Privacy Policy

Privacy Policy

iDeal DP — operated by Dynamic Dating Group, Inc.

Version 1.3 — Effective September 20, 2026

This American English version is the reference version. Translations are provided for convenience; in the event of any discrepancy, this version controls.

---

At a Glance

This summary does not replace the full policy, but covers the essentials.

---

1. Who Is Responsible for Your Data

iDeal DP is not a company. iDeal DP is a brand and service owned and operated exclusively by Dynamic Dating Group, Inc., the sole controller of your data (a "controller" under the GDPR, a "business" under the CCPA). The company maintains its sole corporate headquarters in the United States of America.

Representative in the European Union (Article 27 GDPR and Article 13 DSA): Inga Metra — Latvia — — contact-us@idealdp.com — +48 732 736 288

Any data subject and any supervisory authority may contact the representative, in addition to or instead of the company.

---

2. Scope

This policy covers the iDeal DP mobile app (iOS, Android), the web application (app.idealdp.com), the public website (idealdp.com), our APIs, our transactional communications, and our internal administration console.

It does not cover third-party services you access (Apple, Google, Stripe, carriers, linked sites), which are governed by their own policies.

---

3. What We Cannot See

By technical design:

• The content of your messages and calls is end-to-end encrypted (X25519/ECDH + AES-256-GCM; DTLS-SRTP for calls). We carry encrypted blobs that we cannot decrypt.
• Your conversation backup is encrypted on your device (AES-256-GCM) before any transmission to Google Drive, iCloud, or a local folder. The key is derived from a 12-word recovery phrase (BIP39) that we do not know and cannot recover.
• Your contact list is read locally so you can invite people you know. It is not uploaded to our servers.
• Message translation and the liveness face detection run on your device.

As a result, we cannot restore lost history, nor produce message content — including in response to a lawful order. We hold only encrypted data and metadata.

---

4. Data We Process

4.1 Categories

4.2 What We Do Not Collect

We do not collect payment card data, the plaintext of your messages, your address book, advertising identifiers for third-party targeting, or data from data brokers.

4.3 Data About Third Parties

When you save a Safe Date trusted contact, you provide us a third party's name and phone number. You must inform them and confirm their agreement. That person may request deletion of their data at privacy@idealdp.com.

---

5. Purposes and Legal Bases

Withdrawing consent. Where processing relies on your consent, you may withdraw it at any time, without retroactive effect, from the app settings or by writing to us.

---

6. Sensitive Data — Specific Commitments

6.1 Biometric data

What we process. Liveness selfies and digital facial templates (512-dimension vectors), used solely to: confirm that the person present is live and matches the document provided, and detect the creation of multiple accounts by the same person.

What we do not do. We do not sell, lease, trade, or otherwise profit from any biometric data. We do not use it for advertising, for facial recognition in public spaces, or to identify people outside the Service.

Consent. Biometric processing occurs only after explicit, separate, written consent, obtained on a dedicated screen before capture, with information on the purpose, retention period, and destruction method.

Retention and destruction schedule (published in accordance with the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and Chapter 19.375 RCW of the State of Washington):

Biometric consent may be withdrawn at any time; withdrawal triggers destruction within the periods above and loss of certified status.

6.2 Data revealing sexual orientation, religion, or health

The "sought orientation," "intentions," "religion," "smoking," "children," "height," and "weight" fields may reveal sensitive data. These fields are optional and have per-field visibility controls (public, private, or certified members only). Completing them constitutes explicit consent to their publication at the visibility level you choose.

6.3 Precise location

Profile discovery. With foreground permission, the latest device coordinates and accuracy are stored on your private profile when you sign in and when the app returns to the foreground. They are used to determine city and country, calculate rounded distances on the server and rank nearby profiles. Other members receive only the city and rounded distance, never the coordinates. Only the latest fix is retained; it is replaced on refresh and deleted with the profile. If you decline or withdraw permission, your account remains accessible but location-based discovery and affinity features are limited. This purpose does not collect location in the background.

Safe Date. Its existing rules are unchanged. Precise coordinates are processed only when you start a sharing session, are masked when that session expires (24-hour cap), and the public tracking link is token-based and expires automatically.

Crossings and location alerts. Background location may be used only after you separately enable one of these features and grant the corresponding system permission. Disabling the feature or withdrawing the permission stops future collection for that purpose.

