Scope and accountable company
This draft covers the One Match website and planned iOS and Android apps in the United States and Canada.
Add the legal company name, business address, privacy officer, applicable entities, effective date, and Quebec launch decision.
Data One Match plans to collect
| Category | Examples |
|---|---|
| Early access | Name, email address, and date of birth submitted through the website form before launch. Collected to contact you about early access and to confirm you are 18 or over. Sent to and held in a Google Form. |
| Account and contact | Phone number, verification codes, account state, join month. |
| Identity verification | Stripe verification reference, result, consent time, derived age, and a document-number hash. One Match does not plan to store document images, selfies, or biometric templates. |
| Profile | Photos, prompts, answers, preferences, intentions, city or metro area, and optional facts. |
| Matching and messages | Interests, passes, matches, decisions, timestamps, chat, unmatches, and delivery state. |
| Relationship records | Fixed-choice answers, relationship duration, who ended it, submission time, and publication state. |
| Safety and support | Reports, blocks, safety answers, evidence supplied to support, appeals, and moderation actions. |
| Billing | Stripe customer and subscription references, status, charges, refund timing, disputes, and consent records. One Match does not plan to store full card numbers. |
| Technical | Session, device, IP, security, error, and fraud-prevention events. Logs must exclude direct personal content. |
Why the data is used
- Create and secure an account.
- Confirm adult eligibility and prevent duplicate identities.
- Build profiles, find eligible candidates, and operate matches.
- Deliver chat, deadlines, decisions, records, and required notices.
- Process subscriptions, cancellation, refunds, and disputes.
- Moderate content, investigate reports, enforce rules, and handle appeals.
- Prevent fraud, protect the service, meet legal duties, and improve reliability.
One Match’s product plan prohibits ads, data sales, and third-party tracking.
Who may see member information
- Eligible members see profiles in the pool, without relationship records.
- A current match sees the matched profile, chat, and published relationship records allowed by the server.
- Safety reports stay inside the trust and safety process.
- Authorized operators see only what their role and the investigation require.
- Service providers receive data needed to perform their contracted task.
- Data may be disclosed when law requires it or to address a credible threat.
One Match must never decide access by matching email addresses or other changeable user fields.
Service providers and transfers
Stripe is the planned provider for identity verification and direct billing. Google receives early-access form submissions, because that form is a Google Form. Other providers for hosting, storage, push delivery, support, email, and error monitoring have not been approved.
Name every provider, processing location, transfer safeguard, subprocessor list, and contract role before this policy becomes effective.
Retention and deletion
One Match should keep personal data only as long as needed for the stated purpose, security, disputes, and law. Profile photos and profile content are planned for removal on account deletion.
The exact retention period for chat after a match ends is open. Counsel and product must also decide what happens to records written, records received, outstanding record obligations, safety reports, billing evidence, and banned-identity anchors after deletion.
No final deletion promise may ship until those decisions are complete.
Access, correction, deletion, and regional rights
Depending on where a member lives and which law applies, rights may include access, correction, deletion, portability, withdrawal of consent, appeal, and freedom from discrimination for exercising a privacy right.
California notice requirements, Washington consumer health-data rights, Canadian privacy principles, and provincial rules need final counsel mapping. See the draft State Privacy Notices and Consumer Health Data Notice.
Contact and complaints
Email hello@onematch.club with “Privacy request” in the subject. Do not email an ID image.
Add verified request methods, identity-check steps, response deadlines, authorized-agent rules, appeal handling, regulator contacts, and a toll-free method if required.