Information you provide
We collect account email and authentication records, a private phone number and verification outcomes, legal name and birth date, public display name, gender/seeking preferences, city/state/ZIP, relationship and family preferences, biography, interests and optional profile details you choose to enter. We retain application status, submitted agreement versions, requested corrections and any recorded prelaunch offer.
Manual identity review collects government-ID images and a recent selfie. The images can incidentally show a document number, address or issuing country. We do not ask for a Social Security number, immigration documents or proof of ancestry. Legal identity, contact details, exact ZIP and ID/selfie evidence are not another applicant’s profile content.
Support and privacy requests include the contact details, category and message you provide. Do not send passwords, security codes, ID images or payment details through ordinary email or the contact form.
Technical data and camera choices
Hosting and security providers process request times, IP/network information, browser/device characteristics, login events and abuse-prevention signals. We use limited keyed comparison values where appropriate for verification and abuse limits. Camera/library access is requested for an upload action you choose; we do not access your photo library in the background.
Prepared uploads correct orientation, resize when necessary and remove camera/location metadata. You do not have to edit metadata yourself. A local preparation preview does not itself upload the image. We do not use photo GPS for matching, and do not place raw ID images, private messages, passwords or codes in general analytics.
Why we use information
We authenticate accounts, send requested email/phone verification, save applications, review identity/profile information, explain decisions, prevent fraud and abuse, provide support, record agreements and qualifying offers, honor privacy requests and meet applicable legal obligations. We use only the information necessary for each purpose.
During early registration, profiles stay private and applicants cannot view or contact one another. Optional religion or cultural/ethnic fields require separate choices before display or recommendation use. Acknowledging a privacy notice does not switch those choices on. Any later member features or materially new uses will receive appropriate notice and permission before they begin.
Manual identity-review limits
Authorized reviewers visually compare submitted ID and selfie images and read identity/age information. We do not construct facial-geometry templates or perform automated face matching, automated liveness detection or criminal-background screening in this process. We do not verify character, intentions, citizenship, immigration status or ancestry.
ID/selfie images are private evidence for review, not profile-gallery photos, marketing material or testimonials. Staff access is restricted and audited, and administrator MFA is required. No security measure or visual review can guarantee authenticity or prevent every incident.
Providers and necessary disclosures
Cloudflare supplies hosting, DNS and security services; Supabase supplies authentication, database and private storage; Resend sends authentication email; Twilio Verify delivers requested phone codes. Domain support aliases forward to an owner-controlled Google mailbox. Necessary providers process information to perform these services, and processing may occur in the United States or other locations.
Expo supports native development builds. Invited testing may include separately described, no-charge RevenueCat Test Store exercises using an opaque account identifier and purchase-status records; identity images and private messages are not sent to RevenueCat for that purpose. Real Google/Apple purchases and push delivery remain separate launch integrations. Firebase, when used for notification transport, does not replace the account database.
We do not sell personal information or share it for cross-context behavioral advertising. We may disclose necessary information for valid legal process, to address serious harm or misuse, or in a business transfer subject to applicable protections and notice. We do not publish identity documents or treat registration images as permissioned endorsements.
SMS privacy
A phone number in a support form does not enroll you in SMS. Requesting a verification code authorizes the requested transactional text, not marketing. Twilio processes the destination number and delivery/security information. We retain limited consent/request evidence, verification outcomes and safe delivery references for support and fraud prevention.
Mobile information, opt-in data and SMS consent are not sold, rented or shared with third parties or affiliates for marketing/promotional purposes. Necessary messaging providers use this data to deliver and protect requested texts. Reply STOP or HELP where supported or contact support@afriheartmc.com; opting out can prevent phone verification but does not waive privacy rights.
Retention and image removal
Application/profile information is retained while your account remains active or awaiting launch. ID/selfie images are scheduled for removal 30 days after submission, or 30 days after a review decision when reviewed. Unfinished or cancelled uploads are scheduled for removal after seven days. An earlier removal request can be made through the available document controls or privacy support.
Document consent, access and review-outcome records can remain after the images are removed, so approval need not require storing the image indefinitely. Specifically identified legal preservation holds can delay removal. Jobs retry provider failures; removal is confirmed after storage deletion succeeds rather than merely after clicking a button.
After a confirmed deletion request, ordinary account/profile/media data is targeted for removal within 30 days. Backup copies must be isolated from ordinary use and rotated within 35 days. Specifically justified financial, material safety or audit evidence may be retained for up to seven years, or another period required by law. A hold preserves identified records for its purpose; it does not allow continued member access.
Routine security logs target 90 days, with provider-specific log windows where applicable. Routine support/request evidence targets up to two years after resolution unless a shorter obligation or an identified safety/legal purpose applies. Unused signup authorization records expire promptly and are cleaned after their short security/rate-limit window.
Privacy rights and your controls
Contact privacy@afriheartmc.com or use the public account-deletion/contact page to request access, correction, deletion or an available export, ask about consent or exercise additional rights provided by applicable law. We verify ownership proportionately, explain exceptions and respond under applicable deadlines. You may ask for review of a denied request or use an authorized agent where law permits. We do not retaliate for exercising privacy rights.
An export contains your information and your application/offer history, not other members’ messages, internal reviewer notes, security secrets or legal-hold details. Deleting an account prevents use of account-bound features and does not automatically cancel a future Google/Apple subscription. Store cancellation controls will be provided before purchases begin.
Cookies, age and changes
Necessary session/security cookies support login, recovery, fraud prevention and protected administration. We do not currently run behavioral advertising or third-party marketing trackers. Nonessential tracking, if introduced, will be disclosed and obtain any required choice before use.
The member service is for adults 20 or older. Report suspected underage or harmful use to safety@afriheartmc.com. For immediate danger, contact local emergency services. Material policy changes receive a new version/date and any notice or consent required before new processing begins.
Contact for privacy
AfriHeart Match Connect LLC. Privacy requests: privacy@afriheartmc.com. General support: support@afriheartmc.com. Safety: safety@afriheartmc.com. Legal questions: legal@afriheartmc.com. You may also use the website contact form; do not include identity images or account secrets.