6.4 Minors

The Service is prohibited to anyone under 18. We do not knowingly collect data from minors. Any account identified as belonging to a minor is deleted and its data erased. Reports: safety@idealdp.com.

---

7. Artificial Intelligence and Profiling

7.1 Processing involved

Encrypted private messages are never transmitted automatically to an AI provider. A plaintext excerpt is transmitted only when you deliberately select it and separately confirm sharing it with Coach Connect after detected contact details are automatically reduced.

Coach Connect's own history is encrypted with AES-256-GCM before it is written to the device's local database, using a separate per-account key held by the platform's secure storage. It is automatically deleted after 30 days and can be erased immediately from the Coach. To maintain conversational continuity, up to the last eight turns are decrypted on the device and sent with the next question after your explicit consent to this feature.

7.2 Providers, transfers, and retention

For Coach Connect, your question, up to the last eight Coach turns, and only the contexts you enabled are sent to DeepSeek (primary provider) or Mistral AI (fallback provider). No encrypted private-messaging history is read automatically.

• DeepSeek — Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China. DeepSeek processes and stores data in the People's Republic of China. Its Open Platform Terms effective April 29, 2026 do not state a fixed retention period for API Inputs and Outputs. Its general terms state that, after the announced de-identification, Inputs and Outputs may be used to maintain or improve the service unless the provider-account setting opts out. The transfer and absence of a fixed period are presented to you before Coach activation.
• Mistral AI — Paris, France. For its standard API, Mistral states that it keeps Inputs and Outputs for generation and then for 30 rolling days for abuse monitoring, unless zero data retention is activated. Its Commercial Terms govern training based on the account's opt-in/opt-out setting, submitted Feedback, and any use of preview models. Coach Connect uses neither a preview model nor provider Feedback.

You may refuse these transfers by leaving Coach Connect disabled and may withdraw your consent at any time. Withdrawal stops future transmissions but does not retroactively delete copies still held by a provider under its own periods; you may exercise your rights through us at privacy@idealdp.com.

7.3 No automated decisions with legal effect

No suspension, ban, or certification denial is issued solely on the basis of automated processing: human review always occurs (Article 22 GDPR). You may obtain human intervention, express your point of view, and contest the decision.

7.4 Recommender system transparency

Profile ranking relies primarily on: your stated criteria, distance, semantic similarity between profiles, activity and mutual interest, and quality and safety signals. The main parameters are disclosed in accordance with Article 27 of the Digital Services Act. You can influence ranking through your filters and preferences.

---

8. Recipients and Service Providers

We do not sell your data. We disclose it only as follows:

We may also disclose data:

• to judicial or administrative authorities upon a lawfully grounded request; we review each request and, where the law permits, notify you;
• to our advisors, auditors, and insurers, bound by confidentiality;
• in connection with a merger, acquisition, or asset sale, subject to prior notice and continuity of protection;
• where necessary to protect the life or physical safety of a person.

Other Members. Your profile information, published content, reels, stories, posts, comments, and participation are visible according to the visibility settings you choose. What you make public can be copied or captured by third parties; we cannot prevent this.

---

9. Data Location and International Transfers

9.1 Where your data is hosted

The Service's hosting foundation is located in the European Union (Germany) and Switzerland, a country covered by a European Commission adequacy decision. Some optional operations described in this Policy nevertheless involve transfers outside the EEA: access by the U.S.-based operator, notifications, payments, and AI features, including Coach Connect transfers to DeepSeek in China. These transfers are limited to data necessary or expressly authorized for the relevant feature.

9.2 Access from the United States

Because Dynamic Dating Group, Inc. is established in the United States, its teams access systems hosted in Europe to operate, support, secure, and moderate the Service. That access legally constitutes a transfer under Chapter V of the GDPR.

It is governed by Standard Contractual Clauses adopted by the European Commission (Decision (EU) 2021/914), supplemented by a transfer impact assessment and by technical measures: end-to-end encryption of communications, logged and role-limited administrative access, and minimization of the data consulted.

9.3 Other jurisdictions

Swiss Members: Standard Contractual Clauses recognized by the Federal Data Protection and Information Commissioner. Canadian Members: contractual measures consistent with PIPEDA and, in Quebec, Law 25.

