Data Protection

This privacy notice is drafted for a German / EU launch and is structured around the transparency requirements of the GDPR.

1. Data we process

• Account and authentication data such as email address and account identifiers.
• Profile data, photos, preferences, interests, age, location-related information and discovery settings.
• Interaction data such as likes, passes, matches, messages, Roses, introductions, blocks and reports.
• Subscription, entitlement and purchase-event information.
• Technical and security information required to operate, protect and troubleshoot the service.
• Support requests and deletion / data-rights requests.

2. Purposes and legal bases

We process data to perform the user contract and provide the app (Art. 6(1)(b) GDPR), comply with legal obligations (Art. 6(1)(c)), protect users and the service based on legitimate interests where applicable (Art. 6(1)(f)), and rely on consent where processing requires it (Art. 6(1)(a)).

3. Special categories and sensitive information

Dating services may involve information that can reveal sensitive aspects of a user’s private life. 2XiDES should only process such data where a valid legal basis exists and where appropriate safeguards are in place. Product forms and disclosures must be reviewed before production.

4. Recipients and processors

Depending on the production configuration, service providers may include hosting and CDN providers, backend/database providers, subscription-management providers, app-store operators, notification providers, email/support providers and security providers. Processor agreements and transfer safeguards should be documented before launch.

5. International transfers

Where personal data is transferred outside the EEA, 2XiDES will use an applicable transfer mechanism such as an adequacy decision, Standard Contractual Clauses, or another lawful safeguard.

6. Retention

Data is retained only for as long as needed for the relevant purpose, subject to legal, accounting, fraud-prevention, security and moderation retention obligations. Account deletion does not necessarily require deletion of data that must legally be retained or preserved for legitimate safety reasons; such data should be minimised, restricted and retained only for the necessary period.

7. Your rights

You may have rights of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. You may also lodge a complaint with a competent data-protection supervisory authority.

8. Website storage and cookies

The current landing page is designed without advertising cookies or optional analytics. If optional analytics, marketing technologies or similar access to user devices are introduced, they must be activated only after any legally required consent, including under § 25 TDDDG.

9. Contact

Privacy requests: support@2xides.com