messages, blocks and reports, date invitations and post-date check-ins (including any safety note you write), events you're interested in, and perks you open or redeem.
- ID verification: if you choose to get verified, a selfie and a photo of your ID document, plus the decision and any reason for it.
- App analytics: what happens in the app, such as opening a screen, a swipe or sending a message, with your account ID, a random device ID, session ID, country market, platform and app version. Never the text of your messages. We keep these events for 13 months, and they stay with us: we don't use a third-party analytics service.
- Experiments: we sometimes test variations of a feature or of how suggestions are ranked, and record which one you were assigned.
- Voice notes: the recording and its length, if you send one. We only use your microphone while you are recording.
- Device: a push notification token if you allow notifications.
- Promo codes: any code you redeem and what it gave you.
- Campaign links: when someone opens one of our links (myhabibi.net/go/...), we record the link, the time, the country, the app or browser family, the operating system and the name of the referring site. We don't store the IP address, the full user agent or the full referring address. On our website, a first-party cookie remembers the campaign code for 30 days. If you then sign up, we record which campaign brought you.
- Beta waitlist: if you join the waitlist on myhabibi.net, your email address, the site language you used and, if you came from one of our campaign links, that link's code. We use it only to invite you to the beta, and delete it if you ask. To stop abuse we count sign-ups using a scrambled form of your IP address, which we can't read back and delete within a day.
How we use it
- To run the app: show you people nearby, create matches, deliver messages and notifications.
- To decide which country's rules and prices apply to you: from your phone's region and, if you are on our rest-of-world setting, the first location you share while setting up your account.
- To keep members safe: review reports and ID submissions, remove content and ban accounts that break the rules.
- To look for fake accounts: automated signals help our staff decide what to check, such as the same photo, bio or prompt on several accounts, many accounts on one device (from the random device ID), or very fast liking. A person makes every decision: the signals don't ban or hide anyone. Members can't see them, and they are deleted with your account.
- To improve suggestions and the app, for example ranking people by shared interests and distance, and seeing which features get used.
- To work out which campaigns bring people to MyHabibi.
- To send reminders in the app and by push, such as a new match you haven't answered. You can turn the push reminders off under Settings → Tips and reminders.
- To email you sign-in codes. We don't send marketing emails during the beta.
We don't sell your data and we don't show third-party ads during the beta. Partners with perks in the app may be shown as sponsored.
Who can see what
- Other members can see your name, age, city, job, bio, prompt, interests, photos, whether you're verified, when you were last active (unless you hide it in Settings) and a rounded distance, never your location. They also see your nationality if you choose to share it, the likes and dislikes you make public, and your country if you are far away. They don't see your date of birth or email address.
- Your gender and who you're looking for decide who you're shown to. They aren't displayed, but people you're shown to may work them out from that.
- If "blur until match" is on, your photos stay hidden until you match.
- Photos are stored at long random web addresses. Someone who already has an address, for example a past match, could still open it after you block them. Deleting the photo or your account removes the file.
- Only you and your match can read your chat and hear your voice notes. Our safety team can read a conversation and listen to its voice notes only when it has been reported. If you unsend a message or voice note, your match no longer sees it, but we keep the text or the audio file so that it can still be reviewed if the conversation is reported.
- People you block can't see you, and you can't see them.
- Partners who redeem a perk see the code and the time, not who you are.
- Our team can see the data they need for their role, and those actions are logged. If you ask for a copy of your data, we include the messages you sent.
ID documents
Your selfie and ID photo go to a private store that other members can't reach. Only our safety team can open them, through links that expire after 5 minutes, and each time it's logged. We delete both images once a decision is made, approved or rejected, and keep only the outcome. Images you uploaded but never submitted are removed during later clean-ups. Images still waiting for review are deleted if you delete your account.
Service providers
We use Supabase (database and storage, hosted in the EU, Frankfurt), Resend (sign-in emails), Apple (TestFlight, Sign in with Apple and push notifications) and Google (Google sign-in, Android push notifications and the website's fonts). They process data only to provide their service to us.
Keeping and deleting your data
We keep your data while your account is open. You can delete your account at any time in the app under Me → Delete account. This removes your profile, photos, matches and messages. We may keep a short record of safety actions, such as bans, to protect other members, and promo code records without your name.
If we ban an account, scrambled codes made from its sign-in details stay after the account is deleted, so that the same sign-in can't create a new account. We can't turn them back into those details.
If you delete your account while a report about you is still open, we keep scrambled codes made from your sign-in details, such as your email address or your Apple or Google account, for 90 days. We can't turn them back into those details. We use them only to stop the same sign-in from creating a new account during those 90 days, and then we delete them.
Reports you filed stay after you delete your account, without your name, so that our safety team can still act on them. If a report is still open, we also keep the message it points to, but not the rest of the chat.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it by emailing hello@myhabibi.net.
Age
MyHabibi is for people aged 18 and over. We don't knowingly collect data from anyone younger.