Legal draft

Privacy Policy

A plain account of the data One Match plans to collect, why it needs it, and who may receive it.

Draft — not in effect

Counsel must approve this policy. Company identity, retention periods, deletion treatment, vendors, and regional rights remain incomplete.

Product draft · 1 August 2026

Scope and accountable company

This draft covers the One Match website and planned iOS and Android apps in the United States and Canada.

Decision needed

Add the legal company name, business address, privacy officer, applicable entities, effective date, and Quebec launch decision.

Data One Match plans to collect

CategoryExamples
Early accessName, email address, and date of birth submitted through the website form before launch. Collected to contact you about early access and to confirm you are 18 or over. Sent to and held in a Google Form.
Account and contactPhone number, verification codes, account state, join month.
Identity verificationStripe verification reference, result, consent time, derived age, and a document-number hash. One Match does not plan to store document images, selfies, or biometric templates.
ProfilePhotos, prompts, answers, preferences, intentions, city or metro area, and optional facts.
Matching and messagesInterests, passes, matches, decisions, timestamps, chat, unmatches, and delivery state.
Relationship recordsFixed-choice answers, relationship duration, who ended it, submission time, and publication state.
Safety and supportReports, blocks, safety answers, evidence supplied to support, appeals, and moderation actions.
BillingStripe customer and subscription references, status, charges, refund timing, disputes, and consent records. One Match does not plan to store full card numbers.
TechnicalSession, device, IP, security, error, and fraud-prevention events. Logs must exclude direct personal content.

Why the data is used

  • Create and secure an account.
  • Confirm adult eligibility and prevent duplicate identities.
  • Build profiles, find eligible candidates, and operate matches.
  • Deliver chat, deadlines, decisions, records, and required notices.
  • Process subscriptions, cancellation, refunds, and disputes.
  • Moderate content, investigate reports, enforce rules, and handle appeals.
  • Prevent fraud, protect the service, meet legal duties, and improve reliability.

One Match’s product plan prohibits ads, data sales, and third-party tracking.

Who may see member information

  • Eligible members see profiles in the pool, without relationship records.
  • A current match sees the matched profile, chat, and published relationship records allowed by the server.
  • Safety reports stay inside the trust and safety process.
  • Authorized operators see only what their role and the investigation require.
  • Service providers receive data needed to perform their contracted task.
  • Data may be disclosed when law requires it or to address a credible threat.

One Match must never decide access by matching email addresses or other changeable user fields.

Service providers and transfers

Stripe is the planned provider for identity verification and direct billing. Google receives early-access form submissions, because that form is a Google Form. Other providers for hosting, storage, push delivery, support, email, and error monitoring have not been approved.

Decision needed

Name every provider, processing location, transfer safeguard, subprocessor list, and contract role before this policy becomes effective.

Retention and deletion

One Match should keep personal data only as long as needed for the stated purpose, security, disputes, and law. Profile photos and profile content are planned for removal on account deletion.

Policy blocked

The exact retention period for chat after a match ends is open. Counsel and product must also decide what happens to records written, records received, outstanding record obligations, safety reports, billing evidence, and banned-identity anchors after deletion.

No final deletion promise may ship until those decisions are complete.

Access, correction, deletion, and regional rights

Depending on where a member lives and which law applies, rights may include access, correction, deletion, portability, withdrawal of consent, appeal, and freedom from discrimination for exercising a privacy right.

California notice requirements, Washington consumer health-data rights, Canadian privacy principles, and provincial rules need final counsel mapping. See the draft State Privacy Notices and Consumer Health Data Notice.

Contact and complaints

Email hello@onematch.club with “Privacy request” in the subject. Do not email an ID image.

Decision needed

Add verified request methods, identity-check steps, response deadlines, authorized-agent rules, appeal handling, regulator contacts, and a toll-free method if required.