A copy of the applicable safeguards is available on request at privacy@idealdp.com.

---

10. Retention Periods

After account deletion: your user record is anonymized (email, phone, and password erased); devices and profile are deleted. Retained, attached to an anonymized record: collective contributions (posts, events created), and safety, moderation, and billing data for the periods above.

---

11. Security

Technical and organizational measures in place:

• end-to-end encryption of messages, media, and calls;
• encryption in transit (HTTPS/TLS) and at rest; private storage buckets with signed access;
• hashed phone numbers (SHA-256 with pepper), bcrypt passwords, hashed one-time codes (HMAC) with a 5-minute lifetime and a 5-attempt limit;
• short-lived access tokens (15 minutes) and refresh tokens (30 days); role-based access control;
• isolated administration console protected by two-factor authentication and fully logged;
• brute-force protection and payment webhook signature verification;
• encrypted local database on the device; keys in the Keychain or Keystore;
• hosting in European data centers certified to ISO/IEC 27001.

No system is infallible. You contribute to your own security by using a unique password, protecting your device, and keeping your recovery phrase offline.

Vulnerability reports: security@idealdp.com.

---

12. Your Rights

12.1 European Union, EEA, United Kingdom, and Switzerland

You have the rights of access, rectification, erasure, restriction, objection (including to legitimate-interest processing and profiling), portability, withdrawal of consent, the right not to be subject to a solely automated decision, and the right to give post-mortem instructions (France, Article 85 of the Data Protection Act).

Response time: one (1) month, extendable by two months where the request is complex.

12.2 United States

Depending on your state of residence — California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and other states with laws now in effect — you may have the following rights:

• to know and access the categories and specific pieces of personal information collected;
• to correct inaccurate information;
• to delete your information;
• to obtain a portable copy;
• to opt out of sale, of "sharing" for cross-context behavioral advertising, and of profiling producing significant effects;
• to limit the use of sensitive personal information;
• to be free from discrimination for exercising these rights;
• to appeal a denial. In California, you may also complain to the California Privacy Protection Agency or the Attorney General.

Required disclosures (California, CCPA/CPRA): in the preceding 12 months, we have not sold and have not "shared" personal information. Because the Service is limited to persons 18 and over, we do not sell minors' data. We honor universal opt-out signals such as Global Privacy Control.

An authorized agent may act on your behalf upon presentation of a written authorization. We may request proportionate identity verification.

12.3 Canada and Quebec

Rights of access, correction, withdrawal of consent, portability, de-indexing or cessation of dissemination, and information about automated decisions. You may complain to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.

12.4 Self-service tools

12.5 How to exercise your rights

Two methods are available:

1. in the app: Settings → My Data;
2. by email to privacy@idealdp.com, or by mail to the registered address (Section 1).

Members in the European Union may also contact our EU representative (contact-us@idealdp.com) or legal-eu@idealdp.com.

12.6 Complaints

• United States: your state Attorney General; in California, the California Privacy Protection Agency
• European Union: the supervisory authority of your habitual residence
• France: Commission nationale de l'informatique et des libertés (CNIL)
• Switzerland: Federal Data Protection and Information Commissioner
• United Kingdom: Information Commissioner's Office
• Canada: Office of the Privacy Commissioner; Quebec: Commission d'accès à l'information

---

13. Cookies

The public website and web application use cookies and similar technologies (local storage, device identifiers). Purposes, durations, and opt-out methods are detailed in our Cookie Policy.

Non-essential cookies are set only after your consent, obtained through a banner that makes refusing as easy as accepting, and withdrawable at any time.

---

14. Data Breaches

Where a breach is likely to result in a risk to your rights, we notify the competent supervisory authority within 72 hours (GDPR) and inform you without undue delay where the risk is high. Notification obligations under U.S. state laws and Canadian laws are applied in parallel.

---

15. Changes to This Policy

Any material change is notified at least 30 days before it takes effect, by email or in-app notification. Changes expanding the use of sensitive data require fresh consent. Prior versions are archived and available on request.

---

16. Contact Us

Dynamic Dating Group, Inc. 1111B S Governors Ave #3153, Dover, Delaware 19904, United States — +1 415 417-0755

---

Privacy Policy — version 1.3, effective September 20, 2026. Reference version.